@open-mercato/ai-assistant 0.6.7-develop.6775.1.c2313bb8a3 → 0.6.7-develop.6785.1.1dd7cfac55

package/dist/modules/ai_assistant/lib/moderation-flag-recorder.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/moderation-flag-recorder.ts"],
+  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { AiModerationFlagRepository } from '../data/repositories/AiModerationFlagRepository'\nimport { emitAiAssistantEvent } from '../events'\nimport type { ModerationCategoryResult } from './moderation'\n\nconst logger = createLogger('ai_assistant')\n\nexport interface RecordModerationFlagInput {\n  tenantId: string | null\n  organizationId: string | null\n  agentId: string\n  userId: string\n  providerId: string\n  modelId: string\n  categories: Record<string, ModerationCategoryResult>\n}\n\n/**\n * Persists one `ai_moderation_flags` audit row and emits\n * `ai_assistant.moderation_flag.created`, best-effort.\n *\n * SAFETY CONTRACT: this MUST NEVER throw \u2014 the moderation rejection is the\n * primary effect and is thrown by the gate regardless. A missing tenant scope\n * (e.g. a system-scope caller) means the row cannot be tenant-scoped, so the\n * audit write is skipped. Any persistence/emit failure is logged and\n * swallowed so the user still receives the rejection.\n *\n * Spec `2026-06-04-ai-input-moderation-and-safety-identifiers`.\n */\nexport async function recordModerationFlag(\n  input: RecordModerationFlagInput,\n  container: AwilixContainer | undefined,\n): Promise<void> {\n  if (!container) return\n  if (!input.tenantId) return\n\n  let createdId: string | null = null\n  try {\n    const em = container.resolve<EntityManager>('em')\n    const repo = new AiModerationFlagRepository(em.fork())\n    const flag = await repo.create({\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n      agentId: input.agentId,\n      userId: input.userId,\n      providerId: input.providerId,\n      modelId: input.modelId,\n      categories: input.categories,\n    })\n    createdId = flag.id\n  } catch (error) {\n    logger.error('Failed to persist moderation flag (rejection still applies)', { err: error })\n    return\n  }\n\n  // Emit AFTER a successful write, detached so a failed emit never retroactively\n  // fails the audit insert.\n  try {\n    const flaggedCategories = Object.entries(input.categories)\n      .filter(([, value]) => value.flagged)\n      .map(([name]) => name)\n    await emitAiAssistantEvent('ai_assistant.moderation_flag.created', {\n      id: createdId,\n      tenantId: input.tenantId,\n      organizationId: input.organizationId,\n      agentId: input.agentId,\n      userId: input.userId,\n      categories: flaggedCategories,\n    })\n  } catch (error) {\n    logger.error('Failed to emit moderation_flag.created (audit row persisted)', { err: error })\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAC3C,SAAS,4BAA4B;AAGrC,MAAM,SAAS,aAAa,cAAc;AAwB1C,eAAsB,qBACpB,OACA,WACe;AACf,MAAI,CAAC,UAAW;AAChB,MAAI,CAAC,MAAM,SAAU;AAErB,MAAI,YAA2B;AAC/B,MAAI;AACF,UAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,UAAM,OAAO,IAAI,2BAA2B,GAAG,KAAK,CAAC;AACrD,UAAM,OAAO,MAAM,KAAK,OAAO;AAAA,MAC7B,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,YAAY,MAAM;AAAA,IACpB,CAAC;AACD,gBAAY,KAAK;AAAA,EACnB,SAAS,OAAO;AACd,WAAO,MAAM,+DAA+D,EAAE,KAAK,MAAM,CAAC;AAC1F;AAAA,EACF;AAIA,MAAI;AACF,UAAM,oBAAoB,OAAO,QAAQ,MAAM,UAAU,EACtD,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,MAAM,OAAO,EACnC,IAAI,CAAC,CAAC,IAAI,MAAM,IAAI;AACvB,UAAM,qBAAqB,wCAAwC;AAAA,MACjE,IAAI;AAAA,MACJ,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,YAAY;AAAA,IACd,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,gEAAgE,EAAE,KAAK,MAAM,CAAC;AAAA,EAC7F;AACF;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/moderation-policy.js

@@ -0,0 +1,24 @@
+import { parseBooleanWithDefault } from "@open-mercato/shared/lib/boolean";
+function resolveModerationPolicy(input) {
+  if (input.untrustedInput === true) return "enforced";
+  if (input.perAgentOverride !== null && input.perAgentOverride !== void 0) {
+    return input.perAgentOverride ? "on" : "off";
+  }
+  if (input.tenantWideOverride !== null && input.tenantWideOverride !== void 0) {
+    return input.tenantWideOverride ? "on" : "off";
+  }
+  const env = input.env ?? process.env;
+  return parseBooleanWithDefault(env.OM_AI_INPUT_MODERATION, false) ? "on" : "off";
+}
+function isModerationActive(policy) {
+  return policy === "enforced" || policy === "on";
+}
+function shouldFailClosed(policy) {
+  return policy === "enforced";
+}
+export {
+  isModerationActive,
+  resolveModerationPolicy,
+  shouldFailClosed
+};
+//# sourceMappingURL=moderation-policy.js.map

package/dist/modules/ai_assistant/lib/moderation-policy.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/moderation-policy.ts"],
+  "sourcesContent": ["/**\n * Input-moderation policy resolution.\n *\n * Resolves the effective moderation policy for an agent turn using a fixed\n * precedence (first match wins):\n *\n *   1. `agentDef.untrustedInput === true` \u2192 `enforced` (tenant cannot disable).\n *   2. Per-agent tenant override (`ai_agent_runtime_overrides` row with an\n *      `agent_id`) `input_moderation` \u2192 `on` / `off`.\n *   3. Tenant-wide override (row with `agent_id = NULL`) `input_moderation` \u2192\n *      `on` / `off`.\n *   4. Env default `OM_AI_INPUT_MODERATION` (parsed via `parseBooleanWithDefault`)\n *      \u2192 `on` / `off`.\n *   5. Default `off`.\n *\n * Steps 4 and 5 collapse into `parseBooleanWithDefault(env, false)`.\n *\n * @see .ai/specs/2026-06-04-ai-input-moderation-and-safety-identifiers.md\n */\n\nimport type { EnvLookup } from '@open-mercato/shared/lib/ai/llm-provider'\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\n\n/** Effective runtime moderation policy for a turn. */\nexport type ModerationPolicy = 'enforced' | 'on' | 'off'\n\n/** The per-agent display state shown in settings (adds `inherit`). */\nexport type ModerationPolicyDisplay = 'enforced' | 'on' | 'off' | 'inherit'\n\nexport interface ResolveModerationPolicyInput {\n  /** Whether the agent definition marks this surface as untrusted. */\n  untrustedInput?: boolean\n  /**\n   * `input_moderation` from the agent-scoped tenant override row, or\n   * `null`/`undefined` when the row is absent or leaves it unset (inherit).\n   */\n  perAgentOverride?: boolean | null\n  /**\n   * `input_moderation` from the tenant-wide override row (`agent_id = NULL`),\n   * or `null`/`undefined` when absent/unset (inherit).\n   */\n  tenantWideOverride?: boolean | null\n  /** Env lookup; reads `OM_AI_INPUT_MODERATION`. Defaults to `process.env`. */\n  env?: EnvLookup\n}\n\n/**\n * Resolves the effective moderation policy following the 5-step precedence.\n * Pure and synchronous \u2014 the runtime hydrates the override values from the DB\n * before calling this.\n */\nexport function resolveModerationPolicy(input: ResolveModerationPolicyInput): ModerationPolicy {\n  if (input.untrustedInput === true) return 'enforced'\n  if (input.perAgentOverride !== null && input.perAgentOverride !== undefined) {\n    return input.perAgentOverride ? 'on' : 'off'\n  }\n  if (input.tenantWideOverride !== null && input.tenantWideOverride !== undefined) {\n    return input.tenantWideOverride ? 'on' : 'off'\n  }\n  const env = input.env ?? process.env\n  return parseBooleanWithDefault(env.OM_AI_INPUT_MODERATION, false) ? 'on' : 'off'\n}\n\n/** Whether a resolved policy should run the moderation gate for the turn. */\nexport function isModerationActive(policy: ModerationPolicy): boolean {\n  return policy === 'enforced' || policy === 'on'\n}\n\n/**\n * Whether an *unavailable* moderation check (endpoint outage) should fail\n * closed (reject the turn) rather than fail open (allow it through). Per spec:\n * only `enforced` (untrusted) surfaces fail closed; opt-in `on` surfaces prefer\n * availability and fail open. Both paths log. (`off` never reaches the gate.)\n */\nexport function shouldFailClosed(policy: ModerationPolicy): boolean {\n  return policy === 'enforced'\n}\n"],
+  "mappings": "AAqBA,SAAS,+BAA+B;AA8BjC,SAAS,wBAAwB,OAAuD;AAC7F,MAAI,MAAM,mBAAmB,KAAM,QAAO;AAC1C,MAAI,MAAM,qBAAqB,QAAQ,MAAM,qBAAqB,QAAW;AAC3E,WAAO,MAAM,mBAAmB,OAAO;AAAA,EACzC;AACA,MAAI,MAAM,uBAAuB,QAAQ,MAAM,uBAAuB,QAAW;AAC/E,WAAO,MAAM,qBAAqB,OAAO;AAAA,EAC3C;AACA,QAAM,MAAM,MAAM,OAAO,QAAQ;AACjC,SAAO,wBAAwB,IAAI,wBAAwB,KAAK,IAAI,OAAO;AAC7E;AAGO,SAAS,mBAAmB,QAAmC;AACpE,SAAO,WAAW,cAAc,WAAW;AAC7C;AAQO,SAAS,iBAAiB,QAAmC;AAClE,SAAO,WAAW;AACpB;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/moderation.js

@@ -0,0 +1,109 @@
+import { z } from "zod";
+const DEFAULT_MODERATION_MODEL = "omni-moderation-latest";
+const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com/v1";
+const REQUEST_TIMEOUT_MS = 3e3;
+class AiModerationBlockedError extends Error {
+  constructor(categories) {
+    super("[internal] Input rejected by the content safety filter");
+    this.name = "AiModerationBlockedError";
+    this.categories = categories;
+  }
+}
+class AiModerationUnavailableError extends Error {
+  constructor(message, cause) {
+    super(`[internal] ${message}`);
+    this.name = "AiModerationUnavailableError";
+    this.cause = cause;
+  }
+}
+const moderationResponseSchema = z.object({
+  results: z.array(
+    z.object({
+      flagged: z.boolean(),
+      categories: z.record(z.string(), z.boolean()),
+      category_scores: z.record(z.string(), z.number())
+    })
+  ).min(1)
+});
+function mergeCategories(categories, scores) {
+  const merged = {};
+  for (const [name, flagged] of Object.entries(categories)) {
+    merged[name] = { flagged, score: scores[name] ?? 0 };
+  }
+  return merged;
+}
+async function postModeration(input) {
+  const baseURL = (input.baseURL ?? DEFAULT_OPENAI_BASE_URL).replace(/\/$/, "");
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+  try {
+    return await fetch(`${baseURL}/moderations`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${input.apiKey}`
+      },
+      body: JSON.stringify({
+        model: input.model ?? DEFAULT_MODERATION_MODEL,
+        input: input.text
+      }),
+      signal: controller.signal
+    });
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function createModerationService() {
+  return {
+    async checkInput(input) {
+      let lastError;
+      for (let attempt = 0; attempt < 2; attempt += 1) {
+        let response;
+        try {
+          response = await postModeration(input);
+        } catch (error) {
+          lastError = error;
+          continue;
+        }
+        if (response.status >= 500) {
+          lastError = new Error(`moderation endpoint returned ${response.status}`);
+          continue;
+        }
+        if (!response.ok) {
+          throw new AiModerationUnavailableError(
+            `moderation endpoint returned ${response.status}`
+          );
+        }
+        let json;
+        try {
+          json = await response.json();
+        } catch (error) {
+          throw new AiModerationUnavailableError("moderation response was not valid JSON", error);
+        }
+        const parsed = moderationResponseSchema.safeParse(json);
+        if (!parsed.success) {
+          throw new AiModerationUnavailableError(
+            "moderation response did not match the expected schema",
+            parsed.error
+          );
+        }
+        const result = parsed.data.results[0];
+        return {
+          flagged: result.flagged,
+          categories: mergeCategories(result.categories, result.category_scores)
+        };
+      }
+      throw new AiModerationUnavailableError(
+        "moderation endpoint unreachable after retry",
+        lastError
+      );
+    }
+  };
+}
+export {
+  AiModerationBlockedError,
+  AiModerationUnavailableError,
+  DEFAULT_MODERATION_MODEL,
+  createModerationService
+};
+//# sourceMappingURL=moderation.js.map

