@open-mercato/ai-assistant 0.6.7-develop.6775.1.c2313bb8a3 → 0.6.7-develop.6785.1.1dd7cfac55

package/dist/modules/ai_assistant/data/repositories/AiAgentRuntimeOverrideRepository.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/ai_assistant/data/repositories/AiAgentRuntimeOverrideRepository.ts"],
-  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { llmProviderRegistry } from '@open-mercato/shared/lib/ai/llm-provider-registry'\nimport { canonicalProviderId } from '../../lib/model-allowlist'\nimport { AiAgentRuntimeOverride } from '../entities'\nimport type { AiAgentLoopStopCondition } from '../../lib/ai-agent-definition'\n\nexport interface AiAgentRuntimeOverrideContext {\n  tenantId: string\n  organizationId?: string | null\n  userId?: string | null\n}\n\nexport interface AiAgentRuntimeOverrideLoopInput {\n  /** Kill switch \u2014 when true, runtime forces stepCountIs(1). */\n  loopDisabled?: boolean | null\n  /** Override loop.maxSteps. */\n  loopMaxSteps?: number | null\n  /** Override loop.budget.maxToolCalls. */\n  loopMaxToolCalls?: number | null\n  /** Override loop.budget.maxWallClockMs. */\n  loopMaxWallClockMs?: number | null\n  /** Override loop.budget.maxTokens. */\n  loopMaxTokens?: number | null\n  /** Override loop.stopWhen \u2014 JSON-safe variants only (stepCount, hasToolCall). */\n  loopStopWhenJson?: AiAgentLoopStopCondition[] | null\n  /** Override loop.activeTools \u2014 must be a subset of agent.allowedTools. */\n  loopActiveToolsJson?: string[] | null\n}\n\nexport interface AiAgentRuntimeOverrideInput extends AiAgentRuntimeOverrideLoopInput {\n  /** null means tenant-wide default (no agent pinning). */\n  agentId?: string | null\n  providerId?: string | null\n  modelId?: string | null\n  baseURL?: string | null\n  allowedOverrideProviders?: string[] | null\n  allowedOverrideModelsByProvider?: Record<string, string[]>\n  /**\n   * Optional: the agent's declared allowedTools. When provided, loopActiveToolsJson\n   * is validated to be a subset. When omitted, allowlist validation is skipped\n   * (write-time defense only; the runtime re-validates at read time).\n   */\n  agentAllowedTools?: string[]\n}\n\n/**\n * Repository for per-tenant AI runtime overrides (Phase 4a of spec\n * `2026-04-27-ai-agents-provider-model-baseurl-overrides`).\n *\n * All reads MUST filter by `tenant_id` first. The three public methods follow\n * the same fail-safe pattern as sibling repositories: `getDefault` returns\n * null on missing tenant context; `upsertDefault` validates provider id at\n * write time; `clearDefault` soft-deletes via `deleted_at`.\n *\n * Resolution precedence returned by `getDefault`:\n *   1. Agent-specific row (non-null `agent_id`) when `agentId` is provided.\n *   2. Tenant-wide row (`agent_id IS NULL`) for the same `(tenant_id, org_id)`.\n * Both rows are always scoped to the caller's `tenant_id` \u2014 cross-tenant\n * reads are impossible because every query filters `WHERE tenant_id = ?`.\n */\nexport class AiAgentRuntimeOverrideRepository {\n  constructor(private readonly em: EntityManager) {}\n\n  /**\n   * Returns the most-specific active runtime override for the given context.\n   *\n   * When `agentId` is provided, an agent-specific row takes precedence over a\n   * tenant-wide null-agent row. Returns null when neither exists.\n   *\n   * Never returns a row with `deleted_at IS NOT NULL`.\n   */\n  async getDefault(ctx: {\n    tenantId: string\n    organizationId?: string | null\n    agentId?: string | null\n  }): Promise<AiAgentRuntimeOverride | null> {\n    if (!ctx?.tenantId) return null\n\n    const orgFilter = ctx.organizationId ?? null\n\n    // Try agent-specific first when caller provided an agentId.\n    if (ctx.agentId) {\n      const agentRow = await this.em.findOne(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: ctx.agentId,\n        deletedAt: null,\n      } satisfies FilterQuery<AiAgentRuntimeOverride>)\n      if (agentRow) return agentRow\n    }\n\n    // Fall back to tenant-wide row (agentId = null).\n    const tenantRow = await this.em.findOne(AiAgentRuntimeOverride, {\n      tenantId: ctx.tenantId,\n      organizationId: orgFilter,\n      agentId: null,\n      deletedAt: null,\n    } satisfies FilterQuery<AiAgentRuntimeOverride>)\n    return tenantRow ?? null\n  }\n\n  async getExact(ctx: {\n    tenantId: string\n    organizationId?: string | null\n    agentId?: string | null\n  }): Promise<AiAgentRuntimeOverride | null> {\n    if (!ctx?.tenantId) return null\n    const row = await this.em.findOne(AiAgentRuntimeOverride, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId ?? null,\n      agentId: ctx.agentId ?? null,\n      deletedAt: null,\n    } satisfies FilterQuery<AiAgentRuntimeOverride>)\n    return row ?? null\n  }\n\n  /**\n   * Validates and normalizes the loop override fields from an input object.\n   * Throws `AiAgentRuntimeOverrideValidationError` with code\n   * `invalid_loop_override` for any validation failure.\n   *\n   * Validation rules (Phase 3 \u2014 R5 mitigation):\n   * - `loopStopWhenJson`: all items must have kind `stepCount` or `hasToolCall`.\n   *   Items with kind `custom` are rejected \u2014 they cannot be stored as JSON.\n   * - `loopActiveToolsJson`: when `agentAllowedTools` is provided, every entry\n   *   must be in that allowlist.\n   */\n  private validateLoopInput(input: AiAgentRuntimeOverrideInput): void {\n    if (input.loopStopWhenJson != null) {\n      if (!Array.isArray(input.loopStopWhenJson)) {\n        throw new AiAgentRuntimeOverrideValidationError(\n          'loopStopWhenJson must be an array of stop condition objects.',\n          'invalid_loop_override',\n        )\n      }\n      for (const item of input.loopStopWhenJson) {\n        if (!item || typeof item !== 'object' || !('kind' in item)) {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopStopWhenJson items must have a \"kind\" field.',\n            'invalid_loop_override',\n          )\n        }\n        const kind = (item as AiAgentLoopStopCondition).kind\n        if (kind === 'custom') {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopStopWhenJson does not support kind \"custom\" \u2014 only \"stepCount\" and \"hasToolCall\" are JSON-safe and storable.',\n            'invalid_loop_override',\n          )\n        }\n        if (kind !== 'stepCount' && kind !== 'hasToolCall') {\n          throw new AiAgentRuntimeOverrideValidationError(\n            `loopStopWhenJson contains unknown kind \"${String(kind)}\". Allowed: \"stepCount\", \"hasToolCall\".`,\n            'invalid_loop_override',\n          )\n        }\n        if (kind === 'stepCount' && typeof (item as { count?: unknown }).count !== 'number') {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopStopWhenJson stepCount item must have a numeric \"count\" field.',\n            'invalid_loop_override',\n          )\n        }\n        if (kind === 'hasToolCall' && typeof (item as { toolName?: unknown }).toolName !== 'string') {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopStopWhenJson hasToolCall item must have a string \"toolName\" field.',\n            'invalid_loop_override',\n          )\n        }\n      }\n    }\n\n    if (input.loopActiveToolsJson != null) {\n      if (!Array.isArray(input.loopActiveToolsJson)) {\n        throw new AiAgentRuntimeOverrideValidationError(\n          'loopActiveToolsJson must be an array of tool name strings.',\n          'invalid_loop_override',\n        )\n      }\n      for (const name of input.loopActiveToolsJson) {\n        if (typeof name !== 'string' || name.length === 0) {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopActiveToolsJson entries must be non-empty strings.',\n            'invalid_loop_override',\n          )\n        }\n      }\n      if (input.agentAllowedTools && input.agentAllowedTools.length > 0) {\n        const outsideAllowlist = input.loopActiveToolsJson.filter(\n          (name) => !input.agentAllowedTools!.includes(name),\n        )\n        if (outsideAllowlist.length > 0) {\n          throw new AiAgentRuntimeOverrideValidationError(\n            `loopActiveToolsJson contains tools outside the agent's allowedTools: ${outsideAllowlist.join(', ')}.`,\n            'invalid_loop_override',\n          )\n        }\n      }\n    }\n  }\n\n  /**\n   * Inserts or updates the runtime override for the given context.\n   *\n   * Validates `providerId` against the registry at write time so an admin\n   * cannot save a typo (Phase 1.4 contract re-applied per spec \u00A7Data Models).\n   * An unknown provider id throws a typed error.\n   *\n   * Also validates loop override fields (R5 mitigation \u2014 Phase 3):\n   * - `loopStopWhenJson` items must use only JSON-safe kinds.\n   * - `loopActiveToolsJson` items must be a subset of `agentAllowedTools`\n   *   when that is provided.\n   *\n   * The R6 base-URL allowlist check is intentionally NOT performed here \u2014\n   * that enforcement lives at the HTTP layer (PUT settings route). The\n   * repository trusts that callers have already validated the value.\n   */\n  async upsertDefault(\n    input: AiAgentRuntimeOverrideInput,\n    ctx: AiAgentRuntimeOverrideContext,\n  ): Promise<AiAgentRuntimeOverride> {\n    if (!ctx?.tenantId) {\n      throw new Error('AiAgentRuntimeOverrideRepository.upsertDefault requires tenantId')\n    }\n\n    const normalizedProviderId = input.providerId\n      ? canonicalProviderId(input.providerId, llmProviderRegistry.list().map((p) => p.id))\n      : null\n    if (input.providerId) {\n      const knownProvider = normalizedProviderId ? llmProviderRegistry.get(normalizedProviderId) : null\n      if (!knownProvider) {\n        throw new AiAgentRuntimeOverrideValidationError(\n          `Unknown provider id \"${input.providerId}\". Registered provider ids: ${llmProviderRegistry.list().map((p) => p.id).join(', ')}.`,\n        )\n      }\n    }\n\n    this.validateLoopInput(input)\n\n    const orgFilter = ctx.organizationId ?? null\n    const agentIdFilter = input.agentId ?? null\n    const hasProviderId = Object.prototype.hasOwnProperty.call(input, 'providerId')\n    const hasModelId = Object.prototype.hasOwnProperty.call(input, 'modelId')\n    const hasBaseURL = Object.prototype.hasOwnProperty.call(input, 'baseURL')\n    const hasAllowedOverrideProviders = Object.prototype.hasOwnProperty.call(input, 'allowedOverrideProviders')\n    const hasAllowedOverrideModels = Object.prototype.hasOwnProperty.call(input, 'allowedOverrideModelsByProvider')\n\n    return this.em.transactional(async (tx) => {\n      const existing = await tx.findOne(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: agentIdFilter,\n        deletedAt: null,\n      } satisfies FilterQuery<AiAgentRuntimeOverride>)\n\n      if (existing) {\n        if (hasProviderId) existing.providerId = normalizedProviderId\n        if (hasModelId) existing.modelId = input.modelId ?? null\n        if (hasBaseURL) existing.baseUrl = input.baseURL ?? null\n        if (hasAllowedOverrideProviders) {\n          existing.allowedOverrideProviders = input.allowedOverrideProviders ?? null\n        }\n        if (hasAllowedOverrideModels) {\n          existing.allowedOverrideModelsByProvider = input.allowedOverrideModelsByProvider ?? {}\n        }\n        existing.updatedByUserId = ctx.userId ?? null\n        existing.updatedAt = new Date()\n        if ('loopDisabled' in input) existing.loopDisabled = input.loopDisabled ?? null\n        if ('loopMaxSteps' in input) existing.loopMaxSteps = input.loopMaxSteps ?? null\n        if ('loopMaxToolCalls' in input) existing.loopMaxToolCalls = input.loopMaxToolCalls ?? null\n        if ('loopMaxWallClockMs' in input) existing.loopMaxWallClockMs = input.loopMaxWallClockMs ?? null\n        if ('loopMaxTokens' in input) existing.loopMaxTokens = input.loopMaxTokens ?? null\n        if ('loopStopWhenJson' in input) existing.loopStopWhenJson = input.loopStopWhenJson ?? null\n        if ('loopActiveToolsJson' in input) existing.loopActiveToolsJson = input.loopActiveToolsJson ?? null\n        await tx.persist(existing).flush()\n        return existing\n      }\n\n      const row = tx.create(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: agentIdFilter,\n        providerId: hasProviderId ? normalizedProviderId : null,\n        modelId: hasModelId ? (input.modelId ?? null) : null,\n        baseUrl: hasBaseURL ? (input.baseURL ?? null) : null,\n        allowedOverrideProviders: hasAllowedOverrideProviders\n          ? (input.allowedOverrideProviders ?? null)\n          : null,\n        allowedOverrideModelsByProvider: hasAllowedOverrideModels\n          ? (input.allowedOverrideModelsByProvider ?? {})\n          : {},\n        updatedByUserId: ctx.userId ?? null,\n        loopDisabled: input.loopDisabled ?? null,\n        loopMaxSteps: input.loopMaxSteps ?? null,\n        loopMaxToolCalls: input.loopMaxToolCalls ?? null,\n        loopMaxWallClockMs: input.loopMaxWallClockMs ?? null,\n        loopMaxTokens: input.loopMaxTokens ?? null,\n        loopStopWhenJson: input.loopStopWhenJson ?? null,\n        loopActiveToolsJson: input.loopActiveToolsJson ?? null,\n      } as unknown as AiAgentRuntimeOverride)\n      await tx.persist(row).flush()\n      return row\n    })\n  }\n\n  /**\n   * Soft-deletes the active override matching the given context by setting\n   * `deleted_at = now()`. Returns true when a row was found and cleared,\n   * false when no active row existed.\n   */\n  async clearDefault(ctx: {\n    tenantId: string\n    organizationId?: string | null\n    agentId?: string | null\n  }): Promise<boolean> {\n    if (!ctx?.tenantId) return false\n\n    const orgFilter = ctx.organizationId ?? null\n    const agentIdFilter = ctx.agentId ?? null\n\n    return this.em.transactional(async (tx) => {\n      const existing = await tx.findOne(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: agentIdFilter,\n        deletedAt: null,\n      } satisfies FilterQuery<AiAgentRuntimeOverride>)\n      if (!existing) return false\n      if (\n        existing.allowedOverrideProviders != null ||\n        Object.keys(existing.allowedOverrideModelsByProvider ?? {}).length > 0\n      ) {\n        existing.providerId = null\n        existing.modelId = null\n        existing.baseUrl = null\n        existing.updatedAt = new Date()\n        await tx.persist(existing).flush()\n        return true\n      }\n      existing.deletedAt = new Date()\n      await tx.persist(existing).flush()\n      return true\n    })\n  }\n}\n\n/**\n * Thrown by `upsertDefault` when validation fails (unknown provider id,\n * invalid loop override JSON).\n */\nexport class AiAgentRuntimeOverrideValidationError extends Error {\n  readonly code: string\n\n  constructor(message: string, code = 'invalid_override') {\n    super(message)\n    this.name = 'AiAgentRuntimeOverrideValidationError'\n    this.code = code\n  }\n}\n\nexport default AiAgentRuntimeOverrideRepository\n"],