package/dist/modules/ai_assistant/lib/moderation.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/moderation.ts"],
+  "sourcesContent": ["/**\n * Input pre-moderation service.\n *\n * Wraps OpenAI's free `/v1/moderations` endpoint so the agent runtime can\n * screen the current user turn BEFORE the model call on surfaces that opt in\n * (or are forced on via `untrustedInput`). The service is intentionally pure:\n * it performs the HTTP check and returns category flags + scores, or throws\n * {@link AiModerationUnavailableError} when the endpoint is unreachable. It does\n * NOT persist audit records, emit events, or throw the user-facing block \u2014 the\n * runtime gate orchestrates those (see `agent-runtime.ts`).\n *\n * @see .ai/specs/2026-06-04-ai-input-moderation-and-safety-identifiers.md\n */\n\nimport { z } from 'zod'\n\n/** Default moderation model; override with `OM_AI_MODERATION_MODEL`. */\nexport const DEFAULT_MODERATION_MODEL = 'omni-moderation-latest'\n\nconst DEFAULT_OPENAI_BASE_URL = 'https://api.openai.com/v1'\nconst REQUEST_TIMEOUT_MS = 3000\n\n/** Per-category moderation outcome: whether it tripped and the model's score. */\nexport interface ModerationCategoryResult {\n  flagged: boolean\n  score: number\n}\n\n/** Result of an input moderation check \u2014 flags + scores only, never content. */\nexport interface ModerationResult {\n  flagged: boolean\n  categories: Record<string, ModerationCategoryResult>\n}\n\n/** Arguments for {@link ModerationService.checkInput}. */\nexport interface ModerationCheckInput {\n  /** The current user turn text to screen. */\n  text: string\n  /** Resolved OpenAI(-compatible) API key for the moderations endpoint. */\n  apiKey: string\n  /** Optional base URL override (defaults to the OpenAI public endpoint). */\n  baseURL?: string\n  /** Optional model override (defaults to {@link DEFAULT_MODERATION_MODEL}). */\n  model?: string\n}\n\n/** Port resolved from the DI container by the agent runtime. */\nexport interface ModerationService {\n  checkInput(input: ModerationCheckInput): Promise<ModerationResult>\n}\n\n/**\n * Thrown by the runtime gate (NOT the service) when flagged input is rejected\n * on an enabled/enforced surface. The SSE error path maps it to the\n * `moderation_blocked` code; the raw categories are never sent to the client.\n */\nexport class AiModerationBlockedError extends Error {\n  readonly categories: Record<string, ModerationCategoryResult>\n\n  constructor(categories: Record<string, ModerationCategoryResult>) {\n    super('[internal] Input rejected by the content safety filter')\n    this.name = 'AiModerationBlockedError'\n    this.categories = categories\n  }\n}\n\n/**\n * Thrown by {@link ModerationService.checkInput} when the moderation endpoint\n * is unreachable (timeout, network error, or non-2xx after one retry). The gate\n * decides fail-closed (enforced surfaces) vs fail-open (opt-in surfaces).\n */\nexport class AiModerationUnavailableError extends Error {\n  readonly cause?: unknown\n\n  constructor(message: string, cause?: unknown) {\n    super(`[internal] ${message}`)\n    this.name = 'AiModerationUnavailableError'\n    this.cause = cause\n  }\n}\n\nconst moderationResponseSchema = z.object({\n  results: z\n    .array(\n      z.object({\n        flagged: z.boolean(),\n        categories: z.record(z.string(), z.boolean()),\n        category_scores: z.record(z.string(), z.number()),\n      }),\n    )\n    .min(1),\n})\n\nfunction mergeCategories(\n  categories: Record<string, boolean>,\n  scores: Record<string, number>,\n): Record<string, ModerationCategoryResult> {\n  const merged: Record<string, ModerationCategoryResult> = {}\n  for (const [name, flagged] of Object.entries(categories)) {\n    merged[name] = { flagged, score: scores[name] ?? 0 }\n  }\n  return merged\n}\n\nasync function postModeration(input: ModerationCheckInput): Promise<Response> {\n  const baseURL = (input.baseURL ?? DEFAULT_OPENAI_BASE_URL).replace(/\\/$/, '')\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS)\n  try {\n    return await fetch(`${baseURL}/moderations`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${input.apiKey}`,\n      },\n      body: JSON.stringify({\n        model: input.model ?? DEFAULT_MODERATION_MODEL,\n        input: input.text,\n      }),\n      signal: controller.signal,\n    })\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/**\n * Builds the default {@link ModerationService}. Stateless and DI-friendly \u2014\n * registered in `di.ts` and overridable by downstream apps.\n */\nexport function createModerationService(): ModerationService {\n  return {\n    async checkInput(input: ModerationCheckInput): Promise<ModerationResult> {\n      let lastError: unknown\n      // One short-timeout attempt + one retry (R: outage mitigation).\n      for (let attempt = 0; attempt < 2; attempt += 1) {\n        let response: Response\n        try {\n          response = await postModeration(input)\n        } catch (error) {\n          lastError = error\n          continue\n        }\n        if (response.status >= 500) {\n          lastError = new Error(`moderation endpoint returned ${response.status}`)\n          continue\n        }\n        if (!response.ok) {\n          // 4xx is a configuration/credential error \u2014 not transient; do not retry.\n          throw new AiModerationUnavailableError(\n            `moderation endpoint returned ${response.status}`,\n          )\n        }\n        let json: unknown\n        try {\n          json = await response.json()\n        } catch (error) {\n          throw new AiModerationUnavailableError('moderation response was not valid JSON', error)\n        }\n        const parsed = moderationResponseSchema.safeParse(json)\n        if (!parsed.success) {\n          throw new AiModerationUnavailableError(\n            'moderation response did not match the expected schema',\n            parsed.error,\n          )\n        }\n        const result = parsed.data.results[0]\n        return {\n          flagged: result.flagged,\n          categories: mergeCategories(result.categories, result.category_scores),\n        }\n      }\n      throw new AiModerationUnavailableError(\n        'moderation endpoint unreachable after retry',\n        lastError,\n      )\n    },\n  }\n}\n"],
+  "mappings": "AAcA,SAAS,SAAS;AAGX,MAAM,2BAA2B;AAExC,MAAM,0BAA0B;AAChC,MAAM,qBAAqB;AAoCpB,MAAM,iCAAiC,MAAM;AAAA,EAGlD,YAAY,YAAsD;AAChE,UAAM,wDAAwD;AAC9D,SAAK,OAAO;AACZ,SAAK,aAAa;AAAA,EACpB;AACF;AAOO,MAAM,qCAAqC,MAAM;AAAA,EAGtD,YAAY,SAAiB,OAAiB;AAC5C,UAAM,cAAc,OAAO,EAAE;AAC7B,SAAK,OAAO;AACZ,SAAK,QAAQ;AAAA,EACf;AACF;AAEA,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,SAAS,EACN;AAAA,IACC,EAAE,OAAO;AAAA,MACP,SAAS,EAAE,QAAQ;AAAA,MACnB,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,MAC5C,iBAAiB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AAAA,IAClD,CAAC;AAAA,EACH,EACC,IAAI,CAAC;AACV,CAAC;AAED,SAAS,gBACP,YACA,QAC0C;AAC1C,QAAM,SAAmD,CAAC;AAC1D,aAAW,CAAC,MAAM,OAAO,KAAK,OAAO,QAAQ,UAAU,GAAG;AACxD,WAAO,IAAI,IAAI,EAAE,SAAS,OAAO,OAAO,IAAI,KAAK,EAAE;AAAA,EACrD;AACA,SAAO;AACT;AAEA,eAAe,eAAe,OAAgD;AAC5E,QAAM,WAAW,MAAM,WAAW,yBAAyB,QAAQ,OAAO,EAAE;AAC5E,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,kBAAkB;AACrE,MAAI;AACF,WAAO,MAAM,MAAM,GAAG,OAAO,gBAAgB;AAAA,MAC3C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,MAAM,MAAM;AAAA,MACvC;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,OAAO,MAAM,SAAS;AAAA,QACtB,OAAO,MAAM;AAAA,MACf,CAAC;AAAA,MACD,QAAQ,WAAW;AAAA,IACrB,CAAC;AAAA,EACH,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;AAMO,SAAS,0BAA6C;AAC3D,SAAO;AAAA,IACL,MAAM,WAAW,OAAwD;AACvE,UAAI;AAEJ,eAAS,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG;AAC/C,YAAI;AACJ,YAAI;AACF,qBAAW,MAAM,eAAe,KAAK;AAAA,QACvC,SAAS,OAAO;AACd,sBAAY;AACZ;AAAA,QACF;AACA,YAAI,SAAS,UAAU,KAAK;AAC1B,sBAAY,IAAI,MAAM,gCAAgC,SAAS,MAAM,EAAE;AACvE;AAAA,QACF;AACA,YAAI,CAAC,SAAS,IAAI;AAEhB,gBAAM,IAAI;AAAA,YACR,gCAAgC,SAAS,MAAM;AAAA,UACjD;AAAA,QACF;AACA,YAAI;AACJ,YAAI;AACF,iBAAO,MAAM,SAAS,KAAK;AAAA,QAC7B,SAAS,OAAO;AACd,gBAAM,IAAI,6BAA6B,0CAA0C,KAAK;AAAA,QACxF;AACA,cAAM,SAAS,yBAAyB,UAAU,IAAI;AACtD,YAAI,CAAC,OAAO,SAAS;AACnB,gBAAM,IAAI;AAAA,YACR;AAAA,YACA,OAAO;AAAA,UACT;AAAA,QACF;AACA,cAAM,SAAS,OAAO,KAAK,QAAQ,CAAC;AACpC,eAAO;AAAA,UACL,SAAS,OAAO;AAAA,UAChB,YAAY,gBAAgB,OAAO,YAAY,OAAO,eAAe;AAAA,QACvE;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/openai-compatible-presets.js

@@ -4,6 +4,8 @@ const OPENAI_PRESET = {
   baseURL: void 0,
   baseURLEnvKeys: ["OPENAI_BASE_URL"],
   envKeys: ["OPENAI_API_KEY", "OPENCODE_OPENAI_API_KEY"],
+  supportsInputModeration: true,
+  supportsEndUserSafetyIdentifier: true,
   defaultModel: "gpt-5-mini",
   defaultModels: [
     {

package/dist/modules/ai_assistant/lib/openai-compatible-presets.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/ai_assistant/lib/openai-compatible-presets.ts"],
-  "sourcesContent": ["/**\n * Curated registry of OpenAI-compatible LLM backends.\n *\n * Each preset is plain data \u2014 adding a new backend takes one entry in\n * this array, zero new adapter files, and zero changes to route handlers.\n * The {@link createOpenAICompatibleProvider} factory in `./llm-adapters/openai.ts`\n * turns each preset into a concrete `LlmProvider` at bootstrap time.\n *\n * Preset model catalogs are curated snapshots as of 2026-04-14 and should\n * be updated as upstream catalogs evolve. Users can always override the\n * selected model via the `OPENCODE_MODEL` env var without editing this\n * file.\n *\n * @see ./llm-adapters/openai.ts\n * @see .ai/specs/implemented/2026-04-14-llm-provider-ports-and-adapters.md\n */\n\nimport type { OpenAICompatiblePreset } from './llm-adapters/openai'\n\n/**\n * Standard OpenAI \u2014 default OpenAI API at api.openai.com.\n */\nconst OPENAI_PRESET: OpenAICompatiblePreset = {\n  id: 'openai',\n  name: 'OpenAI',\n  baseURL: undefined,\n  baseURLEnvKeys: ['OPENAI_BASE_URL'],\n  envKeys: ['OPENAI_API_KEY', 'OPENCODE_OPENAI_API_KEY'],\n  defaultModel: 'gpt-5-mini',\n  defaultModels: [\n    {\n      id: 'gpt-5-mini',\n      name: 'GPT-5 Mini',\n      contextWindow: 128000,\n      tags: ['budget'],\n    },\n    {\n      id: 'gpt-5',\n      name: 'GPT-5',\n      contextWindow: 128000,\n      tags: ['flagship'],\n    },\n    {\n      id: 'gpt-4o-mini',\n      name: 'GPT-4o Mini',\n      contextWindow: 128000,\n      tags: ['budget'],\n    },\n    {\n      id: 'gpt-4o',\n      name: 'GPT-4o',\n      contextWindow: 128000,\n    },\n  ],\n}\n\n/**\n * DeepInfra \u2014 hosts open-weight flagship models at 3-12\u00D7 lower cost than\n * the native APIs. The curated catalog targets the AI Assistant use case\n * (routing + tool use + conversational chat).\n */\nconst DEEPINFRA_PRESET: OpenAICompatiblePreset = {\n  id: 'deepinfra',\n  name: 'DeepInfra',\n  baseURL: 'https://api.deepinfra.com/v1/openai',\n  baseURLEnvKeys: ['DEEPINFRA_BASE_URL'],\n  envKeys: ['DEEPINFRA_API_KEY'],\n  defaultModel: 'zai-org/GLM-5.1',\n  defaultModels: [\n    {\n      id: 'zai-org/GLM-5.1',\n      name: 'GLM-5.1 (Zhipu)',\n      contextWindow: 202752,\n      tags: ['flagship'],\n    },\n    {\n      id: 'zai-org/GLM-4.7-Flash',\n      name: 'GLM-4.7 Flash',\n      contextWindow: 202752,\n      tags: ['budget'],\n    },\n    {\n      id: 'Qwen/Qwen3-235B-A22B-Instruct-2507',\n      name: 'Qwen3 235B (MoE)',\n      contextWindow: 262144,\n      tags: ['flagship'],\n    },\n    {\n      id: 'meta-llama/Llama-4-Scout-17B-16E-Instruct',\n      name: 'Llama 4 Scout',\n      contextWindow: 327680,\n    },\n    {\n      id: 'deepseek-ai/DeepSeek-V3.2-Exp',\n      name: 'DeepSeek V3.2',\n      contextWindow: 163840,\n      tags: ['reasoning'],\n    },\n    {\n      id: 'Qwen/Qwen3-Coder-30B-A3B-Instruct',\n      name: 'Qwen3 Coder 30B',\n      contextWindow: 262144,\n      tags: ['coding'],\n    },\n  ],\n}\n\n/**\n * Groq \u2014 specializes in low-latency inference on LPU hardware.\n * Best suited for snappy tool-use and routing, less so for long reasoning.\n */\nconst GROQ_PRESET: OpenAICompatiblePreset = {\n  id: 'groq',\n  name: 'Groq',\n  baseURL: 'https://api.groq.com/openai/v1',\n  baseURLEnvKeys: ['GROQ_BASE_URL'],\n  envKeys: ['GROQ_API_KEY'],\n  defaultModel: 'llama-3.3-70b-versatile',\n  defaultModels: [\n    {\n      id: 'llama-3.3-70b-versatile',\n      name: 'Llama 3.3 70B Versatile',\n      contextWindow: 131072,\n    },\n    {\n      id: 'llama-4-scout-17b',\n      name: 'Llama 4 Scout 17B',\n      contextWindow: 131072,\n    },\n    {\n      id: 'mixtral-8x22b-32768',\n      name: 'Mixtral 8x22B',\n      contextWindow: 32768,\n    },\n  ],\n}\n\n/**\n * Together AI \u2014 broad catalog of open-weight models with per-model pricing.\n */\nconst TOGETHER_PRESET: OpenAICompatiblePreset = {\n  id: 'together',\n  name: 'Together AI',\n  baseURL: 'https://api.together.xyz/v1',\n  baseURLEnvKeys: ['TOGETHER_BASE_URL'],\n  envKeys: ['TOGETHER_API_KEY'],\n  defaultModel: 'meta-llama/Llama-3.3-70B-Instruct-Turbo',\n  defaultModels: [\n    {\n      id: 'meta-llama/Llama-3.3-70B-Instruct-Turbo',\n      name: 'Llama 3.3 70B Turbo',\n      contextWindow: 131072,\n    },\n    {\n      id: 'Qwen/Qwen2.5-72B-Instruct-Turbo',\n      name: 'Qwen 2.5 72B Turbo',\n      contextWindow: 32768,\n    },\n  ],\n}\n\n/**\n * Fireworks AI \u2014 fast inference with a curated catalog.\n */\nconst FIREWORKS_PRESET: OpenAICompatiblePreset = {\n  id: 'fireworks',\n  name: 'Fireworks AI',\n  baseURL: 'https://api.fireworks.ai/inference/v1',\n  baseURLEnvKeys: ['FIREWORKS_BASE_URL'],\n  envKeys: ['FIREWORKS_API_KEY'],\n  defaultModel: 'accounts/fireworks/models/llama-v3p3-70b-instruct',\n  defaultModels: [\n    {\n      id: 'accounts/fireworks/models/llama-v3p3-70b-instruct',\n      name: 'Llama 3.3 70B',\n      contextWindow: 131072,\n    },\n  ],\n}\n\n/**\n * Azure OpenAI \u2014 enterprise Azure deployments. Base URL is deployment-\n * specific and must be provided via `AZURE_OPENAI_BASE_URL`.\n */\nconst AZURE_PRESET: OpenAICompatiblePreset = {\n  id: 'azure',\n  name: 'Azure OpenAI',\n  baseURL: undefined,\n  baseURLEnvKeys: ['AZURE_OPENAI_BASE_URL'],\n  envKeys: ['AZURE_OPENAI_API_KEY'],\n  defaultModel: 'gpt-5-mini',\n  defaultModels: [\n    {\n      id: 'gpt-5-mini',\n      name: 'GPT-5 Mini',\n      contextWindow: 128000,\n    },\n    {\n      id: 'gpt-5',\n      name: 'GPT-5',\n      contextWindow: 128000,\n    },\n  ],\n}\n\n/**\n * LiteLLM proxy \u2014 self-hosted router for arbitrary upstream providers.\n * Base URL must be supplied via `LITELLM_BASE_URL`.\n */\nconst LITELLM_PRESET: OpenAICompatiblePreset = {\n  id: 'litellm',\n  name: 'LiteLLM',\n  baseURL: 'http://localhost:4000/v1',\n  baseURLEnvKeys: ['LITELLM_BASE_URL'],\n  envKeys: ['LITELLM_API_KEY'],\n  defaultModel: 'gpt-4o-mini',\n  // LiteLLM proxies arbitrary upstreams and commonly relays `vendor/model` ids\n  // (e.g. `anthropic/claude-\u2026`), so a configured selection must not slash-split.\n  usesVendorPrefixedModelIds: true,\n  defaultModels: [\n    {\n      id: 'gpt-4o-mini',\n      name: 'GPT-4o Mini (via LiteLLM)',\n      contextWindow: 128000,\n    },\n  ],\n}\n\n/**\n * Ollama \u2014 local model runner for development and offline use.\n * Default port 11434 can be overridden via `OLLAMA_BASE_URL`.\n */\nconst OLLAMA_PRESET: OpenAICompatiblePreset = {\n  id: 'ollama',\n  name: 'Ollama (local)',\n  baseURL: 'http://localhost:11434/v1',\n  baseURLEnvKeys: ['OLLAMA_BASE_URL'],\n  envKeys: ['OLLAMA_API_KEY'],\n  defaultModel: 'llama3.3',\n  defaultModels: [\n    {\n      id: 'llama3.3',\n      name: 'Llama 3.3 (local)',\n      contextWindow: 131072,\n    },\n    {\n      id: 'qwen2.5-coder',\n      name: 'Qwen 2.5 Coder (local)',\n      contextWindow: 131072,\n      tags: ['coding'],\n    },\n  ],\n}\n\n/**\n * OpenRouter \u2014 unified API gateway providing access to hundreds of models\n * from Anthropic, OpenAI, Google, Meta, and others via a single OpenAI-\n * compatible endpoint.\n */\nconst OPENROUTER_PRESET: OpenAICompatiblePreset = {\n  id: 'openrouter',\n  name: 'OpenRouter',\n  baseURL: 'https://openrouter.ai/api/v1',\n  baseURLEnvKeys: ['OPENROUTER_BASE_URL'],\n  envKeys: ['OPENROUTER_API_KEY'],\n  defaultModel: 'meta-llama/llama-3.3-70b-instruct',\n  // OpenRouter model ids are `vendor/model` (e.g. `anthropic/claude-sonnet-4.5`);\n  // the leading `anthropic/` is part of the model id, not a native-provider pin.\n  usesVendorPrefixedModelIds: true,\n  defaultModels: [\n    {\n      id: 'meta-llama/llama-3.3-70b-instruct',\n      name: 'Llama 3.3 70B Instruct',\n      contextWindow: 131072,\n    },\n  ],\n}\n\n/**\n * Requesty \u2014 unified OpenAI-compatible LLM gateway providing access to\n * models from many providers via a single endpoint, using `provider/model`\n * naming (e.g. `openai/gpt-4o-mini`).\n */\nconst REQUESTY_PRESET: OpenAICompatiblePreset = {\n  id: 'requesty',\n  name: 'Requesty',\n  baseURL: 'https://router.requesty.ai/v1',\n  baseURLEnvKeys: ['REQUESTY_BASE_URL'],\n  envKeys: ['REQUESTY_API_KEY'],\n  defaultModel: 'openai/gpt-4o-mini',\n  // Requesty uses `provider/model` naming (e.g. `openai/gpt-4o-mini`) natively.\n  usesVendorPrefixedModelIds: true,\n  defaultModels: [\n    {\n      id: 'openai/gpt-4o-mini',\n      name: 'GPT-4o mini',\n      contextWindow: 128000,\n    },\n  ],\n}\n\n/**\n * LM Studio \u2014 local model server for development and offline use.\n * Default port 1234 can be overridden via `LM_STUDIO_BASE_URL`.\n * `defaultModel` is intentionally empty \u2014 LM Studio auto-detects\n * the loaded model when the request body's `model` field is empty.\n */\nconst LM_STUDIO_PRESET: OpenAICompatiblePreset = {\n  id: 'lm-studio',\n  name: 'LM Studio (local)',\n  baseURL: 'http://localhost:1234/v1',\n  baseURLEnvKeys: ['LM_STUDIO_BASE_URL'],\n  envKeys: ['LM_STUDIO_API_KEY'],\n  defaultModel: '',\n  defaultModels: [],\n}\n\n/**\n * Built-in presets registered at bootstrap time. Order matters \u2014 it\n * determines the default iteration order of\n * `llmProviderRegistry.resolveFirstConfigured()` when no explicit order\n * is supplied.\n */\nexport const OPENAI_COMPATIBLE_PRESETS: readonly OpenAICompatiblePreset[] = [\n  OPENAI_PRESET,\n  DEEPINFRA_PRESET,\n  GROQ_PRESET,\n  TOGETHER_PRESET,\n  FIREWORKS_PRESET,\n  AZURE_PRESET,\n  LITELLM_PRESET,\n  OLLAMA_PRESET,\n  OPENROUTER_PRESET,\n  REQUESTY_PRESET,\n  LM_STUDIO_PRESET,\n]\n"],
-  "mappings": "AAsBA,MAAM,gBAAwC;AAAA,EAC5C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,iBAAiB;AAAA,EAClC,SAAS,CAAC,kBAAkB,yBAAyB;AAAA,EACrD,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,QAAQ;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,UAAU;AAAA,IACnB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,QAAQ;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAOA,MAAM,mBAA2C;AAAA,EAC/C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,oBAAoB;AAAA,EACrC,SAAS,CAAC,mBAAmB;AAAA,EAC7B,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,UAAU;AAAA,IACnB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,QAAQ;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,UAAU;AAAA,IACnB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,WAAW;AAAA,IACpB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,QAAQ;AAAA,IACjB;AAAA,EACF;AACF;AAMA,MAAM,cAAsC;AAAA,EAC1C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,eAAe;AAAA,EAChC,SAAS,CAAC,cAAc;AAAA,EACxB,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAKA,MAAM,kBAA0C;AAAA,EAC9C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,mBAAmB;AAAA,EACpC,SAAS,CAAC,kBAAkB;AAAA,EAC5B,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAKA,MAAM,mBAA2C;AAAA,EAC/C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,oBAAoB;AAAA,EACrC,SAAS,CAAC,mBAAmB;AAAA,EAC7B,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAMA,MAAM,eAAuC;AAAA,EAC3C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,uBAAuB;AAAA,EACxC,SAAS,CAAC,sBAAsB;AAAA,EAChC,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAMA,MAAM,iBAAyC;AAAA,EAC7C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,kBAAkB;AAAA,EACnC,SAAS,CAAC,iBAAiB;AAAA,EAC3B,cAAc;AAAA;AAAA;AAAA,EAGd,4BAA4B;AAAA,EAC5B,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAMA,MAAM,gBAAwC;AAAA,EAC5C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,iBAAiB;AAAA,EAClC,SAAS,CAAC,gBAAgB;AAAA,EAC1B,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,QAAQ;AAAA,IACjB;AAAA,EACF;AACF;AAOA,MAAM,oBAA4C;AAAA,EAChD,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,qBAAqB;AAAA,EACtC,SAAS,CAAC,oBAAoB;AAAA,EAC9B,cAAc;AAAA;AAAA;AAAA,EAGd,4BAA4B;AAAA,EAC5B,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAOA,MAAM,kBAA0C;AAAA,EAC9C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,mBAAmB;AAAA,EACpC,SAAS,CAAC,kBAAkB;AAAA,EAC5B,cAAc;AAAA;AAAA,EAEd,4BAA4B;AAAA,EAC5B,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAQA,MAAM,mBAA2C;AAAA,EAC/C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,oBAAoB;AAAA,EACrC,SAAS,CAAC,mBAAmB;AAAA,EAC7B,cAAc;AAAA,EACd,eAAe,CAAC;AAClB;AAQO,MAAM,4BAA+D;AAAA,EAC1E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