-  "mappings": "AACA,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AAyDhC,MAAM,iCAAiC;AAAA,EAC5C,YAA6B,IAAmB;AAAnB;AAAA,EAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUjD,MAAM,WAAW,KAI0B;AACzC,QAAI,CAAC,KAAK,SAAU,QAAO;AAE3B,UAAM,YAAY,IAAI,kBAAkB;AAGxC,QAAI,IAAI,SAAS;AACf,YAAM,WAAW,MAAM,KAAK,GAAG,QAAQ,wBAAwB;AAAA,QAC7D,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS,IAAI;AAAA,QACb,WAAW;AAAA,MACb,CAA+C;AAC/C,UAAI,SAAU,QAAO;AAAA,IACvB;AAGA,UAAM,YAAY,MAAM,KAAK,GAAG,QAAQ,wBAAwB;AAAA,MAC9D,UAAU,IAAI;AAAA,MACd,gBAAgB;AAAA,MAChB,SAAS;AAAA,MACT,WAAW;AAAA,IACb,CAA+C;AAC/C,WAAO,aAAa;AAAA,EACtB;AAAA,EAEA,MAAM,SAAS,KAI4B;AACzC,QAAI,CAAC,KAAK,SAAU,QAAO;AAC3B,UAAM,MAAM,MAAM,KAAK,GAAG,QAAQ,wBAAwB;AAAA,MACxD,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI,kBAAkB;AAAA,MACtC,SAAS,IAAI,WAAW;AAAA,MACxB,WAAW;AAAA,IACb,CAA+C;AAC/C,WAAO,OAAO;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaQ,kBAAkB,OAA0C;AAClE,QAAI,MAAM,oBAAoB,MAAM;AAClC,UAAI,CAAC,MAAM,QAAQ,MAAM,gBAAgB,GAAG;AAC1C,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,iBAAW,QAAQ,MAAM,kBAAkB;AACzC,YAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,EAAE,UAAU,OAAO;AAC1D,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,cAAM,OAAQ,KAAkC;AAChD,YAAI,SAAS,UAAU;AACrB,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,YAAI,SAAS,eAAe,SAAS,eAAe;AAClD,gBAAM,IAAI;AAAA,YACR,2CAA2C,OAAO,IAAI,CAAC;AAAA,YACvD;AAAA,UACF;AAAA,QACF;AACA,YAAI,SAAS,eAAe,OAAQ,KAA6B,UAAU,UAAU;AACnF,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,YAAI,SAAS,iBAAiB,OAAQ,KAAgC,aAAa,UAAU;AAC3F,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,MAAM,uBAAuB,MAAM;AACrC,UAAI,CAAC,MAAM,QAAQ,MAAM,mBAAmB,GAAG;AAC7C,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,iBAAW,QAAQ,MAAM,qBAAqB;AAC5C,YAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,UAAI,MAAM,qBAAqB,MAAM,kBAAkB,SAAS,GAAG;AACjE,cAAM,mBAAmB,MAAM,oBAAoB;AAAA,UACjD,CAAC,SAAS,CAAC,MAAM,kBAAmB,SAAS,IAAI;AAAA,QACnD;AACA,YAAI,iBAAiB,SAAS,GAAG;AAC/B,gBAAM,IAAI;AAAA,YACR,wEAAwE,iBAAiB,KAAK,IAAI,CAAC;AAAA,YACnG;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAM,cACJ,OACA,KACiC;AACjC,QAAI,CAAC,KAAK,UAAU;AAClB,YAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AAEA,UAAM,uBAAuB,MAAM,aAC/B,oBAAoB,MAAM,YAAY,oBAAoB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IACjF;AACJ,QAAI,MAAM,YAAY;AACpB,YAAM,gBAAgB,uBAAuB,oBAAoB,IAAI,oBAAoB,IAAI;AAC7F,UAAI,CAAC,eAAe;AAClB,cAAM,IAAI;AAAA,UACR,wBAAwB,MAAM,UAAU,+BAA+B,oBAAoB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,QAC/H;AAAA,MACF;AAAA,IACF;AAEA,SAAK,kBAAkB,KAAK;AAE5B,UAAM,YAAY,IAAI,kBAAkB;AACxC,UAAM,gBAAgB,MAAM,WAAW;AACvC,UAAM,gBAAgB,OAAO,UAAU,eAAe,KAAK,OAAO,YAAY;AAC9E,UAAM,aAAa,OAAO,UAAU,eAAe,KAAK,OAAO,SAAS;AACxE,UAAM,aAAa,OAAO,UAAU,eAAe,KAAK,OAAO,SAAS;AACxE,UAAM,8BAA8B,OAAO,UAAU,eAAe,KAAK,OAAO,0BAA0B;AAC1G,UAAM,2BAA2B,OAAO,UAAU,eAAe,KAAK,OAAO,iCAAiC;AAE9G,WAAO,KAAK,GAAG,cAAc,OAAO,OAAO;AACzC,YAAM,WAAW,MAAM,GAAG,QAAQ,wBAAwB;AAAA,QACxD,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,WAAW;AAAA,MACb,CAA+C;AAE/C,UAAI,UAAU;AACZ,YAAI,cAAe,UAAS,aAAa;AACzC,YAAI,WAAY,UAAS,UAAU,MAAM,WAAW;AACpD,YAAI,WAAY,UAAS,UAAU,MAAM,WAAW;AACpD,YAAI,6BAA6B;AAC/B,mBAAS,2BAA2B,MAAM,4BAA4B;AAAA,QACxE;AACA,YAAI,0BAA0B;AAC5B,mBAAS,kCAAkC,MAAM,mCAAmC,CAAC;AAAA,QACvF;AACA,iBAAS,kBAAkB,IAAI,UAAU;AACzC,iBAAS,YAAY,oBAAI,KAAK;AAC9B,YAAI,kBAAkB,MAAO,UAAS,eAAe,MAAM,gBAAgB;AAC3E,YAAI,kBAAkB,MAAO,UAAS,eAAe,MAAM,gBAAgB;AAC3E,YAAI,sBAAsB,MAAO,UAAS,mBAAmB,MAAM,oBAAoB;AACvF,YAAI,wBAAwB,MAAO,UAAS,qBAAqB,MAAM,sBAAsB;AAC7F,YAAI,mBAAmB,MAAO,UAAS,gBAAgB,MAAM,iBAAiB;AAC9E,YAAI,sBAAsB,MAAO,UAAS,mBAAmB,MAAM,oBAAoB;AACvF,YAAI,yBAAyB,MAAO,UAAS,sBAAsB,MAAM,uBAAuB;AAChG,cAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,eAAO;AAAA,MACT;AAEA,YAAM,MAAM,GAAG,OAAO,wBAAwB;AAAA,QAC5C,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,YAAY,gBAAgB,uBAAuB;AAAA,QACnD,SAAS,aAAc,MAAM,WAAW,OAAQ;AAAA,QAChD,SAAS,aAAc,MAAM,WAAW,OAAQ;AAAA,QAChD,0BAA0B,8BACrB,MAAM,4BAA4B,OACnC;AAAA,QACJ,iCAAiC,2BAC5B,MAAM,mCAAmC,CAAC,IAC3C,CAAC;AAAA,QACL,iBAAiB,IAAI,UAAU;AAAA,QAC/B,cAAc,MAAM,gBAAgB;AAAA,QACpC,cAAc,MAAM,gBAAgB;AAAA,QACpC,kBAAkB,MAAM,oBAAoB;AAAA,QAC5C,oBAAoB,MAAM,sBAAsB;AAAA,QAChD,eAAe,MAAM,iBAAiB;AAAA,QACtC,kBAAkB,MAAM,oBAAoB;AAAA,QAC5C,qBAAqB,MAAM,uBAAuB;AAAA,MACpD,CAAsC;AACtC,YAAM,GAAG,QAAQ,GAAG,EAAE,MAAM;AAC5B,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAa,KAIE;AACnB,QAAI,CAAC,KAAK,SAAU,QAAO;AAE3B,UAAM,YAAY,IAAI,kBAAkB;AACxC,UAAM,gBAAgB,IAAI,WAAW;AAErC,WAAO,KAAK,GAAG,cAAc,OAAO,OAAO;AACzC,YAAM,WAAW,MAAM,GAAG,QAAQ,wBAAwB;AAAA,QACxD,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,WAAW;AAAA,MACb,CAA+C;AAC/C,UAAI,CAAC,SAAU,QAAO;AACtB,UACE,SAAS,4BAA4B,QACrC,OAAO,KAAK,SAAS,mCAAmC,CAAC,CAAC,EAAE,SAAS,GACrE;AACA,iBAAS,aAAa;AACtB,iBAAS,UAAU;AACnB,iBAAS,UAAU;AACnB,iBAAS,YAAY,oBAAI,KAAK;AAC9B,cAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,eAAO;AAAA,MACT;AACA,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACF;AAMO,MAAM,8CAA8C,MAAM;AAAA,EAG/D,YAAY,SAAiB,OAAO,oBAAoB;AACtD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAEA,IAAO,2CAAQ;",
+  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { llmProviderRegistry } from '@open-mercato/shared/lib/ai/llm-provider-registry'\nimport { canonicalProviderId } from '../../lib/model-allowlist'\nimport { AiAgentRuntimeOverride } from '../entities'\nimport type { AiAgentLoopStopCondition } from '../../lib/ai-agent-definition'\n\nexport interface AiAgentRuntimeOverrideContext {\n  tenantId: string\n  organizationId?: string | null\n  userId?: string | null\n}\n\nexport interface AiAgentRuntimeOverrideLoopInput {\n  /** Kill switch \u2014 when true, runtime forces stepCountIs(1). */\n  loopDisabled?: boolean | null\n  /** Override loop.maxSteps. */\n  loopMaxSteps?: number | null\n  /** Override loop.budget.maxToolCalls. */\n  loopMaxToolCalls?: number | null\n  /** Override loop.budget.maxWallClockMs. */\n  loopMaxWallClockMs?: number | null\n  /** Override loop.budget.maxTokens. */\n  loopMaxTokens?: number | null\n  /** Override loop.stopWhen \u2014 JSON-safe variants only (stepCount, hasToolCall). */\n  loopStopWhenJson?: AiAgentLoopStopCondition[] | null\n  /** Override loop.activeTools \u2014 must be a subset of agent.allowedTools. */\n  loopActiveToolsJson?: string[] | null\n}\n\nexport interface AiAgentRuntimeOverrideInput extends AiAgentRuntimeOverrideLoopInput {\n  /** null means tenant-wide default (no agent pinning). */\n  agentId?: string | null\n  providerId?: string | null\n  modelId?: string | null\n  baseURL?: string | null\n  allowedOverrideProviders?: string[] | null\n  allowedOverrideModelsByProvider?: Record<string, string[]>\n  /** Input-moderation override: true = on, false = off, null = inherit. */\n  inputModeration?: boolean | null\n  /**\n   * Optional: the agent's declared allowedTools. When provided, loopActiveToolsJson\n   * is validated to be a subset. When omitted, allowlist validation is skipped\n   * (write-time defense only; the runtime re-validates at read time).\n   */\n  agentAllowedTools?: string[]\n}\n\n/**\n * Repository for per-tenant AI runtime overrides (Phase 4a of spec\n * `2026-04-27-ai-agents-provider-model-baseurl-overrides`).\n *\n * All reads MUST filter by `tenant_id` first. The three public methods follow\n * the same fail-safe pattern as sibling repositories: `getDefault` returns\n * null on missing tenant context; `upsertDefault` validates provider id at\n * write time; `clearDefault` soft-deletes via `deleted_at`.\n *\n * Resolution precedence returned by `getDefault`:\n *   1. Agent-specific row (non-null `agent_id`) when `agentId` is provided.\n *   2. Tenant-wide row (`agent_id IS NULL`) for the same `(tenant_id, org_id)`.\n * Both rows are always scoped to the caller's `tenant_id` \u2014 cross-tenant\n * reads are impossible because every query filters `WHERE tenant_id = ?`.\n */\nexport class AiAgentRuntimeOverrideRepository {\n  constructor(private readonly em: EntityManager) {}\n\n  /**\n   * Returns the most-specific active runtime override for the given context.\n   *\n   * When `agentId` is provided, an agent-specific row takes precedence over a\n   * tenant-wide null-agent row. Returns null when neither exists.\n   *\n   * Never returns a row with `deleted_at IS NOT NULL`.\n   */\n  async getDefault(ctx: {\n    tenantId: string\n    organizationId?: string | null\n    agentId?: string | null\n  }): Promise<AiAgentRuntimeOverride | null> {\n    if (!ctx?.tenantId) return null\n\n    const orgFilter = ctx.organizationId ?? null\n\n    // Try agent-specific first when caller provided an agentId.\n    if (ctx.agentId) {\n      const agentRow = await this.em.findOne(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: ctx.agentId,\n        deletedAt: null,\n      } satisfies FilterQuery<AiAgentRuntimeOverride>)\n      if (agentRow) return agentRow\n    }\n\n    // Fall back to tenant-wide row (agentId = null).\n    const tenantRow = await this.em.findOne(AiAgentRuntimeOverride, {\n      tenantId: ctx.tenantId,\n      organizationId: orgFilter,\n      agentId: null,\n      deletedAt: null,\n    } satisfies FilterQuery<AiAgentRuntimeOverride>)\n    return tenantRow ?? null\n  }\n\n  async getExact(ctx: {\n    tenantId: string\n    organizationId?: string | null\n    agentId?: string | null\n  }): Promise<AiAgentRuntimeOverride | null> {\n    if (!ctx?.tenantId) return null\n    const row = await this.em.findOne(AiAgentRuntimeOverride, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId ?? null,\n      agentId: ctx.agentId ?? null,\n      deletedAt: null,\n    } satisfies FilterQuery<AiAgentRuntimeOverride>)\n    return row ?? null\n  }\n\n  /**\n   * Validates and normalizes the loop override fields from an input object.\n   * Throws `AiAgentRuntimeOverrideValidationError` with code\n   * `invalid_loop_override` for any validation failure.\n   *\n   * Validation rules (Phase 3 \u2014 R5 mitigation):\n   * - `loopStopWhenJson`: all items must have kind `stepCount` or `hasToolCall`.\n   *   Items with kind `custom` are rejected \u2014 they cannot be stored as JSON.\n   * - `loopActiveToolsJson`: when `agentAllowedTools` is provided, every entry\n   *   must be in that allowlist.\n   */\n  private validateLoopInput(input: AiAgentRuntimeOverrideInput): void {\n    if (input.loopStopWhenJson != null) {\n      if (!Array.isArray(input.loopStopWhenJson)) {\n        throw new AiAgentRuntimeOverrideValidationError(\n          'loopStopWhenJson must be an array of stop condition objects.',\n          'invalid_loop_override',\n        )\n      }\n      for (const item of input.loopStopWhenJson) {\n        if (!item || typeof item !== 'object' || !('kind' in item)) {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopStopWhenJson items must have a \"kind\" field.',\n            'invalid_loop_override',\n          )\n        }\n        const kind = (item as AiAgentLoopStopCondition).kind\n        if (kind === 'custom') {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopStopWhenJson does not support kind \"custom\" \u2014 only \"stepCount\" and \"hasToolCall\" are JSON-safe and storable.',\n            'invalid_loop_override',\n          )\n        }\n        if (kind !== 'stepCount' && kind !== 'hasToolCall') {\n          throw new AiAgentRuntimeOverrideValidationError(\n            `loopStopWhenJson contains unknown kind \"${String(kind)}\". Allowed: \"stepCount\", \"hasToolCall\".`,\n            'invalid_loop_override',\n          )\n        }\n        if (kind === 'stepCount' && typeof (item as { count?: unknown }).count !== 'number') {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopStopWhenJson stepCount item must have a numeric \"count\" field.',\n            'invalid_loop_override',\n          )\n        }\n        if (kind === 'hasToolCall' && typeof (item as { toolName?: unknown }).toolName !