+  "sourcesContent": ["/**\n * Curated registry of OpenAI-compatible LLM backends.\n *\n * Each preset is plain data \u2014 adding a new backend takes one entry in\n * this array, zero new adapter files, and zero changes to route handlers.\n * The {@link createOpenAICompatibleProvider} factory in `./llm-adapters/openai.ts`\n * turns each preset into a concrete `LlmProvider` at bootstrap time.\n *\n * Preset model catalogs are curated snapshots as of 2026-04-14 and should\n * be updated as upstream catalogs evolve. Users can always override the\n * selected model via the `OPENCODE_MODEL` env var without editing this\n * file.\n *\n * @see ./llm-adapters/openai.ts\n * @see .ai/specs/implemented/2026-04-14-llm-provider-ports-and-adapters.md\n */\n\nimport type { OpenAICompatiblePreset } from './llm-adapters/openai'\n\n/**\n * Standard OpenAI \u2014 default OpenAI API at api.openai.com.\n */\nconst OPENAI_PRESET: OpenAICompatiblePreset = {\n  id: 'openai',\n  name: 'OpenAI',\n  baseURL: undefined,\n  baseURLEnvKeys: ['OPENAI_BASE_URL'],\n  envKeys: ['OPENAI_API_KEY', 'OPENCODE_OPENAI_API_KEY'],\n  supportsInputModeration: true,\n  supportsEndUserSafetyIdentifier: true,\n  defaultModel: 'gpt-5-mini',\n  defaultModels: [\n    {\n      id: 'gpt-5-mini',\n      name: 'GPT-5 Mini',\n      contextWindow: 128000,\n      tags: ['budget'],\n    },\n    {\n      id: 'gpt-5',\n      name: 'GPT-5',\n      contextWindow: 128000,\n      tags: ['flagship'],\n    },\n    {\n      id: 'gpt-4o-mini',\n      name: 'GPT-4o Mini',\n      contextWindow: 128000,\n      tags: ['budget'],\n    },\n    {\n      id: 'gpt-4o',\n      name: 'GPT-4o',\n      contextWindow: 128000,\n    },\n  ],\n}\n\n/**\n * DeepInfra \u2014 hosts open-weight flagship models at 3-12\u00D7 lower cost than\n * the native APIs. The curated catalog targets the AI Assistant use case\n * (routing + tool use + conversational chat).\n */\nconst DEEPINFRA_PRESET: OpenAICompatiblePreset = {\n  id: 'deepinfra',\n  name: 'DeepInfra',\n  baseURL: 'https://api.deepinfra.com/v1/openai',\n  baseURLEnvKeys: ['DEEPINFRA_BASE_URL'],\n  envKeys: ['DEEPINFRA_API_KEY'],\n  defaultModel: 'zai-org/GLM-5.1',\n  defaultModels: [\n    {\n      id: 'zai-org/GLM-5.1',\n      name: 'GLM-5.1 (Zhipu)',\n      contextWindow: 202752,\n      tags: ['flagship'],\n    },\n    {\n      id: 'zai-org/GLM-4.7-Flash',\n      name: 'GLM-4.7 Flash',\n      contextWindow: 202752,\n      tags: ['budget'],\n    },\n    {\n      id: 'Qwen/Qwen3-235B-A22B-Instruct-2507',\n      name: 'Qwen3 235B (MoE)',\n      contextWindow: 262144,\n      tags: ['flagship'],\n    },\n    {\n      id: 'meta-llama/Llama-4-Scout-17B-16E-Instruct',\n      name: 'Llama 4 Scout',\n      contextWindow: 327680,\n    },\n    {\n      id: 'deepseek-ai/DeepSeek-V3.2-Exp',\n      name: 'DeepSeek V3.2',\n      contextWindow: 163840,\n      tags: ['reasoning'],\n    },\n    {\n      id: 'Qwen/Qwen3-Coder-30B-A3B-Instruct',\n      name: 'Qwen3 Coder 30B',\n      contextWindow: 262144,\n      tags: ['coding'],\n    },\n  ],\n}\n\n/**\n * Groq \u2014 specializes in low-latency inference on LPU hardware.\n * Best suited for snappy tool-use and routing, less so for long reasoning.\n */\nconst GROQ_PRESET: OpenAICompatiblePreset = {\n  id: 'groq',\n  name: 'Groq',\n  baseURL: 'https://api.groq.com/openai/v1',\n  baseURLEnvKeys: ['GROQ_BASE_URL'],\n  envKeys: ['GROQ_API_KEY'],\n  defaultModel: 'llama-3.3-70b-versatile',\n  defaultModels: [\n    {\n      id: 'llama-3.3-70b-versatile',\n      name: 'Llama 3.3 70B Versatile',\n      contextWindow: 131072,\n    },\n    {\n      id: 'llama-4-scout-17b',\n      name: 'Llama 4 Scout 17B',\n      contextWindow: 131072,\n    },\n    {\n      id: 'mixtral-8x22b-32768',\n      name: 'Mixtral 8x22B',\n      contextWindow: 32768,\n    },\n  ],\n}\n\n/**\n * Together AI \u2014 broad catalog of open-weight models with per-model pricing.\n */\nconst TOGETHER_PRESET: OpenAICompatiblePreset = {\n  id: 'together',\n  name: 'Together AI',\n  baseURL: 'https://api.together.xyz/v1',\n  baseURLEnvKeys: ['TOGETHER_BASE_URL'],\n  envKeys: ['TOGETHER_API_KEY'],\n  defaultModel: 'meta-llama/Llama-3.3-70B-Instruct-Turbo',\n  defaultModels: [\n    {\n      id: 'meta-llama/Llama-3.3-70B-Instruct-Turbo',\n      name: 'Llama 3.3 70B Turbo',\n      contextWindow: 131072,\n    },\n    {\n      id: 'Qwen/Qwen2.5-72B-Instruct-Turbo',\n      name: 'Qwen 2.5 72B Turbo',\n      contextWindow: 32768,\n    },\n  ],\n}\n\n/**\n * Fireworks AI \u2014 fast inference with a curated catalog.\n */\nconst FIREWORKS_PRESET: OpenAICompatiblePreset = {\n  id: 'fireworks',\n  name: 'Fireworks AI',\n  baseURL: 'https://api.fireworks.ai/inference/v1',\n  baseURLEnvKeys: ['FIREWORKS_BASE_URL'],\n  envKeys: ['FIREWORKS_API_KEY'],\n  defaultModel: 'accounts/fireworks/models/llama-v3p3-70b-instruct',\n  defaultModels: [\n    {\n      id: 'accounts/fireworks/models/llama-v3p3-70b-instruct',\n      name: 'Llama 3.3 70B',\n      contextWindow: 131072,\n    },\n  ],\n}\n\n/**\n * Azure OpenAI \u2014 enterprise Azure deployments. Base URL is deployment-\n * specific and must be provided via `AZURE_OPENAI_BASE_URL`.\n */\nconst AZURE_PRESET: OpenAICompatiblePreset = {\n  id: 'azure',\n  name: 'Azure OpenAI',\n  baseURL: undefined,\n  baseURLEnvKeys: ['AZURE_OPENAI_BASE_URL'],\n  envKeys: ['AZURE_OPENAI_API_KEY'],\n  defaultModel: 'gpt-5-mini',\n  defaultModels: [\n    {\n      id: 'gpt-5-mini',\n      name: 'GPT-5 Mini',\n      contextWindow: 128000,\n    },\n    {\n      id: 'gpt-5',\n      name: 'GPT-5',\n      contextWindow: 128000,\n    },\n  ],\n}\n\n/**\n * LiteLLM proxy \u2014 self-hosted router for arbitrary upstream providers.\n * Base URL must be supplied via `LITELLM_BASE_URL`.\n */\nconst LITELLM_PRESET: OpenAICompatiblePreset = {\n  id: 'litellm',\n  name: 'LiteLLM',\n  baseURL: 'http://localhost:4000/v1',\n  baseURLEnvKeys: ['LITELLM_BASE_URL'],\n  envKeys: ['LITELLM_API_KEY'],\n  defaultModel: 'gpt-4o-mini',\n  // LiteLLM proxies arbitrary upstreams and commonly relays `vendor/model` ids\n  // (e.g. `anthropic/claude-\u2026`), so a configured selection must not slash-split.\n  usesVendorPrefixedModelIds: true,\n  defaultModels: [\n    {\n      id: 'gpt-4o-mini',\n      name: 'GPT-4o Mini (via LiteLLM)',\n      contextWindow: 128000,\n    },\n  ],\n}\n\n/**\n * Ollama \u2014 local model runner for development and offline use.\n * Default port 11434 can be overridden via `OLLAMA_BASE_URL`.\n */\nconst OLLAMA_PRESET: OpenAICompatiblePreset = {\n  id: 'ollama',\n  name: 'Ollama (local)',\n  baseURL: 'http://localhost:11434/v1',\n  baseURLEnvKeys: ['OLLAMA_BASE_URL'],\n  envKeys: ['OLLAMA_API_KEY'],\n  defaultModel: 'llama3.3',\n  defaultModels: [\n    {\n      id: 'llama3.3',\n      name: 'Llama 3.3 (local)',\n      contextWindow: 131072,\n    },\n    {\n      id: 'qwen2.5-coder',\n      name: 'Qwen 2.5 Coder (local)',\n      contextWindow: 131072,\n      tags: ['coding'],\n    },\n  ],\n}\n\n/**\n * OpenRouter \u2014 unified API gateway providing access to hundreds of models\n * from Anthropic, OpenAI, Google, Meta, and others via a single OpenAI-\n * compatible endpoint.\n */\nconst OPENROUTER_PRESET: OpenAICompatiblePreset = {\n  id: 'openrouter',\n  name: 'OpenRouter',\n  baseURL: 'https://openrouter.ai/api/v1',\n  baseURLEnvKeys: ['OPENROUTER_BASE_URL'],\n  envKeys: ['OPENROUTER_API_KEY'],\n  defaultModel: 'meta-llama/llama-3.3-70b-instruct',\n  // OpenRouter model ids are `vendor/model` (e.g. `anthropic/claude-sonnet-4.5`);\n  // the leading `anthropic/` is part of the model id, not a native-provider pin.\n  usesVendorPrefixedModelIds: true,\n  defaultModels: [\n    {\n      id: 'meta-llama/llama-3.3-70b-instruct',\n      name: 'Llama 3.3 70B Instruct',\n      contextWindow: 131072,\n    },\n  ],\n}\n\n/**\n * Requesty \u2014 unified OpenAI-compatible LLM gateway providing access to\n * models from many providers via a single endpoint, using `provider/model`\n * naming (e.g. `openai/gpt-4o-mini`).\n */\nconst REQUESTY_PRESET: OpenAICompatiblePreset = {\n  id: 'requesty',\n  name: 'Requesty',\n  baseURL: 'https://router.requesty.ai/v1',\n  baseURLEnvKeys: ['REQUESTY_BASE_URL'],\n  envKeys: ['REQUESTY_API_KEY'],\n  defaultModel: 'openai/gpt-4o-mini',\n  // Requesty uses `provider/model` naming (e.g. `openai/gpt-4o-mini`) natively.\n  usesVendorPrefixedModelIds: true,\n  defaultModels: [\n    {\n      id: 'openai/gpt-4o-mini',\n      name: 'GPT-4o mini',\n      contextWindow: 128000,\n    },\n  ],\n}\n\n/**\n * LM Studio \u2014 local model server for development and offline use.\n * Default port 1234 can be overridden via `LM_STUDIO_BASE_URL`.\n * `defaultModel` is intentionally empty \u2014 LM Studio auto-detects\n * the loaded model when the request body's `model` field is empty.\n */\nconst LM_STUDIO_PRESET: OpenAICompatiblePreset = {\n  id: 'lm-studio',\n  name: 'LM Studio (local)',\n  baseURL: 'http://localhost:1234/v1',\n  baseURLEnvKeys: ['LM_STUDIO_BASE_URL'],\n  envKeys: ['LM_STUDIO_API_KEY'],\n  defaultModel: '',\n  defaultModels: [],\n}\n\n/**\n * Built-in presets registered at bootstrap time. Order matters \u2014 it\n * determines the default iteration order of\n * `llmProviderRegistry.resolveFirstConfigured()` when no explicit order\n * is supplied.\n */\nexport const OPENAI_COMPATIBLE_PRESETS: readonly OpenAICompatiblePreset[] = [\n  OPENAI_PRESET,\n  DEEPINFRA_PRESET,\n  GROQ_PRESET,\n  TOGETHER_PRESET,\n  FIREWORKS_PRESET,\n  AZURE_PRESET,\n  LITELLM_PRESET,\n  OLLAMA_PRESET,\n  OPENROUTER_PRESET,\n  REQUESTY_PRESET,\n  LM_STUDIO_PRESET,\n]\n"],
+  "mappings": "AAsBA,MAAM,gBAAwC;AAAA,EAC5C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,iBAAiB;AAAA,EAClC,SAAS,CAAC,kBAAkB,yBAAyB;AAAA,EACrD,yBAAyB;AAAA,EACzB,iCAAiC;AAAA,EACjC,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,QAAQ;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,UAAU;AAAA,IACnB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,QAAQ;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAOA,MAAM,mBAA2C;AAAA,EAC/C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,oBAAoB;AAAA,EACrC,SAAS,CAAC,mBAAmB;AAAA,EAC7B,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,UAAU;AAAA,IACnB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,QAAQ;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,UAAU;AAAA,IACnB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,WAAW;AAAA,IACpB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,QAAQ;AAAA,IACjB;AAAA,EACF;AACF;AAMA,MAAM,cAAsC;AAAA,EAC1C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,eAAe;AAAA,EAChC,SAAS,CAAC,cAAc;AAAA,EACxB,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAKA,MAAM,kBAA0C;AAAA,EAC9C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,mBAAmB;AAAA,EACpC,SAAS,CAAC,kBAAkB;AAAA,EAC5B,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAKA,MAAM,mBAA2C;AAAA,EAC/C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,oBAAoB;AAAA,EACrC,SAAS,CAAC,mBAAmB;AAAA,EAC7B,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAMA,MAAM,eAAuC;AAAA,EAC3C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,uBAAuB;AAAA,EACxC,SAAS,CAAC,sBAAsB;AAAA,EAChC,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAMA,MAAM,iBAAyC;AAAA,EAC7C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,kBAAkB;AAAA,EACnC,SAAS,CAAC,iBAAiB;AAAA,EAC3B,cAAc;AAAA;AAAA;AAAA,EAGd,4BAA4B;AAAA,EAC5B,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAMA,MAAM,gBAAwC;AAAA,EAC5C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,iBAAiB;AAAA,EAClC,SAAS,CAAC,gBAAgB;AAAA,EAC1B,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,MACf,MAAM,CAAC,QAAQ;AAAA,IACjB;AAAA,EACF;AACF;AAOA,MAAM,oBAA4C;AAAA,EAChD,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,qBAAqB;AAAA,EACtC,SAAS,CAAC,oBAAoB;AAAA,EAC9B,cAAc;AAAA;AAAA;AAAA,EAGd,4BAA4B;AAAA,EAC5B,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAOA,MAAM,kBAA0C;AAAA,EAC9C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,mBAAmB;AAAA,EACpC,SAAS,CAAC,kBAAkB;AAAA,EAC5B,cAAc;AAAA;AAAA,EAEd,4BAA4B;AAAA,EAC5B,eAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,eAAe;AAAA,IACjB;AAAA,EACF;AACF;AAQA,MAAM,mBAA2C;AAAA,EAC/C,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB,CAAC,oBAAoB;AAAA,EACrC,SAAS,CAAC,mBAAmB;AAAA,EAC7B,cAAc;AAAA,EACd,eAAe,CAAC;AAClB;AAQO,MAAM,4BAA+D;AAAA,EAC1E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
   "names": []
 }