== 'string') {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopStopWhenJson hasToolCall item must have a string \"toolName\" field.',\n            'invalid_loop_override',\n          )\n        }\n      }\n    }\n\n    if (input.loopActiveToolsJson != null) {\n      if (!Array.isArray(input.loopActiveToolsJson)) {\n        throw new AiAgentRuntimeOverrideValidationError(\n          'loopActiveToolsJson must be an array of tool name strings.',\n          'invalid_loop_override',\n        )\n      }\n      for (const name of input.loopActiveToolsJson) {\n        if (typeof name !== 'string' || name.length === 0) {\n          throw new AiAgentRuntimeOverrideValidationError(\n            'loopActiveToolsJson entries must be non-empty strings.',\n            'invalid_loop_override',\n          )\n        }\n      }\n      if (input.agentAllowedTools && input.agentAllowedTools.length > 0) {\n        const outsideAllowlist = input.loopActiveToolsJson.filter(\n          (name) => !input.agentAllowedTools!.includes(name),\n        )\n        if (outsideAllowlist.length > 0) {\n          throw new AiAgentRuntimeOverrideValidationError(\n            `loopActiveToolsJson contains tools outside the agent's allowedTools: ${outsideAllowlist.join(', ')}.`,\n            'invalid_loop_override',\n          )\n        }\n      }\n    }\n  }\n\n  /**\n   * Inserts or updates the runtime override for the given context.\n   *\n   * Validates `providerId` against the registry at write time so an admin\n   * cannot save a typo (Phase 1.4 contract re-applied per spec \u00A7Data Models).\n   * An unknown provider id throws a typed error.\n   *\n   * Also validates loop override fields (R5 mitigation \u2014 Phase 3):\n   * - `loopStopWhenJson` items must use only JSON-safe kinds.\n   * - `loopActiveToolsJson` items must be a subset of `agentAllowedTools`\n   *   when that is provided.\n   *\n   * The R6 base-URL allowlist check is intentionally NOT performed here \u2014\n   * that enforcement lives at the HTTP layer (PUT settings route). The\n   * repository trusts that callers have already validated the value.\n   */\n  async upsertDefault(\n    input: AiAgentRuntimeOverrideInput,\n    ctx: AiAgentRuntimeOverrideContext,\n  ): Promise<AiAgentRuntimeOverride> {\n    if (!ctx?.tenantId) {\n      throw new Error('AiAgentRuntimeOverrideRepository.upsertDefault requires tenantId')\n    }\n\n    const normalizedProviderId = input.providerId\n      ? canonicalProviderId(input.providerId, llmProviderRegistry.list().map((p) => p.id))\n      : null\n    if (input.providerId) {\n      const knownProvider = normalizedProviderId ? llmProviderRegistry.get(normalizedProviderId) : null\n      if (!knownProvider) {\n        throw new AiAgentRuntimeOverrideValidationError(\n          `Unknown provider id \"${input.providerId}\". Registered provider ids: ${llmProviderRegistry.list().map((p) => p.id).join(', ')}.`,\n        )\n      }\n    }\n\n    this.validateLoopInput(input)\n\n    const orgFilter = ctx.organizationId ?? null\n    const agentIdFilter = input.agentId ?? null\n    const hasProviderId = Object.prototype.hasOwnProperty.call(input, 'providerId')\n    const hasModelId = Object.prototype.hasOwnProperty.call(input, 'modelId')\n    const hasBaseURL = Object.prototype.hasOwnProperty.call(input, 'baseURL')\n    const hasAllowedOverrideProviders = Object.prototype.hasOwnProperty.call(input, 'allowedOverrideProviders')\n    const hasAllowedOverrideModels = Object.prototype.hasOwnProperty.call(input, 'allowedOverrideModelsByProvider')\n\n    return this.em.transactional(async (tx) => {\n      const existing = await tx.findOne(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: agentIdFilter,\n        deletedAt: null,\n      } satisfies FilterQuery<AiAgentRuntimeOverride>)\n\n      if (existing) {\n        if (hasProviderId) existing.providerId = normalizedProviderId\n        if (hasModelId) existing.modelId = input.modelId ?? null\n        if (hasBaseURL) existing.baseUrl = input.baseURL ?? null\n        if (hasAllowedOverrideProviders) {\n          existing.allowedOverrideProviders = input.allowedOverrideProviders ?? null\n        }\n        if (hasAllowedOverrideModels) {\n          existing.allowedOverrideModelsByProvider = input.allowedOverrideModelsByProvider ?? {}\n        }\n        existing.updatedByUserId = ctx.userId ?? null\n        existing.updatedAt = new Date()\n        if ('loopDisabled' in input) existing.loopDisabled = input.loopDisabled ?? null\n        if ('loopMaxSteps' in input) existing.loopMaxSteps = input.loopMaxSteps ?? null\n        if ('loopMaxToolCalls' in input) existing.loopMaxToolCalls = input.loopMaxToolCalls ?? null\n        if ('loopMaxWallClockMs' in input) existing.loopMaxWallClockMs = input.loopMaxWallClockMs ?? null\n        if ('loopMaxTokens' in input) existing.loopMaxTokens = input.loopMaxTokens ?? null\n        if ('loopStopWhenJson' in input) existing.loopStopWhenJson = input.loopStopWhenJson ?? null\n        if ('loopActiveToolsJson' in input) existing.loopActiveToolsJson = input.loopActiveToolsJson ?? null\n        if ('inputModeration' in input) existing.inputModeration = input.inputModeration ?? null\n        await tx.persist(existing).flush()\n        return existing\n      }\n\n      const row = tx.create(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: agentIdFilter,\n        providerId: hasProviderId ? normalizedProviderId : null,\n        modelId: hasModelId ? (input.modelId ?? null) : null,\n        baseUrl: hasBaseURL ? (input.baseURL ?? null) : null,\n        allowedOverrideProviders: hasAllowedOverrideProviders\n          ? (input.allowedOverrideProviders ?? null)\n          : null,\n        allowedOverrideModelsByProvider: hasAllowedOverrideModels\n          ? (input.allowedOverrideModelsByProvider ?? {})\n          : {},\n        updatedByUserId: ctx.userId ?? null,\n        loopDisabled: input.loopDisabled ?? null,\n        loopMaxSteps: input.loopMaxSteps ?? null,\n        loopMaxToolCalls: input.loopMaxToolCalls ?? null,\n        loopMaxWallClockMs: input.loopMaxWallClockMs ?? null,\n        loopMaxTokens: input.loopMaxTokens ?? null,\n        loopStopWhenJson: input.loopStopWhenJson ?? null,\n        loopActiveToolsJson: input.loopActiveToolsJson ?? null,\n        inputModeration: input.inputModeration ?? null,\n      } as unknown as AiAgentRuntimeOverride)\n      await tx.persist(row).flush()\n      return row\n    })\n  }\n\n  /**\n   * Soft-deletes the active override matching the given context by setting\n   * `deleted_at = now()`. Returns true when a row was found and cleared,\n   * false when no active row existed.\n   */\n  async clearDefault(ctx: {\n    tenantId: string\n    organizationId?: string | null\n    agentId?: string | null\n  }): Promise<boolean> {\n    if (!ctx?.tenantId) return false\n\n    const orgFilter = ctx.organizationId ?? null\n    const agentIdFilter = ctx.agentId ?? null\n\n    return this.em.transactional(async (tx) => {\n      const existing = await tx.findOne(AiAgentRuntimeOverride, {\n        tenantId: ctx.tenantId,\n        organizationId: orgFilter,\n        agentId: agentIdFilter,\n        deletedAt: null,\n      } satisfies FilterQuery<AiAgentRuntimeOverride>)\n      if (!existing) return false\n      if (\n        existing.allowedOverrideProviders != null ||\n        Object.keys(existing.allowedOverrideModelsByProvider ?? {}).length > 0\n      ) {\n        existing.providerId = null\n        existing.modelId = null\n        existing.baseUrl = null\n        existing.updatedAt = new Date()\n        await tx.persist(existing).flush()\n        return true\n      }\n      existing.deletedAt = new Date()\n      await tx.persist(existing).flush()\n      return true\n    })\n  }\n}\n\n/**\n * Thrown by `upsertDefault` when validation fails (unknown provider id,\n * invalid loop override JSON).\n */\nexport class AiAgentRuntimeOverrideValidationError extends Error {\n  readonly code: string\n\n  constructor(message: string, code = 'invalid_override') {\n    super(message)\n    this.name = 'AiAgentRuntimeOverrideValidationError'\n    this.code = code\n  }\n}\n\nexport default AiAgentRuntimeOverrideRepository\n"],
+  "mappings": "AACA,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AA2DhC,MAAM,iCAAiC;AAAA,EAC5C,YAA6B,IAAmB;AAAnB;AAAA,EAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUjD,MAAM,WAAW,KAI0B;AACzC,QAAI,CAAC,KAAK,SAAU,QAAO;AAE3B,UAAM,YAAY,IAAI,kBAAkB;AAGxC,QAAI,IAAI,SAAS;AACf,YAAM,WAAW,MAAM,KAAK,GAAG,QAAQ,wBAAwB;AAAA,QAC7D,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS,IAAI;AAAA,QACb,WAAW;AAAA,MACb,CAA+C;AAC/C,UAAI,SAAU,QAAO;AAAA,IACvB;AAGA,UAAM,YAAY,MAAM,KAAK,GAAG,QAAQ,wBAAwB;AAAA,MAC9D,UAAU,IAAI;AAAA,MACd,gBAAgB;AAAA,MAChB,SAAS;AAAA,MACT,WAAW;AAAA,IACb,CAA+C;AAC/C,WAAO,aAAa;AAAA,EACtB;AAAA,EAEA,MAAM,SAAS,KAI4B;AACzC,QAAI,CAAC,KAAK,SAAU,QAAO;AAC3B,UAAM,MAAM,MAAM,KAAK,GAAG,QAAQ,wBAAwB;AAAA,MACxD,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI,kBAAkB;AAAA,MACtC,SAAS,IAAI,WAAW;AAAA,MACxB,WAAW;AAAA,IACb,CAA+C;AAC/C,WAAO,OAAO;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaQ,kBAAkB,OAA0C;AAClE,QAAI,MAAM,oBAAoB,MAAM;AAClC,UAAI,CAAC,MAAM,QAAQ,MAAM,gBAAgB,GAAG;AAC1C,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,iBAAW,QAAQ,MAAM,kBAAkB;AACzC,YAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,EAAE,UAAU,OAAO;AAC1D,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,cAAM,OAAQ,KAAkC;AAChD,YAAI,SAAS,UAAU;AACrB,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,YAAI,SAAS,eAAe,SAAS,eAAe;AAClD,gBAAM,IAAI;AAAA,YACR,2CAA2C,OAAO,IAAI,CAAC;AAAA,YACvD;AAAA,UACF;AAAA,QACF;AACA,YAAI,SAAS,eAAe,OAAQ,KAA6B,UAAU,UAAU;AACnF,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,YAAI,SAAS,iBAAiB,OAAQ,KAAgC,aAAa,UAAU;AAC3F,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,MAAM,uBAAuB,MAAM;AACrC,UAAI,CAAC,MAAM,QAAQ,MAAM,mBAAmB,GAAG;AAC7C,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,iBAAW,QAAQ,MAAM,qBAAqB;AAC5C,YAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,UAAI,MAAM,qBAAqB,MAAM,kBAAkB,SAAS,GAAG;AACjE,cAAM,mBAAmB,MAAM,oBAAoB;AAAA,UACjD,CAAC,SAAS,CAAC,MAAM,kBAAmB,SAAS,IAAI;AAAA,QACnD;AACA,YAAI,iBAAiB,SAAS,GAAG;AAC/B,gBAAM,IAAI;AAAA,YACR,wEAAwE,iBAAiB,KAAK,IAAI,CAAC;AAAA,YACnG;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAM,cACJ,OACA,KACiC;AACjC,QAAI,CAAC,KAAK,UAAU;AAClB,YAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AAEA,UAAM,uBAAuB,MAAM,aAC/B,oBAAoB,MAAM,YAAY,oBAAoB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IACjF;AACJ,QAAI,MAAM,YAAY;AACpB,YAAM,gBAAgB,uBAAuB,oBAAoB,IAAI,oBAAoB,IAAI;AAC7F,UAAI,CAAC,eAAe;AAClB,cAAM,IAAI;AAAA,UACR,wBAAwB,MAAM,UAAU,+BAA+B,oBAAoB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,QAC/H;AAAA,MACF;AAAA,IACF;AAEA,SAAK,kBAAkB,KAAK;AAE5B,UAAM,YAAY,IAAI,kBAAkB;AACxC,UAAM,gBAAgB,MAAM,WAAW;AACvC,UAAM,gBAAgB,OAAO,UAAU,eAAe,KAAK,OAAO,YAAY;AAC9E,UAAM,aAAa,OAAO,UAAU,eAAe,KAAK,OAAO,SAAS;AACxE,UAAM,aAAa,OAAO,UAAU,eAAe,KAAK,OAAO,SAAS;AACxE,UAAM,8BAA8B,OAAO,UAAU,eAAe,KAAK,OAAO,0BAA0B;AAC1G,UAAM,2BAA2B,OAAO,UAAU,eAAe,KAAK,OAAO,iCAAiC;AAE9G,WAAO,KAAK,GAAG,cAAc,OAAO,OAAO;AACzC,YAAM,WAAW,MAAM,GAAG,QAAQ,wBAAwB;AAAA,QACxD,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,WAAW;AAAA,MACb,CAA+C;AAE/C,UAAI,UAAU;AACZ,YAAI,cAAe,UAAS,aAAa;AACzC,YAAI,WAAY,UAAS,UAAU,MAAM,WAAW;AACpD,YAAI,WAAY,UAAS,UAAU,MAAM,WAAW;AACpD,YAAI,6BAA6B;AAC/B,mBAAS,2BAA2B,MAAM,4BAA4B;AAAA,QACxE;AACA,YAAI,0BAA0B;AAC5B,mBAAS,kCAAkC,MAAM,mCAAmC,CAAC;AAAA,QACvF;AACA,iBAAS,kBAAkB,IAAI,UAAU;AACzC,iBAAS,YAAY,oBAAI,KAAK;AAC9B,YAAI,kBAAkB,MAAO,UAAS,eAAe,MAAM,gBAAgB;AAC3E,YAAI,kBAAkB,MAAO,UAAS,eAAe,MAAM,gBAAgB;AAC3E,YAAI,sBAAsB,MAAO,UAAS,mBAAmB,MAAM,oBAAoB;AACvF,YAAI,wBAAwB,MAAO,UAAS,qBAAqB,MAAM,sBAAsB;AAC7F,YAAI,mBAAmB,MAAO,UAAS,gBAAgB,MAAM,iBAAiB;AAC9E,YAAI,sBAAsB,MAAO,UAAS,mBAAmB,MAAM,oBAAoB;AACvF,YAAI,yBAAyB,MAAO,UAAS,sBAAsB,MAAM,uBAAuB;AAChG,YAAI,qBAAqB,MAAO,UAAS,kBAAkB,MAAM,mBAAmB;AACpF,cAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,eAAO;AAAA,MACT;AAEA,YAAM,MAAM,GAAG,OAAO,wBAAwB;AAAA,QAC5C,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,YAAY,gBAAgB,uBAAuB;AAAA,QACnD,SAAS,aAAc,MAAM,WAAW,OAAQ;AAAA,QAChD,SAAS,aAAc,MAAM,WAAW,OAAQ;AAAA,QAChD,0BAA0B,8BACrB,MAAM,4BAA4B,OACnC;AAAA,QACJ,iCAAiC,2BAC5B,MAAM,mCAAmC,CAAC,IAC3C,CAAC;AAAA,QACL,iBAAiB,IAAI,UAAU;AAAA,QAC/B,cAAc,MAAM,gBAAgB;AAAA,QACpC,cAAc,MAAM,gBAAgB;AAAA,QACpC,kBAAkB,MAAM,oBAAoB;AAAA,QAC5C,oBAAoB,MAAM,sBAAsB;AAAA,QAChD,eAAe,MAAM,iBAAiB;AAAA,QACtC,kBAAkB,MAAM,oBAAoB;AAAA,QAC5C,qBAAqB,MAAM,uBAAuB;AAAA,QAClD,iBAAiB,MAAM,mBAAmB;AAAA,MAC5C,CAAsC;AACtC,YAAM,GAAG,QAAQ,GAAG,EAAE,MAAM;AAC5B,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAa,KAIE;AACnB,QAAI,CAAC,KAAK,SAAU,QAAO;AAE3B,UAAM,YAAY,IAAI,kBAAkB;AACxC,UAAM,gBAAgB,IAAI,WAAW;AAErC,WAAO,KAAK,GAAG,cAAc,OAAO,OAAO;AACzC,YAAM,WAAW,MAAM,GAAG,QAAQ,wBAAwB;AAAA,QACxD,UAAU,IAAI;AAAA,QACd,gBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,WAAW;AAAA,MACb,CAA+C;AAC/C,UAAI,CAAC,SAAU,QAAO;AACtB,UACE,SAAS,4BAA4B,QACrC,OAAO,KAAK,SAAS,mCAAmC,CAAC,CAAC,EAAE,SAAS,GACrE;AACA,iBAAS,aAAa;AACtB,iBAAS,UAAU;AACnB,iBAAS,UAAU;AACnB,iBAAS,YAAY,oBAAI,KAAK;AAC9B,cAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,eAAO;AAAA,MACT;AACA,eAAS,YAAY,oBAAI,KAAK;AAC9B,YAAM,GAAG,QAAQ,QAAQ,EAAE,MAAM;AACjC,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACF;AAMO,MAAM,8CAA8C,MAAM;AAAA,EAG/D,YAAY,SAAiB,OAAO,oBAAoB;AACtD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAEA,IAAO,2CAAQ;",
   "names": []
 }

package/dist/modules/ai_assistant/data/repositories/AiModerationFlagRepository.js

@@ -0,0 +1,44 @@
+import { AiModerationFlag } from "../entities.js";
+class AiModerationFlagRepository {
+  constructor(em) {
+    this.em = em;
+  }
+  async create(input) {
+    const flag = this.em.create(AiModerationFlag, {
+      tenantId: input.tenantId,
+      organizationId: input.organizationId ?? null,
+      agentId: input.agentId,
+      userId: input.userId,
+      providerId: input.providerId,
+      modelId: input.modelId,
+      categories: input.categories
+    });
+    this.em.persist(flag);
+    await this.em.flush();
+    return flag;
+  }
+  async list(filter) {
+    const where = { tenantId: filter.tenantId };
+    if (filter.organizationId !== void 0 && filter.organizationId !== null) {
+      where.organizationId = filter.organizationId;
+    }
+    if (filter.agentId) where.agentId = filter.agentId;
+    if (filter.userId) where.userId = filter.userId;
+    if (filter.from || filter.to) {
+      const createdAt = {};
+      if (filter.from) createdAt.$gte = filter.from;
+      if (filter.to) createdAt.$lte = filter.to;
+      where.createdAt = createdAt;
+    }
+    const [items, total] = await this.em.findAndCount(AiModerationFlag, where, {
+      orderBy: { createdAt: "desc" },
+      limit: filter.pageSize,
+      offset: (filter.page - 1) * filter.pageSize
+    });
+    return { items, total };
+  }
+}
+export {
+  AiModerationFlagRepository
+};
+//# sourceMappingURL=AiModerationFlagRepository.js.map