package/dist/modules/ai_assistant/lib/tool-search.js

@@ -1,3 +1,4 @@
+import { authorizeFeatures } from "@open-mercato/shared/security/featurePolicy";
 import {
   TOOL_ENTITY_ID,
   GLOBAL_TENANT_ID,
@@ -177,18 +178,9 @@ class ToolSearchService {
    * Check if user has required features to access a tool.
    */
   hasFeatureAccess(requiredFeatures, userFeatures, isSuperAdmin) {
-    if (isSuperAdmin) return true;
-    if (!requiredFeatures?.length) return true;
-    return requiredFeatures.every((required) => {
-      if (userFeatures.includes(required)) return true;
-      if (userFeatures.includes("*")) return true;
-      return userFeatures.some((feature) => {
-        if (feature.endsWith(".*")) {
-          const prefix = feature.slice(0, -2);
-          return required.startsWith(prefix + ".");
-        }
-        return false;
-      });
+    return authorizeFeatures(requiredFeatures ?? [], {
+      grantedFeatures: userFeatures,
+      unrestricted: isSuperAdmin
     });
   }
 }

package/dist/modules/ai_assistant/lib/tool-search.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/ai_assistant/lib/tool-search.ts"],
-  "sourcesContent": ["import type { SearchService } from '@open-mercato/search/service'\nimport type { SearchStrategyId, IndexableRecord } from '@open-mercato/search/types'\nimport type { McpToolRegistry, McpToolDefinition } from './types'\nimport {\n  TOOL_ENTITY_ID,\n  GLOBAL_TENANT_ID,\n  TOOL_SEARCH_CONFIG,\n  toolToIndexableRecord,\n  computeToolsChecksum,\n} from './tool-index-config'\n\n/**\n * Result from tool search.\n */\nexport type ToolSearchResult = {\n  /** Tool name (recordId) */\n  toolName: string\n  /** Relevance score */\n  score: number\n  /** Module that registered the tool */\n  moduleId?: string\n  /** Features required to use this tool */\n  requiredFeatures?: string[]\n}\n\n/**\n * Status of available search strategies.\n */\nexport type StrategyStatus = {\n  fulltext: boolean\n  vector: boolean\n  tokens: boolean\n  /** Ordered list of available strategies */\n  available: SearchStrategyId[]\n  /** Strategies that will be used by default */\n  default: SearchStrategyId[]\n}\n\n/**\n * Result from tool indexing operation.\n */\nexport type IndexingResult = {\n  indexed: number\n  skipped: number\n  strategies: SearchStrategyId[]\n  checksum: string\n}\n\n/**\n * Options for searching tools.\n */\nexport type ToolSearchOptions = {\n  /** Maximum results to return (default: 12) */\n  limit?: number\n  /** Override strategies to use */\n  strategies?: SearchStrategyId[]\n  /** User's features for ACL filtering */\n  userFeatures?: string[]\n  /** Is user a super admin (bypasses ACL) */\n  isSuperAdmin?: boolean\n  /** Minimum score threshold (default: 0.2) */\n  minScore?: number\n}\n\n/**\n * Service for searching and indexing MCP tools using hybrid search strategies.\n *\n * Uses the existing search module infrastructure to provide:\n * - Fulltext search (Meilisearch) when configured\n * - Vector/semantic search (PgVector) when configured\n * - Token-based search (PostgreSQL hash) as fallback\n *\n * Results are merged using Reciprocal Rank Fusion (RRF) with weights:\n * - fulltext: 1.2\n * - vector: 1.0\n * - tokens: 0.8\n */\nexport class ToolSearchService {\n  private lastIndexChecksum: string | null = null\n\n  constructor(\n    private readonly searchService: SearchService,\n    private readonly toolRegistry: McpToolRegistry\n  ) {}\n\n  /**\n   * Get status of available search strategies.\n   * This helps the AI understand which integrations are available.\n   */\n  async getStrategyStatus(): Promise<StrategyStatus> {\n    const [fulltext, vector, tokens] = await Promise.all([\n      this.searchService.isStrategyAvailable('fulltext'),\n      this.searchService.isStrategyAvailable('vector'),\n      this.searchService.isStrategyAvailable('tokens'),\n    ])\n\n    const available: SearchStrategyId[] = []\n    if (fulltext) available.push('fulltext')\n    if (vector) available.push('vector')\n    if (tokens) available.push('tokens')\n\n    const defaultStrategies = this.searchService.getDefaultStrategies()\n\n    return {\n      fulltext,\n      vector,\n      tokens,\n      available,\n      default: defaultStrategies.filter((s) => available.includes(s)),\n    }\n  }\n\n  /**\n   * Search for relevant tools using hybrid strategies.\n   *\n   * @param query - User's search query or message\n   * @param options - Search options\n   * @returns Array of matching tools sorted by relevance\n   */\n  async searchTools(\n    query: string,\n    options: ToolSearchOptions = {}\n  ): Promise<ToolSearchResult[]> {\n    const {\n      limit = TOOL_SEARCH_CONFIG.defaultLimit,\n      strategies,\n      userFeatures = [],\n      isSuperAdmin = false,\n      minScore = TOOL_SEARCH_CONFIG.minScore,\n    } = options\n\n    // Use hybrid search with all available strategies\n    const searchResults = await this.searchService.search(query, {\n      tenantId: GLOBAL_TENANT_ID,\n      organizationId: null,\n      entityTypes: [TOOL_ENTITY_ID],\n      strategies,\n      limit: limit * 2, // Get extra results to account for ACL filtering\n    })\n\n    // Map to tool results and filter by ACL\n    const toolResults: ToolSearchResult[] = []\n\n    for (const result of searchResults) {\n      // Skip results below minimum score\n      if (result.score < minScore) continue\n\n      const metadata = result.metadata as Record<string, unknown> | undefined\n      const requiredFeatures = (metadata?.requiredFeatures as string[]) ?? []\n      const moduleId = metadata?.moduleId as string | undefined\n\n      // Filter by user's feature access\n      if (!this.hasFeatureAccess(requiredFeatures, userFeatures, isSuperAdmin)) {\n        continue\n      }\n\n      toolResults.push({\n        toolName: result.recordId,\n        score: result.score,\n        moduleId,\n        requiredFeatures,\n      })\n\n      // Stop when we have enough results\n      if (toolResults.length >= limit) break\n    }\n\n    return toolResults\n  }\n\n  /**\n   * Index all tools from the registry using available strategies.\n   * Uses checksum-based change detection to avoid unnecessary re-indexing.\n   *\n   * @param force - Force re-indexing even if checksum hasn't changed\n   * @returns Indexing result with statistics\n   */\n  async indexTools(force = false): Promise<IndexingResult> {\n    const tools = Array.from(this.toolRegistry.getTools().values())\n    const modules = this.getToolModules()\n\n    // Compute checksum to detect changes\n    const checksum = computeToolsChecksum(\n      tools.map((t) => ({ name: t.name, description: t.description }))\n    )\n\n    // Skip if checksum matches and not forced\n    if (!force && this.lastIndexChecksum === checksum) {\n      const status = await this.getStrategyStatus()\n      return {\n        indexed: 0,\n        skipped: tools.length,\n        strategies: status.available,\n        checksum,\n      }\n    }\n\n    // Build indexable records for all tools\n    const records: IndexableRecord[] = []\n    for (const tool of tools) {\n      const moduleId = modules.get(tool.name)\n      records.push(toolToIndexableRecord(tool, moduleId))\n    }\n\n    // Bulk index using available strategies\n    if (records.length > 0) {\n      try {\n        await this.searchService.bulkIndex(records)\n      } catch (error) {\n        throw new Error(\n          `Failed to index ${records.length} tools: ${\n            error instanceof Error ? error.message : error\n          }`\n        )\n      }\n    }\n\n    // Update checksum\n    this.lastIndexChecksum = checksum\n\n    const status = await this.getStrategyStatus()\n    return {\n      indexed: records.length,\n      skipped: 0,\n      strategies: status.available,\n      checksum,\n    }\n  }\n\n  /**\n   * Purge all tool records from the search index.\n   * Useful for cleanup or complete re-indexing.\n   */\n  async purgeIndex(): Promise<void> {\n    await this.searchService.purge(TOOL_ENTITY_ID, GLOBAL_TENANT_ID)\n    this.lastIndexChecksum = null\n  }\n\n  /**\n   * Get tools by module ID from the registry.\n   */\n  getToolsByModule(moduleId: string): string[] {\n    return this.toolRegistry.listToolsByModule(moduleId)\n  }\n\n  /**\n   * Build a map of tool name to module ID.\n   */\n  private getToolModules(): Map<string, string> {\n    const modules = new Map<string, string>()\n\n    // Common module prefixes that indicate tool ownership\n    const modulePatterns = [\n      { pattern: /^customers_/, moduleId: 'customers' },\n      { pattern: /^sales_/, moduleId: 'sales' },\n      { pattern: /^catalog_/, moduleId: 'catalog' },\n      { pattern: /^staff_/, moduleId: 'staff' },\n      { pattern: /^resources_/, moduleId: 'resources' },\n      { pattern: /^planner/, moduleId: 'planner' },\n      { pattern: /^search_/, moduleId: 'search' },\n      { pattern: /^context_/, moduleId: 'context' },\n      { pattern: /^auth_/, moduleId: 'auth' },\n      { pattern: /^directory_/, moduleId: 'directory' },\n      { pattern: /^dashboards_/, moduleId: 'dashboards' },\n      { pattern: /^entities_/, moduleId: 'entities' },\n      { pattern: /^dictionaries_/, moduleId: 'dictionaries' },\n      { pattern: /^workflows_/, moduleId: 'workflows' },\n      { pattern: /^business_rules_/, moduleId: 'business_rules' },\n      { pattern: /^audit_logs_/, moduleId: 'audit_logs' },\n      { pattern: /^attachments_/, moduleId: 'attachments' },\n      { pattern: /^feature_toggles_/, moduleId: 'feature_toggles' },\n      { pattern: /^currencies_/, moduleId: 'currencies' },\n      { pattern: /^example_/, moduleId: 'example' },\n      { pattern: /^cli_/, moduleId: 'cli' },\n    ]\n\n    for (const toolName of this.toolRegistry.listToolNames()) {\n      for (const { pattern, moduleId } of modulePatterns) {\n        if (pattern.test(toolName)) {\n          modules.set(toolName, moduleId)\n          break\n        }\n      }\n    }\n\n    return modules\n  }\n\n  /**\n   * Check if user has required features to access a tool.