package/dist/modules/ai_assistant/data/repositories/AiModerationFlagRepository.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/ai_assistant/data/repositories/AiModerationFlagRepository.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { AiModerationFlag } from '../entities'\nimport type { ModerationCategoryResult } from '../../lib/moderation'\n\nexport interface CreateModerationFlagInput {\n  tenantId: string\n  organizationId?: string | null\n  agentId: string\n  userId: string\n  providerId: string\n  modelId: string\n  categories: Record<string, ModerationCategoryResult>\n}\n\nexport interface ListModerationFlagsFilter {\n  tenantId: string\n  organizationId?: string | null\n  agentId?: string\n  userId?: string\n  /** Inclusive lower bound on `created_at`. */\n  from?: Date\n  /** Inclusive upper bound on `created_at`. */\n  to?: Date\n  page: number\n  pageSize: number\n}\n\nexport interface ModerationFlagListResult {\n  items: AiModerationFlag[]\n  total: number\n}\n\n/**\n * Repository for the append-only `ai_moderation_flags` audit table. Every read\n * is tenant-scoped \u2014 cross-tenant access is structurally impossible because\n * `tenantId` is always part of the filter.\n *\n * Spec `2026-06-04-ai-input-moderation-and-safety-identifiers`.\n */\nexport class AiModerationFlagRepository {\n  constructor(private readonly em: EntityManager) {}\n\n  async create(input: CreateModerationFlagInput): Promise<AiModerationFlag> {\n    const flag = this.em.create(AiModerationFlag, {\n      tenantId: input.tenantId,\n      organizationId: input.organizationId ?? null,\n      agentId: input.agentId,\n      userId: input.userId,\n      providerId: input.providerId,\n      modelId: input.modelId,\n      categories: input.categories,\n    })\n    this.em.persist(flag)\n    await this.em.flush()\n    return flag\n  }\n\n  async list(filter: ListModerationFlagsFilter): Promise<ModerationFlagListResult> {\n    const where: Record<string, unknown> = { tenantId: filter.tenantId }\n    if (filter.organizationId !== undefined && filter.organizationId !== null) {\n      where.organizationId = filter.organizationId\n    }\n    if (filter.agentId) where.agentId = filter.agentId\n    if (filter.userId) where.userId = filter.userId\n    if (filter.from || filter.to) {\n      const createdAt: Record<string, Date> = {}\n      if (filter.from) createdAt.$gte = filter.from\n      if (filter.to) createdAt.$lte = filter.to\n      where.createdAt = createdAt\n    }\n\n    const [items, total] = await this.em.findAndCount(AiModerationFlag, where, {\n      orderBy: { createdAt: 'desc' },\n      limit: filter.pageSize,\n      offset: (filter.page - 1) * filter.pageSize,\n    })\n    return { items, total }\n  }\n}\n"],
+  "mappings": "AACA,SAAS,wBAAwB;AAsC1B,MAAM,2BAA2B;AAAA,EACtC,YAA6B,IAAmB;AAAnB;AAAA,EAAoB;AAAA,EAEjD,MAAM,OAAO,OAA6D;AACxE,UAAM,OAAO,KAAK,GAAG,OAAO,kBAAkB;AAAA,MAC5C,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf,YAAY,MAAM;AAAA,IACpB,CAAC;AACD,SAAK,GAAG,QAAQ,IAAI;AACpB,UAAM,KAAK,GAAG,MAAM;AACpB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,KAAK,QAAsE;AAC/E,UAAM,QAAiC,EAAE,UAAU,OAAO,SAAS;AACnE,QAAI,OAAO,mBAAmB,UAAa,OAAO,mBAAmB,MAAM;AACzE,YAAM,iBAAiB,OAAO;AAAA,IAChC;AACA,QAAI,OAAO,QAAS,OAAM,UAAU,OAAO;AAC3C,QAAI,OAAO,OAAQ,OAAM,SAAS,OAAO;AACzC,QAAI,OAAO,QAAQ,OAAO,IAAI;AAC5B,YAAM,YAAkC,CAAC;AACzC,UAAI,OAAO,KAAM,WAAU,OAAO,OAAO;AACzC,UAAI,OAAO,GAAI,WAAU,OAAO,OAAO;AACvC,YAAM,YAAY;AAAA,IACpB;AAEA,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM,KAAK,GAAG,aAAa,kBAAkB,OAAO;AAAA,MACzE,SAAS,EAAE,WAAW,OAAO;AAAA,MAC7B,OAAO,OAAO;AAAA,MACd,SAAS,OAAO,OAAO,KAAK,OAAO;AAAA,IACrC,CAAC;AACD,WAAO,EAAE,OAAO,MAAM;AAAA,EACxB;AACF;",
+  "names": []
+}

package/dist/modules/ai_assistant/di.js

@@ -1,8 +1,12 @@
-import { asValue } from "awilix";
+import { asFunction, asValue } from "awilix";
 import { toolRegistry } from "./lib/tool-registry.js";
+import { createModerationService } from "./lib/moderation.js";
 function register(container) {
   container.register({
-    mcpToolRegistry: asValue(toolRegistry)
+    mcpToolRegistry: asValue(toolRegistry),
+    // Input pre-moderation service (OpenAI /v1/moderations). Singleton +
+    // overridable by downstream apps via the module overrides DI seam.
+    moderationService: asFunction(() => createModerationService()).singleton()
   });
 }
 export {

package/dist/modules/ai_assistant/di.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/ai_assistant/di.ts"],
-  "sourcesContent": ["import { asValue } from 'awilix'\nimport type { AwilixContainer } from 'awilix'\nimport { toolRegistry } from './lib/tool-registry'\n\nexport function register(container: AwilixContainer): void {\n  container.register({\n    mcpToolRegistry: asValue(toolRegistry),\n  })\n}\n"],
-  "mappings": "AAAA,SAAS,eAAe;AAExB,SAAS,oBAAoB;AAEtB,SAAS,SAAS,WAAkC;AACzD,YAAU,SAAS;AAAA,IACjB,iBAAiB,QAAQ,YAAY;AAAA,EACvC,CAAC;AACH;",
+  "sourcesContent": ["import { asFunction, asValue } from 'awilix'\nimport type { AwilixContainer } from 'awilix'\nimport { toolRegistry } from './lib/tool-registry'\nimport { createModerationService } from './lib/moderation'\n\nexport function register(container: AwilixContainer): void {\n  container.register({\n    mcpToolRegistry: asValue(toolRegistry),\n    // Input pre-moderation service (OpenAI /v1/moderations). Singleton +\n    // overridable by downstream apps via the module overrides DI seam.\n    moderationService: asFunction(() => createModerationService()).singleton(),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,eAAe;AAEpC,SAAS,oBAAoB;AAC7B,SAAS,+BAA+B;AAEjC,SAAS,SAAS,WAAkC;AACzD,YAAU,SAAS;AAAA,IACjB,iBAAiB,QAAQ,YAAY;AAAA;AAAA;AAAA,IAGrC,mBAAmB,WAAW,MAAM,wBAAwB,CAAC,EAAE,UAAU;AAAA,EAC3E,CAAC;AACH;",
   "names": []
 }

package/dist/modules/ai_assistant/events.js

@@ -39,6 +39,12 @@ const events = [
     entity: "ai_chat_conversation",
     category: "lifecycle",
     clientBroadcast: true
+  },
+  {
+    id: "ai_assistant.moderation_flag.created",
+    label: "AI Moderation Flag Created",
+    entity: "ai_moderation_flag",
+    category: "system"
   }
 ];
 const eventsConfig = createModuleEvents({