\n   */\n  private hasFeatureAccess(\n    requiredFeatures: string[] | undefined,\n    userFeatures: string[],\n    isSuperAdmin: boolean\n  ): boolean {\n    if (isSuperAdmin) return true\n    if (!requiredFeatures?.length) return true\n\n    return requiredFeatures.every((required) => {\n      // Direct match\n      if (userFeatures.includes(required)) return true\n      // Wildcard match\n      if (userFeatures.includes('*')) return true\n\n      // Prefix wildcard match (e.g., 'customers.*' matches 'customers.people.view')\n      return userFeatures.some((feature) => {\n        if (feature.endsWith('.*')) {\n          const prefix = feature.slice(0, -2)\n          return required.startsWith(prefix + '.')\n        }\n        return false\n      })\n    })\n  }\n}\n"],
-  "mappings": "AAGA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAoEA,MAAM,kBAAkB;AAAA,EAG7B,YACmB,eACA,cACjB;AAFiB;AACA;AAJnB,SAAQ,oBAAmC;AAAA,EAKxC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMH,MAAM,oBAA6C;AACjD,UAAM,CAAC,UAAU,QAAQ,MAAM,IAAI,MAAM,QAAQ,IAAI;AAAA,MACnD,KAAK,cAAc,oBAAoB,UAAU;AAAA,MACjD,KAAK,cAAc,oBAAoB,QAAQ;AAAA,MAC/C,KAAK,cAAc,oBAAoB,QAAQ;AAAA,IACjD,CAAC;AAED,UAAM,YAAgC,CAAC;AACvC,QAAI,SAAU,WAAU,KAAK,UAAU;AACvC,QAAI,OAAQ,WAAU,KAAK,QAAQ;AACnC,QAAI,OAAQ,WAAU,KAAK,QAAQ;AAEnC,UAAM,oBAAoB,KAAK,cAAc,qBAAqB;AAElE,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,kBAAkB,OAAO,CAAC,MAAM,UAAU,SAAS,CAAC,CAAC;AAAA,IAChE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,YACJ,OACA,UAA6B,CAAC,GACD;AAC7B,UAAM;AAAA,MACJ,QAAQ,mBAAmB;AAAA,MAC3B;AAAA,MACA,eAAe,CAAC;AAAA,MAChB,eAAe;AAAA,MACf,WAAW,mBAAmB;AAAA,IAChC,IAAI;AAGJ,UAAM,gBAAgB,MAAM,KAAK,cAAc,OAAO,OAAO;AAAA,MAC3D,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,aAAa,CAAC,cAAc;AAAA,MAC5B;AAAA,MACA,OAAO,QAAQ;AAAA;AAAA,IACjB,CAAC;AAGD,UAAM,cAAkC,CAAC;AAEzC,eAAW,UAAU,eAAe;AAElC,UAAI,OAAO,QAAQ,SAAU;AAE7B,YAAM,WAAW,OAAO;AACxB,YAAM,mBAAoB,UAAU,oBAAiC,CAAC;AACtE,YAAM,WAAW,UAAU;AAG3B,UAAI,CAAC,KAAK,iBAAiB,kBAAkB,cAAc,YAAY,GAAG;AACxE;AAAA,MACF;AAEA,kBAAY,KAAK;AAAA,QACf,UAAU,OAAO;AAAA,QACjB,OAAO,OAAO;AAAA,QACd;AAAA,QACA;AAAA,MACF,CAAC;AAGD,UAAI,YAAY,UAAU,MAAO;AAAA,IACnC;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,WAAW,QAAQ,OAAgC;AACvD,UAAM,QAAQ,MAAM,KAAK,KAAK,aAAa,SAAS,EAAE,OAAO,CAAC;AAC9D,UAAM,UAAU,KAAK,eAAe;AAGpC,UAAM,WAAW;AAAA,MACf,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,EAAE,YAAY,EAAE;AAAA,IACjE;AAGA,QAAI,CAAC,SAAS,KAAK,sBAAsB,UAAU;AACjD,YAAMA,UAAS,MAAM,KAAK,kBAAkB;AAC5C,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,MAAM;AAAA,QACf,YAAYA,QAAO;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAGA,UAAM,UAA6B,CAAC;AACpC,eAAW,QAAQ,OAAO;AACxB,YAAM,WAAW,QAAQ,IAAI,KAAK,IAAI;AACtC,cAAQ,KAAK,sBAAsB,MAAM,QAAQ,CAAC;AAAA,IACpD;AAGA,QAAI,QAAQ,SAAS,GAAG;AACtB,UAAI;AACF,cAAM,KAAK,cAAc,UAAU,OAAO;AAAA,MAC5C,SAAS,OAAO;AACd,cAAM,IAAI;AAAA,UACR,mBAAmB,QAAQ,MAAM,WAC/B,iBAAiB,QAAQ,MAAM,UAAU,KAC3C;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,SAAK,oBAAoB;AAEzB,UAAM,SAAS,MAAM,KAAK,kBAAkB;AAC5C,WAAO;AAAA,MACL,SAAS,QAAQ;AAAA,MACjB,SAAS;AAAA,MACT,YAAY,OAAO;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aAA4B;AAChC,UAAM,KAAK,cAAc,MAAM,gBAAgB,gBAAgB;AAC/D,SAAK,oBAAoB;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,iBAAiB,UAA4B;AAC3C,WAAO,KAAK,aAAa,kBAAkB,QAAQ;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA,EAKQ,iBAAsC;AAC5C,UAAM,UAAU,oBAAI,IAAoB;AAGxC,UAAM,iBAAiB;AAAA,MACrB,EAAE,SAAS,eAAe,UAAU,YAAY;AAAA,MAChD,EAAE,SAAS,WAAW,UAAU,QAAQ;AAAA,MACxC,EAAE,SAAS,aAAa,UAAU,UAAU;AAAA,MAC5C,EAAE,SAAS,WAAW,UAAU,QAAQ;AAAA,MACxC,EAAE,SAAS,eAAe,UAAU,YAAY;AAAA,MAChD,EAAE,SAAS,YAAY,UAAU,UAAU;AAAA,MAC3C,EAAE,SAAS,YAAY,UAAU,SAAS;AAAA,MAC1C,EAAE,SAAS,aAAa,UAAU,UAAU;AAAA,MAC5C,EAAE,SAAS,UAAU,UAAU,OAAO;AAAA,MACtC,EAAE,SAAS,eAAe,UAAU,YAAY;AAAA,MAChD,EAAE,SAAS,gBAAgB,UAAU,aAAa;AAAA,MAClD,EAAE,SAAS,cAAc,UAAU,WAAW;AAAA,MAC9C,EAAE,SAAS,kBAAkB,UAAU,eAAe;AAAA,MACtD,EAAE,SAAS,eAAe,UAAU,YAAY;AAAA,MAChD,EAAE,SAAS,oBAAoB,UAAU,iBAAiB;AAAA,MAC1D,EAAE,SAAS,gBAAgB,UAAU,aAAa;AAAA,MAClD,EAAE,SAAS,iBAAiB,UAAU,cAAc;AAAA,MACpD,EAAE,SAAS,qBAAqB,UAAU,kBAAkB;AAAA,MAC5D,EAAE,SAAS,gBAAgB,UAAU,aAAa;AAAA,MAClD,EAAE,SAAS,aAAa,UAAU,UAAU;AAAA,MAC5C,EAAE,SAAS,SAAS,UAAU,MAAM;AAAA,IACtC;AAEA,eAAW,YAAY,KAAK,aAAa,cAAc,GAAG;AACxD,iBAAW,EAAE,SAAS,SAAS,KAAK,gBAAgB;AAClD,YAAI,QAAQ,KAAK,QAAQ,GAAG;AAC1B,kBAAQ,IAAI,UAAU,QAAQ;AAC9B;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKQ,iBACN,kBACA,cACA,cACS;AACT,QAAI,aAAc,QAAO;AACzB,QAAI,CAAC,kBAAkB,OAAQ,QAAO;AAEtC,WAAO,iBAAiB,MAAM,CAAC,aAAa;AAE1C,UAAI,aAAa,SAAS,QAAQ,EAAG,QAAO;AAE5C,UAAI,aAAa,SAAS,GAAG,EAAG,QAAO;AAGvC,aAAO,aAAa,KAAK,CAAC,YAAY;AACpC,YAAI,QAAQ,SAAS,IAAI,GAAG;AAC1B,gBAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,iBAAO,SAAS,WAAW,SAAS,GAAG;AAAA,QACzC;AACA,eAAO;AAAA,MACT,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACF;",
+  "sourcesContent": ["import type { SearchService } from '@open-mercato/search/service'\nimport type { SearchStrategyId, IndexableRecord } from '@open-mercato/search/types'\nimport { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'\nimport type { McpToolRegistry, McpToolDefinition } from './types'\nimport {\n  TOOL_ENTITY_ID,\n  GLOBAL_TENANT_ID,\n  TOOL_SEARCH_CONFIG,\n  toolToIndexableRecord,\n  computeToolsChecksum,\n} from './tool-index-config'\n\n/**\n * Result from tool search.\n */\nexport type ToolSearchResult = {\n  /** Tool name (recordId) */\n  toolName: string\n  /** Relevance score */\n  score: number\n  /** Module that registered the tool */\n  moduleId?: string\n  /** Features required to use this tool */\n  requiredFeatures?: string[]\n}\n\n/**\n * Status of available search strategies.\n */\nexport type StrategyStatus = {\n  fulltext: boolean\n  vector: boolean\n  tokens: boolean\n  /** Ordered list of available strategies */\n  available: SearchStrategyId[]\n  /** Strategies that will be used by default */\n  default: SearchStrategyId[]\n}\n\n/**\n * Result from tool indexing operation.\n */\nexport type IndexingResult = {\n  indexed: number\n  skipped: number\n  strategies: SearchStrategyId[]\n  checksum: string\n}\n\n/**\n * Options for searching tools.\n */\nexport type ToolSearchOptions = {\n  /** Maximum results to return (default: 12) */\n  limit?: number\n  /** Override strategies to use */\n  strategies?: SearchStrategyId[]\n  /** User's features for ACL filtering */\n  userFeatures?: string[]\n  /** Is user a super admin (bypasses ACL) */\n  isSuperAdmin?: boolean\n  /** Minimum score threshold (default: 0.2) */\n  minScore?: number\n}\n\n/**\n * Service for searching and indexing MCP tools using hybrid search strategies.\n *\n * Uses the existing search module infrastructure to provide:\n * - Fulltext search (Meilisearch) when configured\n * - Vector/semantic search (PgVector) when configured\n * - Token-based search (PostgreSQL hash) as fallback\n *\n * Results are merged using Reciprocal Rank Fusion (RRF) with weights:\n * - fulltext: 1.2\n * - vector: 1.0\n * - tokens: 0.8\n */\nexport class ToolSearchService {\n  private lastIndexChecksum: string | null = null\n\n  constructor(\n    private readonly searchService: SearchService,\n    private readonly toolRegistry: McpToolRegistry\n  ) {}\n\n  /**\n   * Get status of available search strategies.\n   * This helps the AI understand which integrations are available.\n   */\n  async getStrategyStatus(): Promise<StrategyStatus> {\n    const [fulltext, vector, tokens] = await Promise.all([\n      this.searchService.isStrategyAvailable('fulltext'),\n      this.searchService.isStrategyAvailable('vector'),\n      this.searchService.isStrategyAvailable('tokens'),\n    ])\n\n    const available: SearchStrategyId[] = []\n    if (fulltext) available.push('fulltext')\n    if (vector) available.push('vector')\n    if (tokens) available.push('tokens')\n\n    const defaultStrategies = this.searchService.getDefaultStrategies()\n\n    return {\n      fulltext,\n      vector,\n      tokens,\n      available,\n      default: defaultStrategies.filter((s) => available.includes(s)),\n    }\n  }\n\n  /**\n   * Search for relevant tools using hybrid strategies.