package/dist/modules/ai_assistant/events.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/ai_assistant/events.ts"],
-  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\n/**\n * AI Assistant Module Events\n *\n * Typed declarations for the pending-action lifecycle events emitted by\n * the Phase 3 WS-C mutation approval flow. The event IDs are FROZEN per\n * `BACKWARD_COMPATIBILITY.md` \u00A75 (contract surface #5) and MUST NOT be\n * renamed; additive payload changes are allowed.\n *\n * - `ai.action.confirmed` \u2014 emitted by `executePendingActionConfirm`\n *   (Step 5.8) after the `pending \u2192 confirmed \u2192 executing \u2192 {confirmed|\n *   failed}` transition. The handler's outcome lives in\n *   `executionResult`; partial-stale rows carry the surviving stale\n *   records via `failedRecords`.\n * - `ai.action.cancelled` \u2014 emitted by `executePendingActionCancel`\n *   (Step 5.9) after the atomic `pending \u2192 cancelled` transition.\n * - `ai.action.expired` \u2014 emitted by the Step 5.9 expired short-circuit\n *   AND by the Step 5.12 cleanup worker when the TTL elapses. The\n *   worker is the actor in that path, so `resolvedByUserId` is NOT part\n *   of the payload.\n */\nconst events = [\n  {\n    id: 'ai.action.confirmed',\n    label: 'AI Pending Action Confirmed',\n    entity: 'ai_pending_action',\n    category: 'system' as const,\n  },\n  {\n    id: 'ai.action.cancelled',\n    label: 'AI Pending Action Cancelled',\n    entity: 'ai_pending_action',\n    category: 'system' as const,\n  },\n  {\n    id: 'ai.action.expired',\n    label: 'AI Pending Action Expired',\n    entity: 'ai_pending_action',\n    category: 'system' as const,\n  },\n  {\n    id: 'ai.token_usage.recorded',\n    label: 'AI Token Usage Recorded',\n    entity: 'token_usage',\n    category: 'system' as const,\n    clientBroadcast: false,\n    portalBroadcast: false,\n  },\n  {\n    id: 'ai_assistant.conversation.shared',\n    label: 'AI Conversation Shared',\n    entity: 'ai_chat_conversation',\n    category: 'lifecycle' as const,\n    clientBroadcast: true,\n  },\n  {\n    id: 'ai_assistant.conversation.unshared',\n    label: 'AI Conversation Unshared',\n    entity: 'ai_chat_conversation',\n    category: 'lifecycle' as const,\n    clientBroadcast: true,\n  },\n] as const\n\nexport const eventsConfig = createModuleEvents({\n  moduleId: 'ai_assistant',\n  events,\n})\n\n/** Type-safe event emitter for the ai_assistant module. */\nexport const emitAiAssistantEvent = eventsConfig.emit\n\n/** Event IDs declared by the ai_assistant module. */\nexport type AiAssistantEventId = (typeof events)[number]['id']\n\n/**\n * Typed payload contracts for each ai_assistant event. Payloads are\n * additive-only \u2014 extend existing fields rather than renaming/removing.\n */\nexport interface AiActionFailedRecordPayload {\n  recordId: string\n  error: { code: string; message: string }\n}\n\nexport interface AiActionExecutionResultPayload {\n  recordId?: string\n  commandName?: string\n  error?: { code: string; message: string }\n}\n\nexport interface AiActionConfirmedPayload {\n  pendingActionId: string\n  agentId: string\n  toolName: string\n  status: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string\n  resolvedByUserId: string\n  resolvedAt: string\n  executionResult: AiActionExecutionResultPayload | null\n  failedRecords?: AiActionFailedRecordPayload[] | null\n}\n\nexport interface AiActionCancelledPayload {\n  pendingActionId: string\n  agentId: string\n  toolName: string\n  status: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string\n  resolvedByUserId: string\n  resolvedAt: string\n  executionResult: AiActionExecutionResultPayload | null\n  reason?: string\n}\n\nexport interface AiActionExpiredPayload {\n  pendingActionId: string\n  agentId: string\n  toolName: string\n  status: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string | null\n  resolvedByUserId: null\n  resolvedAt: string\n  expiresAt?: string\n  expiredAt?: string\n}\n\nexport interface AiConversationSharedPayload {\n  conversationId: string\n  tenantId: string\n  organizationId: string | null\n  ownerUserId: string\n  participantUserId: string\n  role: string\n}\n\nexport interface AiConversationUnsharedPayload {\n  conversationId: string\n  tenantId: string\n  organizationId: string | null\n  ownerUserId: string\n  participantUserId: string\n}\n\nexport default eventsConfig\n"],
-  "mappings": "AAAA,SAAS,0BAA0B;AAsBnC,MAAM,SAAS;AAAA,EACb;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AACF;AAEO,MAAM,eAAe,mBAAmB;AAAA,EAC7C,UAAU;AAAA,EACV;AACF,CAAC;AAGM,MAAM,uBAAuB,aAAa;AA+EjD,IAAO,iBAAQ;",
+  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\n/**\n * AI Assistant Module Events\n *\n * Typed declarations for the pending-action lifecycle events emitted by\n * the Phase 3 WS-C mutation approval flow. The event IDs are FROZEN per\n * `BACKWARD_COMPATIBILITY.md` \u00A75 (contract surface #5) and MUST NOT be\n * renamed; additive payload changes are allowed.\n *\n * - `ai.action.confirmed` \u2014 emitted by `executePendingActionConfirm`\n *   (Step 5.8) after the `pending \u2192 confirmed \u2192 executing \u2192 {confirmed|\n *   failed}` transition. The handler's outcome lives in\n *   `executionResult`; partial-stale rows carry the surviving stale\n *   records via `failedRecords`.\n * - `ai.action.cancelled` \u2014 emitted by `executePendingActionCancel`\n *   (Step 5.9) after the atomic `pending \u2192 cancelled` transition.\n * - `ai.action.expired` \u2014 emitted by the Step 5.9 expired short-circuit\n *   AND by the Step 5.12 cleanup worker when the TTL elapses. The\n *   worker is the actor in that path, so `resolvedByUserId` is NOT part\n *   of the payload.\n */\nconst events = [\n  {\n    id: 'ai.action.confirmed',\n    label: 'AI Pending Action Confirmed',\n    entity: 'ai_pending_action',\n    category: 'system' as const,\n  },\n  {\n    id: 'ai.action.cancelled',\n    label: 'AI Pending Action Cancelled',\n    entity: 'ai_pending_action',\n    category: 'system' as const,\n  },\n  {\n    id: 'ai.action.expired',\n    label: 'AI Pending Action Expired',\n    entity: 'ai_pending_action',\n    category: 'system' as const,\n  },\n  {\n    id: 'ai.token_usage.recorded',\n    label: 'AI Token Usage Recorded',\n    entity: 'token_usage',\n    category: 'system' as const,\n    clientBroadcast: false,\n    portalBroadcast: false,\n  },\n  {\n    id: 'ai_assistant.conversation.shared',\n    label: 'AI Conversation Shared',\n    entity: 'ai_chat_conversation',\n    category: 'lifecycle' as const,\n    clientBroadcast: true,\n  },\n  {\n    id: 'ai_assistant.conversation.unshared',\n    label: 'AI Conversation Unshared',\n    entity: 'ai_chat_conversation',\n    category: 'lifecycle' as const,\n    clientBroadcast: true,\n  },\n  {\n    id: 'ai_assistant.moderation_flag.created',\n    label: 'AI Moderation Flag Created',\n    entity: 'ai_moderation_flag',\n    category: 'system' as const,\n  },\n] as const\n\nexport const eventsConfig = createModuleEvents({\n  moduleId: 'ai_assistant',\n  events,\n})\n\n/** Type-safe event emitter for the ai_assistant module. */\nexport const emitAiAssistantEvent = eventsConfig.emit\n\n/** Event IDs declared by the ai_assistant module. */\nexport type AiAssistantEventId = (typeof events)[number]['id']\n\n/**\n * Typed payload contracts for each ai_assistant event. Payloads are\n * additive-only \u2014 extend existing fields rather than renaming/removing.\n */\nexport interface AiActionFailedRecordPayload {\n  recordId: string\n  error: { code: string; message: string }\n}\n\nexport interface AiActionExecutionResultPayload {\n  recordId?: string\n  commandName?: string\n  error?: { code: string; message: string }\n}\n\nexport interface AiActionConfirmedPayload {\n  pendingActionId: string\n  agentId: string\n  toolName: string\n  status: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string\n  resolvedByUserId: string\n  resolvedAt: string\n  executionResult: AiActionExecutionResultPayload | null\n  failedRecords?: AiActionFailedRecordPayload[] | null\n}\n\nexport interface AiActionCancelledPayload {\n  pendingActionId: string\n  agentId: string\n  toolName: string\n  status: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string\n  resolvedByUserId: string\n  resolvedAt: string\n  executionResult: AiActionExecutionResultPayload | null\n  reason?: string\n}\n\nexport interface AiActionExpiredPayload {\n  pendingActionId: string\n  agentId: string\n  toolName: string\n  status: string\n  tenantId: string | null\n  organizationId: string | null\n  userId: string | null\n  resolvedByUserId: null\n  resolvedAt: string\n  expiresAt?: string\n  expiredAt?: string\n}\n\nexport interface AiConversationSharedPayload {\n  conversationId: string\n  tenantId: string\n  organizationId: string | null\n  ownerUserId: string\n  participantUserId: string\n  role: string\n}\n\nexport interface AiConversationUnsharedPayload {\n  conversationId: string\n  tenantId: string\n  organizationId: string | null\n  ownerUserId: string\n  participantUserId: string\n}\n\n/**\n * Emitted (best-effort) when the input moderation gate blocks a turn and the\n * audit row is persisted. Carries category flags only \u2014 never prompt content.\n *\n * Spec `2026-06-04-ai-input-moderation-and-safety-identifiers`.\n */\nexport interface AiModerationFlagCreatedPayload {\n  id: string\n  tenantId: string\n  organizationId: string | null\n  agentId: string\n  userId: string\n  categories: string[]\n}\n\nexport default eventsConfig\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AAsBnC,MAAM,SAAS;AAAA,EACb;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,iBAAiB;AAAA,EACnB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AACF;AAEO,MAAM,eAAe,mBAAmB;AAAA,EAC7C,UAAU;AAAA,EACV;AACF,CAAC;AAGM,MAAM,uBAAuB,aAAa;AA8FjD,IAAO,iBAAQ;",
   "names": []
 }