\n   *\n   * @param query - User's search query or message\n   * @param options - Search options\n   * @returns Array of matching tools sorted by relevance\n   */\n  async searchTools(\n    query: string,\n    options: ToolSearchOptions = {}\n  ): Promise<ToolSearchResult[]> {\n    const {\n      limit = TOOL_SEARCH_CONFIG.defaultLimit,\n      strategies,\n      userFeatures = [],\n      isSuperAdmin = false,\n      minScore = TOOL_SEARCH_CONFIG.minScore,\n    } = options\n\n    // Use hybrid search with all available strategies\n    const searchResults = await this.searchService.search(query, {\n      tenantId: GLOBAL_TENANT_ID,\n      organizationId: null,\n      entityTypes: [TOOL_ENTITY_ID],\n      strategies,\n      limit: limit * 2, // Get extra results to account for ACL filtering\n    })\n\n    // Map to tool results and filter by ACL\n    const toolResults: ToolSearchResult[] = []\n\n    for (const result of searchResults) {\n      // Skip results below minimum score\n      if (result.score < minScore) continue\n\n      const metadata = result.metadata as Record<string, unknown> | undefined\n      const requiredFeatures = (metadata?.requiredFeatures as string[]) ?? []\n      const moduleId = metadata?.moduleId as string | undefined\n\n      // Filter by user's feature access\n      if (!this.hasFeatureAccess(requiredFeatures, userFeatures, isSuperAdmin)) {\n        continue\n      }\n\n      toolResults.push({\n        toolName: result.recordId,\n        score: result.score,\n        moduleId,\n        requiredFeatures,\n      })\n\n      // Stop when we have enough results\n      if (toolResults.length >= limit) break\n    }\n\n    return toolResults\n  }\n\n  /**\n   * Index all tools from the registry using available strategies.\n   * Uses checksum-based change detection to avoid unnecessary re-indexing.\n   *\n   * @param force - Force re-indexing even if checksum hasn't changed\n   * @returns Indexing result with statistics\n   */\n  async indexTools(force = false): Promise<IndexingResult> {\n    const tools = Array.from(this.toolRegistry.getTools().values())\n    const modules = this.getToolModules()\n\n    // Compute checksum to detect changes\n    const checksum = computeToolsChecksum(\n      tools.map((t) => ({ name: t.name, description: t.description }))\n    )\n\n    // Skip if checksum matches and not forced\n    if (!force && this.lastIndexChecksum === checksum) {\n      const status = await this.getStrategyStatus()\n      return {\n        indexed: 0,\n        skipped: tools.length,\n        strategies: status.available,\n        checksum,\n      }\n    }\n\n    // Build indexable records for all tools\n    const records: IndexableRecord[] = []\n    for (const tool of tools) {\n      const moduleId = modules.get(tool.name)\n      records.push(toolToIndexableRecord(tool, moduleId))\n    }\n\n    // Bulk index using available strategies\n    if (records.length > 0) {\n      try {\n        await this.searchService.bulkIndex(records)\n      } catch (error) {\n        throw new Error(\n          `Failed to index ${records.length} tools: ${\n            error instanceof Error ? error.message : error\n          }`\n        )\n      }\n    }\n\n    // Update checksum\n    this.lastIndexChecksum = checksum\n\n    const status = await this.getStrategyStatus()\n    return {\n      indexed: records.length,\n      skipped: 0,\n      strategies: status.available,\n      checksum,\n    }\n  }\n\n  /**\n   * Purge all tool records from the search index.\n   * Useful for cleanup or complete re-indexing.\n   */\n  async purgeIndex(): Promise<void> {\n    await this.searchService.purge(TOOL_ENTITY_ID, GLOBAL_TENANT_ID)\n    this.lastIndexChecksum = null\n  }\n\n  /**\n   * Get tools by module ID from the registry.\n   */\n  getToolsByModule(moduleId: string): string[] {\n    return this.toolRegistry.listToolsByModule(moduleId)\n  }\n\n  /**\n   * Build a map of tool name to module ID.\n   */\n  private getToolModules(): Map<string, string> {\n    const modules = new Map<string, string>()\n\n    // Common module prefixes that indicate tool ownership\n    const modulePatterns = [\n      { pattern: /^customers_/, moduleId: 'customers' },\n      { pattern: /^sales_/, moduleId: 'sales' },\n      { pattern: /^catalog_/, moduleId: 'catalog' },\n      { pattern: /^staff_/, moduleId: 'staff' },\n      { pattern: /^resources_/, moduleId: 'resources' },\n      { pattern: /^planner/, moduleId: 'planner' },\n      { pattern: /^search_/, moduleId: 'search' },\n      { pattern: /^context_/, moduleId: 'context' },\n      { pattern: /^auth_/, moduleId: 'auth' },\n      { pattern: /^directory_/, moduleId: 'directory' },\n      { pattern: /^dashboards_/, moduleId: 'dashboards' },\n      { pattern: /^entities_/, moduleId: 'entities' },\n      { pattern: /^dictionaries_/, moduleId: 'dictionaries' },\n      { pattern: /^workflows_/, moduleId: 'workflows' },\n      { pattern: /^business_rules_/, moduleId: 'business_rules' },\n      { pattern: /^audit_logs_/, moduleId: 'audit_logs' },\n      { pattern: /^attachments_/, moduleId: 'attachments' },\n      { pattern: /^feature_toggles_/, moduleId: 'feature_toggles' },\n      { pattern: /^currencies_/, moduleId: 'currencies' },\n      { pattern: /^example_/, moduleId: 'example' },\n      { pattern: /^cli_/, moduleId: 'cli' },\n    ]\n\n    for (const toolName of this.toolRegistry.listToolNames()) {\n      for (const { pattern, moduleId } of modulePatterns) {\n        if (pattern.test(toolName)) {\n          modules.set(toolName, moduleId)\n          break\n        }\n      }\n    }\n\n    return modules\n  }\n\n  /**\n   * Check if user has required features to access a tool.\n   */\n  private hasFeatureAccess(\n    requiredFeatures: string[] | undefined,\n    userFeatures: string[],\n    isSuperAdmin: boolean\n  ): boolean {\n    return authorizeFeatures(requiredFeatures ?? [], {\n      grantedFeatures: userFeatures,\n      unrestricted: isSuperAdmin,\n    })\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,yBAAyB;AAElC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAoEA,MAAM,kBAAkB;AAAA,EAG7B,YACmB,eACA,cACjB;AAFiB;AACA;AAJnB,SAAQ,oBAAmC;AAAA,EAKxC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMH,MAAM,oBAA6C;AACjD,UAAM,CAAC,UAAU,QAAQ,MAAM,IAAI,MAAM,QAAQ,IAAI;AAAA,MACnD,KAAK,cAAc,oBAAoB,UAAU;AAAA,MACjD,KAAK,cAAc,oBAAoB,QAAQ;AAAA,MAC/C,KAAK,cAAc,oBAAoB,QAAQ;AAAA,IACjD,CAAC;AAED,UAAM,YAAgC,CAAC;AACvC,QAAI,SAAU,WAAU,KAAK,UAAU;AACvC,QAAI,OAAQ,WAAU,KAAK,QAAQ;AACnC,QAAI,OAAQ,WAAU,KAAK,QAAQ;AAEnC,UAAM,oBAAoB,KAAK,cAAc,qBAAqB;AAElE,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,kBAAkB,OAAO,CAAC,MAAM,UAAU,SAAS,CAAC,CAAC;AAAA,IAChE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,YACJ,OACA,UAA6B,CAAC,GACD;AAC7B,UAAM;AAAA,MACJ,QAAQ,mBAAmB;AAAA,MAC3B;AAAA,MACA,eAAe,CAAC;AAAA,MAChB,eAAe;AAAA,MACf,WAAW,mBAAmB;AAAA,IAChC,IAAI;AAGJ,UAAM,gBAAgB,MAAM,KAAK,cAAc,OAAO,OAAO;AAAA,MAC3D,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,aAAa,CAAC,cAAc;AAAA,MAC5B;AAAA,MACA,OAAO,QAAQ;AAAA;AAAA,IACjB,CAAC;AAGD,UAAM,cAAkC,CAAC;AAEzC,eAAW,UAAU,eAAe;AAElC,UAAI,OAAO,QAAQ,SAAU;AAE7B,YAAM,WAAW,OAAO;AACxB,YAAM,mBAAoB,UAAU,oBAAiC,CAAC;AACtE,YAAM,WAAW,UAAU;AAG3B,UAAI,CAAC,KAAK,iBAAiB,kBAAkB,cAAc,YAAY,GAAG;AACxE;AAAA,MACF;AAEA,kBAAY,KAAK;AAAA,QACf,UAAU,OAAO;AAAA,QACjB,OAAO,OAAO;AAAA,QACd;AAAA,QACA;AAAA,MACF,CAAC;AAGD,UAAI,YAAY,UAAU,MAAO;AAAA,IACnC;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,WAAW,QAAQ,OAAgC;AACvD,UAAM,QAAQ,MAAM,KAAK,KAAK,aAAa,SAAS,EAAE,OAAO,CAAC;AAC9D,UAAM,UAAU,KAAK,eAAe;AAGpC,UAAM,WAAW;AAAA,MACf,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,EAAE,YAAY,EAAE;AAAA,IACjE;AAGA,QAAI,CAAC,SAAS,KAAK,sBAAsB,UAAU;AACjD,YAAMA,UAAS,MAAM,KAAK,kBAAkB;AAC5C,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,MAAM;AAAA,QACf,YAAYA,QAAO;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAGA,UAAM,UAA6B,CAAC;AACpC,eAAW,QAAQ,OAAO;AACxB,YAAM,WAAW,QAAQ,IAAI,KAAK,IAAI;AACtC,cAAQ,KAAK,sBAAsB,MAAM,QAAQ,CAAC;AAAA,IACpD;AAGA,QAAI,QAAQ,SAAS,GAAG;AACtB,UAAI;AACF,cAAM,KAAK,cAAc,UAAU,OAAO;AAAA,MAC5C,SAAS,OAAO;AACd,cAAM,IAAI;AAAA,UACR,mBAAmB,QAAQ,MAAM,WAC/B,iBAAiB,QAAQ,MAAM,UAAU,KAC3C;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,SAAK,oBAAoB;AAEzB,UAAM,SAAS,MAAM,KAAK,kBAAkB;AAC5C,WAAO;AAAA,MACL,SAAS,QAAQ;AAAA,MACjB,SAAS;AAAA,MACT,YAAY,OAAO;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aAA4B;AAChC,UAAM,KAAK,cAAc,MAAM,gBAAgB,gBAAgB;AAC/D,SAAK,oBAAoB;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,iBAAiB,UAA4B;AAC3C,WAAO,KAAK,aAAa,kBAAkB,QAAQ;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA,EAKQ,iBAAsC;AAC5C,UAAM,UAAU,oBAAI,IAAoB;AAGxC,UAAM,iBAAiB;AAAA,MACrB,EAAE,SAAS,eAAe,UAAU,YAAY;AAAA,MAChD,EAAE,SAAS,WAAW,UAAU,QAAQ;AAAA,MACxC,EAAE,SAAS,aAAa,UAAU,UAAU;AAAA,MAC5C,EAAE,SAAS,WAAW,UAAU,QAAQ;AAAA,MACxC,EAAE,SAAS,eAAe,UAAU,YAAY;AAAA,MAChD,EAAE,SAAS,YAAY,UAAU,UAAU;AAAA,MAC3C,EAAE,SAAS,YAAY,UAAU,SAAS;AAAA,MAC1C,EAAE,SAAS,aAAa,UAAU,UAAU;AAAA,MAC5C,EAAE,SAAS,UAAU,UAAU,OAAO;AAAA,MACtC,EAAE,SAAS,eAAe,UAAU,YAAY;AAAA,MAChD,EAAE,SAAS,gBAAgB,UAAU,aAAa;AAAA,MAClD,EAAE,SAAS,cAAc,UAAU,WAAW;AAAA,MAC9C,EAAE,SAAS,kBAAkB,UAAU,eAAe;AAAA,MACtD,EAAE,SAAS,eAAe,UAAU,YAAY;AAAA,MAChD,EAAE,SAAS,oBAAoB,UAAU,iBAAiB;AAAA,MAC1D,EAAE,SAAS,gBAAgB,UAAU,aAAa;AAAA,MAClD,EAAE,SAAS,iBAAiB,UAAU,cAAc;AAAA,MACpD,EAAE,SAAS,qBAAqB,UAAU,kBAAkB;AAAA,MAC5D,EAAE,SAAS,gBAAgB,UAAU,aAAa;AAAA,MAClD,EAAE,SAAS,aAAa,UAAU,UAAU;AAAA,MAC5C,EAAE,SAAS,SAAS,UAAU,MAAM;AAAA,IACtC;AAEA,eAAW,YAAY,KAAK,aAAa,cAAc,GAAG;AACxD,iBAAW,EAAE,SAAS,SAAS,KAAK,gBAAgB;AAClD,YAAI,QAAQ,KAAK,QAAQ,GAAG;AAC1B,kBAAQ,IAAI,UAAU,QAAQ;AAC9B;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKQ,iBACN,kBACA,cACA,cACS;AACT,WAAO,kBAAkB,oBAAoB,CAAC,GAAG;AAAA,MAC/C,iBAAiB;AAAA,MACjB,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AACF;",
   "names": ["status"]
 }

package/dist/modules/ai_assistant/migrations/Migration20260610134045_ai_assistant.js

@@ -0,0 +1,19 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260610134045_ai_assistant extends Migration {
+  up() {
+    this.addSql(`create table "ai_moderation_flags" ("id" uuid not null default gen_random_uuid(), "tenant_id" uuid not null, "organization_id" uuid null, "agent_id" text not null, "user_id" text not null, "provider_id" text not null, "model_id" text not null, "categories" jsonb not null, "created_at" timestamptz not null, primary key ("id"));`);
+    this.addSql(`create index "ai_moderation_flags_tenant_user_idx" on "ai_moderation_flags" ("tenant_id", "user_id");`);
+    this.addSql(`create index "ai_moderation_flags_tenant_created_idx" on "ai_moderation_flags" ("tenant_id", "created_at");`);
+    this.addSql(`alter table "ai_agent_runtime_overrides" add "input_moderation" boolean null;`);
+  }
+  down() {
+    this.addSql(`alter table "ai_agent_runtime_overrides" drop column "input_moderation";`);
+    this.addSql(`drop index "ai_moderation_flags_tenant_created_idx";`);
+    this.addSql(`drop index "ai_moderation_flags_tenant_user_idx";`);
+    this.addSql(`drop table if exists "ai_moderation_flags" cascade;`);
+  }
+}
+export {
+  Migration20260610134045_ai_assistant
+};
+//# sourceMappingURL=Migration20260610134045_ai_assistant.js.map

package/dist/modules/ai_assistant/migrations/Migration20260610134045_ai_assistant.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/migrations/Migration20260610134045_ai_assistant.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260610134045_ai_assistant extends Migration {\n\n  override up(): void | Promise<void> {\n    this.addSql(`create table \"ai_moderation_flags\" (\"id\" uuid not null default gen_random_uuid(), \"tenant_id\" uuid not null, \"organization_id\" uuid null, \"agent_id\" text not null, \"user_id\" text not null, \"provider_id\" text not null, \"model_id\" text not null, \"categories\" jsonb not null, \"created_at\" timestamptz not null, primary key (\"id\"));`);\n    this.addSql(`create index \"ai_moderation_flags_tenant_user_idx\" on \"ai_moderation_flags\" (\"tenant_id\", \"user_id\");`);\n    this.addSql(`create index \"ai_moderation_flags_tenant_created_idx\" on \"ai_moderation_flags\" (\"tenant_id\", \"created_at\");`);\n\n    this.addSql(`alter table \"ai_agent_runtime_overrides\" add \"input_moderation\" boolean null;`);\n  }\n\n  override down(): void | Promise<void> {\n    this.addSql(`alter table \"ai_agent_runtime_overrides\" drop column \"input_moderation\";`);\n\n    this.addSql(`drop index \"ai_moderation_flags_tenant_created_idx\";`);\n    this.addSql(`drop index \"ai_moderation_flags_tenant_user_idx\";`);\n    this.addSql(`drop table if exists \"ai_moderation_flags\" cascade;`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,6CAA6C,UAAU;AAAA,EAEzD,KAA2B;AAClC,SAAK,OAAO,0UAA0U;AACtV,SAAK,OAAO,uGAAuG;AACnH,SAAK,OAAO,6GAA6G;AAEzH,SAAK,OAAO,+EAA+E;AAAA,EAC7F;AAAA,EAES,OAA6B;AACpC,SAAK,OAAO,0EAA0E;AAEtF,SAAK,OAAO,sDAAsD;AAClE,SAAK,OAAO,mDAAmD;AAC/D,SAAK,OAAO,qDAAqD;AAAA,EACnE;AAEF;",
+  "names": []
+}

package/generated/entities/ai_agent_runtime_override/index.ts

@@ -18,3 +18,4 @@ export const loop_max_wall_clock_ms = "loop_max_wall_clock_ms";
 export const loop_max_tokens = "loop_max_tokens";
 export const loop_stop_when_json = "loop_stop_when_json";
 export const loop_active_tools_json = "loop_active_tools_json";
+export const input_moderation = "input_moderation";

package/generated/entities/ai_moderation_flag/index.ts

@@ -0,0 +1,9 @@
+export const id = "id";
+export const tenant_id = "tenant_id";
+export const organization_id = "organization_id";
+export const agent_id = "agent_id";
+export const user_id = "user_id";
+export const provider_id = "provider_id";
+export const model_id = "model_id";
+export const categories = "categories";
+export const created_at = "created_at";

package/generated/entities.ids.generated.ts

@@ -12,7 +12,8 @@ export const M = {
       "ai_agent_mutation_policy_override": "ai_assistant:ai_agent_mutation_policy_override",
       "ai_chat_conversation": "ai_assistant:ai_chat_conversation",
       "ai_chat_conversation_participant": "ai_assistant:ai_chat_conversation_participant",
-      "ai_chat_message": "ai_assistant:ai_chat_message"
+      "ai_chat_message": "ai_assistant:ai_chat_message",
+      "ai_moderation_flag": "ai_assistant:ai_moderation_flag"
     }
   } as const;
 

package/generated/entity-fields-registry.ts

@@ -44,7 +44,8 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "loop_max_wall_clock_ms": "loop_max_wall_clock_ms",
       "loop_max_tokens": "loop_max_tokens",
       "loop_stop_when_json": "loop_stop_when_json",
-      "loop_active_tools_json": "loop_active_tools_json"
+      "loop_active_tools_json": "loop_active_tools_json",
+      "input_moderation": "input_moderation"
     },
     "ai_chat_conversation": {
       "id": "id",
@@ -93,6 +94,17 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "updated_at": "updated_at",
       "deleted_at": "deleted_at"
     },
+    "ai_moderation_flag": {
+      "id": "id",
+      "tenant_id": "tenant_id",
+      "organization_id": "organization_id",
+      "agent_id": "agent_id",
+      "user_id": "user_id",
+      "provider_id": "provider_id",
+      "model_id": "model_id",
+      "categories": "categories",
+      "created_at": "created_at"
+    },
     "ai_pending_action": {
       "id": "id",
       "tenant_id": "tenant_id",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/ai-assistant",
-  "version": "0.6.7-develop.6775.1.c2313bb8a3",
+  "version": "0.6.7-develop.6785.1.1dd7cfac55",
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -99,16 +99,16 @@
     "zod-to-json-schema": "^3.25.2"
   },
   "peerDependencies": {
-    "@open-mercato/shared": "0.6.7-develop.6775.1.c2313bb8a3",
-    "@open-mercato/ui": "0.6.7-develop.6775.1.c2313bb8a3",
+    "@open-mercato/shared": "0.6.7-develop.6785.1.1dd7cfac55",
+    "@open-mercato/ui": "0.6.7-develop.6785.1.1dd7cfac55",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "zod": ">=3.23.0"
   },
   "devDependencies": {
-    "@open-mercato/cli": "0.6.7-develop.6775.1.c2313bb8a3",
-    "@open-mercato/shared": "0.6.7-develop.6775.1.c2313bb8a3",
-    "@open-mercato/ui": "0.6.7-develop.6775.1.c2313bb8a3",
+    "@open-mercato/cli": "0.6.7-develop.6785.1.1dd7cfac55",
+    "@open-mercato/shared": "0.6.7-develop.6785.1.1dd7cfac55",
+    "@open-mercato/ui": "0.6.7-develop.6785.1.1dd7cfac55",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
     "react": "19.2.7",

package/src/modules/ai_assistant/__integration__/TC-AI-MODERATION-008-settings-and-audit.spec.ts

@@ -0,0 +1,126 @@
+import { test, expect, request as playwrightRequest } from '@playwright/test';
+import { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api';
+import { getTokenScope, readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures';
+import {
+  deleteAgentOverridesInDb,
+  deleteModerationFlagsInDb,
+  seedModerationFlagInDb,
+} from './helpers/aiAssistantFixtures';
+
+/**
+ * TC-AI-MODERATION-008 — Input-moderation settings + audit API.
+ * Source: spec `.ai/specs/2026-06-04-ai-input-moderation-and-safety-identifiers.md`.
+ *
+ * Surfaces under test:
+ *   - PUT /api/ai_assistant/settings        (persists `inputModeration` per agent)
+ *   - GET /api/ai_assistant/settings        (reflects per-agent effective moderation policy)
+ *   - GET /api/ai_assistant/moderation-flags (tenant-scoped audit listing)
+ *
+ * Contract notes verified against the route handlers:
+ *   - PUT `{ agentId, inputModeration }` returns 200 echoing `inputModeration`.
+ *   - GET /settings exposes `agents[].moderation = { enforced, override, effective }`.
+ *   - GET /moderation-flags returns `{ items, total, page, pageSize }`, tenant-scoped,
+ *     gated by `ai_assistant.settings.manage`, `pageSize` capped at 100.
+ *
+ * Flags are seeded directly in the DB: a real flag is only ever born from the gate
+ * during a flagged LLM turn (needs a live moderation call), so seeding keeps the
+ * audit + isolation coverage deterministic and provider-free. This spec therefore
+ * only runs under the coherent app+DB harness (`yarn test:integration` / `:ephemeral`).
+ */
+
+const SETTINGS = '/api/ai_assistant/settings';
+const FLAGS = '/api/ai_assistant/moderation-flags';
+
+interface FlagsResponse {
+  items: Array<{ id: string; tenantId: string; agentId: string; userId: string; categories: Record<string, unknown> }>;
+  total: number;
+  page: number;
+  pageSize: number;
+}
+
+test.describe('TC-AI-MODERATION-008: input moderation settings + audit', () => {
+  test('PUT inputModeration persists per agent and round-trips on/off/inherit', async ({ request }) => {
+    test.slow();
+    const adminToken = await getAuthToken(request, 'admin');
+    const { tenantId } = getTokenScope(adminToken);
+    // A synthetic agent id keeps the test independent of the (empty-in-CI) live
+    // agent registry; the PUT upserts an override row keyed by this id. The
+    // per-agent `moderation` reflection on GET (registered agents only) is
+    // covered by the route unit tests + the stubbed UI spec (TC-AI-MODERATION-009).
+    const agentId = 'it.moderation_settings';
+
+    try {
+      const on = await apiRequest(request, 'PUT', SETTINGS, {
+        token: adminToken,
+        data: { agentId, inputModeration: true },
+      });
+      expect(on.status(), 'PUT inputModeration=true returns 200').toBe(200);
+      expect((await readJsonSafe<{ inputModeration: boolean | null }>(on))?.inputModeration).toBe(true);
+
+      const off = await apiRequest(request, 'PUT', SETTINGS, {
+        token: adminToken,
+        data: { agentId, inputModeration: false },
+      });
+      expect(off.status()).toBe(200);
+      expect((await readJsonSafe<{ inputModeration: boolean | null }>(off))?.inputModeration).toBe(false);
+
+      const inherit = await apiRequest(request, 'PUT', SETTINGS, {
+        token: adminToken,
+        data: { agentId, inputModeration: null },
+      });
+      expect(inherit.status()).toBe(200);
+      expect((await readJsonSafe<{ inputModeration: boolean | null }>(inherit))?.inputModeration).toBeNull();
+    } finally {
+      await deleteAgentOverridesInDb({ tenantId, agentId }).catch(() => undefined);
+    }
+  });
+
+  test('GET /moderation-flags is tenant-scoped (cross-tenant rows are never returned)', async ({ request }) => {
+    test.slow();
+    const adminToken = await getAuthToken(request, 'admin');
+    const { tenantId } = getTokenScope(adminToken);
+    const otherTenantId = '00000000-0000-4000-8000-0000000face7';
+
+    let mineId = '';
+    try {
+      mineId = await seedModerationFlagInDb({ tenantId, agentId: 'it.moderation_audit', userId: 'it-user-mine' });
+      await seedModerationFlagInDb({ tenantId: otherTenantId, agentId: 'it.moderation_audit', userId: 'it-user-other' });
+
+      const res = await apiRequest(request, 'GET', `${FLAGS}?pageSize=100`, { token: adminToken });
+      expect(res.status()).toBe(200);
+      const body = await readJsonSafe<FlagsResponse>(res);
+      expect(body?.items, 'returns an items array').toBeTruthy();
+      const ids = (body?.items ?? []).map((row) => row.id);
+      expect(ids, 'my tenant flag is visible').toContain(mineId);
+      // Every returned row is scoped to the caller's tenant — the other-tenant row never leaks.
+      for (const row of body?.items ?? []) {
+        expect(row.tenantId).toBe(tenantId);
+      }
+    } finally {
+      await deleteModerationFlagsInDb(tenantId).catch(() => undefined);
+      await deleteModerationFlagsInDb(otherTenantId).catch(() => undefined);
+    }
+  });
+
+  test('GET /moderation-flags RBAC + validation gates', async ({ request, baseURL }) => {
+    const adminToken = await getAuthToken(request, 'admin');
+
+    // pageSize above the 100 cap is rejected by the zod query schema.
+    const tooLarge = await apiRequest(request, 'GET', `${FLAGS}?pageSize=101`, { token: adminToken });
+    expect(tooLarge.status()).toBe(400);
+    expect((await readJsonSafe<{ code?: string }>(tooLarge))?.code).toBe('validation_error');
+
+    // Employee carries ai_assistant.view but NOT ai_assistant.settings.manage.
+    const employeeToken = await getAuthToken(request, 'employee');
+    const denied = await apiRequest(request, 'GET', FLAGS, { token: employeeToken });
+    expect(denied.status(), 'employee lacks settings.manage -> 403').toBe(403);
+
+    const anon = await playwrightRequest.newContext({ baseURL });
+    try {
+      const res = await anon.fetch(FLAGS, { method: 'GET' });
+      expect(res.status(), 'unauthenticated GET is 401').toBe(401);
+    } finally {
+      await anon.dispose();
+    }
+  });
+});