package/dist/modules/ai_assistant/i18n/de.json

@@ -62,6 +62,18 @@
   "ai_assistant.agents.model_override.subtitle": "Überschreibe Standardanbieter und -modell für diesen Mandanten und Agenten.",
   "ai_assistant.agents.model_override.tenantOverride": "Mandanten-Überschreibung",
   "ai_assistant.agents.model_override.title": "Anbieter und Modell",
+  "ai_assistant.agents.moderation.controlLabel": "Moderation",
+  "ai_assistant.agents.moderation.effectiveEnforced": "Erzwungen",
+  "ai_assistant.agents.moderation.effectiveOff": "Aus",
+  "ai_assistant.agents.moderation.effectiveOn": "Ein",
+  "ai_assistant.agents.moderation.enforcedBadge": "Erzwungen",
+  "ai_assistant.agents.moderation.enforcedHint": "Dieser Agent akzeptiert nicht vertrauenswürdige Eingaben, daher ist die Moderation immer aktiv und kann hier nicht deaktiviert werden.",
+  "ai_assistant.agents.moderation.inheritLabel": "Erben",
+  "ai_assistant.agents.moderation.offLabel": "Aus",
+  "ai_assistant.agents.moderation.onLabel": "Ein",
+  "ai_assistant.agents.moderation.saved": "Eingabe-Moderationseinstellung gespeichert.",
+  "ai_assistant.agents.moderation.subtitle": "Benutzereingaben vor dem Modelllauf auf unsichere Inhalte prüfen. Gilt nur, wenn der aufgelöste Anbieter Moderation unterstützt.",
+  "ai_assistant.agents.moderation.title": "Eingabe-Moderation",
   "ai_assistant.agents.mutation_policy.clear": "Überschreibung löschen",
   "ai_assistant.agents.mutation_policy.clearedMessage": "Überschreibung der Mutationsrichtlinie gelöscht; Agent verwendet die im Code deklarierte Richtlinie.",
   "ai_assistant.agents.mutation_policy.codeDeclared": "Im Code deklariert",
@@ -297,6 +309,8 @@
   "ai_assistant.dock.left": "Links andocken",
   "ai_assistant.dock.minimize": "Minimieren",
   "ai_assistant.dock.right": "Rechts andocken",
+  "ai_assistant.errors.moderationBlocked": "Ihre Nachricht wurde vom Inhaltssicherheitsfilter blockiert. Bitte formulieren Sie sie um und versuchen Sie es erneut.",
+  "ai_assistant.errors.moderationUnavailable": "Die Inhaltssicherheitsprüfung ist vorübergehend nicht verfügbar. Bitte versuchen Sie es in einem Moment erneut.",
   "ai_assistant.launcher.composerPlaceholder": "Fragen Sie mich etwas…",
   "ai_assistant.launcher.dialogDescription": "Wähle einen Assistenten. Mit ↑/↓ navigieren, Enter startet, Esc schließt.",
   "ai_assistant.launcher.dialogTitle": "AI assistants",
@@ -342,6 +356,18 @@
   "ai_assistant.modelPicker.triggerAriaLabel": "KI-Modell auswählen",
   "ai_assistant.modelPicker.useDefault": "Standard des Agenten verwenden",
   "ai_assistant.modelPicker.useDefaultWithModel": "Standard des Agenten verwenden: {{model}}",
+  "ai_assistant.moderationFlags.columns.agent": "Agent",
+  "ai_assistant.moderationFlags.columns.categories": "Kategorien",
+  "ai_assistant.moderationFlags.columns.createdAt": "Markiert am",
+  "ai_assistant.moderationFlags.columns.user": "Benutzer",
+  "ai_assistant.moderationFlags.empty": "Keine markierten Nachrichten.",
+  "ai_assistant.moderationFlags.filters.agentPlaceholder": "modul.agent",
+  "ai_assistant.moderationFlags.filters.apply": "Anwenden",
+  "ai_assistant.moderationFlags.filters.from": "Von",
+  "ai_assistant.moderationFlags.filters.to": "Bis",
+  "ai_assistant.moderationFlags.navTitle": "Moderations-Flags",
+  "ai_assistant.moderationFlags.subtitle": "Vom Inhaltssicherheitsfilter blockierte Eingaben. Nur Kategorie-Flags und Scores — es wird kein Prompt-Inhalt gespeichert.",
+  "ai_assistant.moderationFlags.title": "Moderations-Flags",
   "ai_assistant.notifications.conversation_shared.body": "Eine KI-Konversation wurde mit Ihnen geteilt.",
   "ai_assistant.notifications.conversation_shared.title": "Konversation mit Ihnen geteilt",
   "ai_assistant.notifications.conversation_shared.view_button": "Konversation öffnen",

package/dist/modules/ai_assistant/i18n/en.json

@@ -62,6 +62,18 @@
   "ai_assistant.agents.model_override.subtitle": "Override the default provider and model for this tenant and agent.",
   "ai_assistant.agents.model_override.tenantOverride": "Tenant override",
   "ai_assistant.agents.model_override.title": "Provider and model",
+  "ai_assistant.agents.moderation.controlLabel": "Moderation",
+  "ai_assistant.agents.moderation.effectiveEnforced": "Enforced",
+  "ai_assistant.agents.moderation.effectiveOff": "Off",
+  "ai_assistant.agents.moderation.effectiveOn": "On",
+  "ai_assistant.agents.moderation.enforcedBadge": "Enforced",
+  "ai_assistant.agents.moderation.enforcedHint": "This agent accepts untrusted input, so moderation is always on and cannot be disabled here.",
+  "ai_assistant.agents.moderation.inheritLabel": "Inherit",
+  "ai_assistant.agents.moderation.offLabel": "Off",
+  "ai_assistant.agents.moderation.onLabel": "On",
+  "ai_assistant.agents.moderation.saved": "Input moderation setting saved.",
+  "ai_assistant.agents.moderation.subtitle": "Screen user input for unsafe content before the model runs. Applies only when the resolved provider supports moderation.",
+  "ai_assistant.agents.moderation.title": "Input moderation",
   "ai_assistant.agents.mutation_policy.clear": "Clear override",
   "ai_assistant.agents.mutation_policy.clearedMessage": "Mutation policy override cleared; agent is using its code-declared policy.",
   "ai_assistant.agents.mutation_policy.codeDeclared": "Code-declared",
@@ -297,6 +309,8 @@
   "ai_assistant.dock.left": "Dock Left",
   "ai_assistant.dock.minimize": "Minimize",
   "ai_assistant.dock.right": "Dock Right",
+  "ai_assistant.errors.moderationBlocked": "Your message was blocked by the content safety filter. Please rephrase and try again.",
+  "ai_assistant.errors.moderationUnavailable": "The content safety check is temporarily unavailable. Please try again in a moment.",
   "ai_assistant.launcher.composerPlaceholder": "Ask anything…",
   "ai_assistant.launcher.dialogDescription": "Pick an assistant. Use ↑/↓ to navigate, Enter to launch, Esc to close.",
   "ai_assistant.launcher.dialogTitle": "AI assistants",
@@ -342,6 +356,18 @@
   "ai_assistant.modelPicker.triggerAriaLabel": "Select AI model",
   "ai_assistant.modelPicker.useDefault": "Use agent default",
   "ai_assistant.modelPicker.useDefaultWithModel": "Use agent default: {{model}}",
+  "ai_assistant.moderationFlags.columns.agent": "Agent",
+  "ai_assistant.moderationFlags.columns.categories": "Categories",
+  "ai_assistant.moderationFlags.columns.createdAt": "Flagged at",
+  "ai_assistant.moderationFlags.columns.user": "User",
+  "ai_assistant.moderationFlags.empty": "No flagged messages.",
+  "ai_assistant.moderationFlags.filters.agentPlaceholder": "module.agent",
+  "ai_assistant.moderationFlags.filters.apply": "Apply",
+  "ai_assistant.moderationFlags.filters.from": "From",
+  "ai_assistant.moderationFlags.filters.to": "To",
+  "ai_assistant.moderationFlags.navTitle": "Moderation flags",
+  "ai_assistant.moderationFlags.subtitle": "Inputs blocked by the content safety filter. Category flags and scores only — no prompt content is stored.",
+  "ai_assistant.moderationFlags.title": "Moderation flags",
   "ai_assistant.notifications.conversation_shared.body": "An AI conversation has been shared with you.",
   "ai_assistant.notifications.conversation_shared.title": "Conversation shared with you",
   "ai_assistant.notifications.conversation_shared.view_button": "View Conversation",

package/dist/modules/ai_assistant/i18n/es.json

@@ -62,6 +62,18 @@
   "ai_assistant.agents.model_override.subtitle": "Anula el proveedor y el modelo predeterminados para este inquilino y agente.",
   "ai_assistant.agents.model_override.tenantOverride": "Sobrescritura del tenant",
   "ai_assistant.agents.model_override.title": "Proveedor y modelo",
+  "ai_assistant.agents.moderation.controlLabel": "Moderación",
+  "ai_assistant.agents.moderation.effectiveEnforced": "Forzada",
+  "ai_assistant.agents.moderation.effectiveOff": "Desactivada",
+  "ai_assistant.agents.moderation.effectiveOn": "Activada",
+  "ai_assistant.agents.moderation.enforcedBadge": "Forzada",
+  "ai_assistant.agents.moderation.enforcedHint": "Este agente acepta entradas no confiables, por lo que la moderación siempre está activada y no se puede desactivar aquí.",
+  "ai_assistant.agents.moderation.inheritLabel": "Heredar",
+  "ai_assistant.agents.moderation.offLabel": "Desactivada",
+  "ai_assistant.agents.moderation.onLabel": "Activada",
+  "ai_assistant.agents.moderation.saved": "Ajuste de moderación de entrada guardado.",
+  "ai_assistant.agents.moderation.subtitle": "Filtra la entrada del usuario en busca de contenido no seguro antes de ejecutar el modelo. Solo aplica cuando el proveedor resuelto admite moderación.",
+  "ai_assistant.agents.moderation.title": "Moderación de entrada",
   "ai_assistant.agents.mutation_policy.clear": "Eliminar sobrescritura",
   "ai_assistant.agents.mutation_policy.clearedMessage": "Sobrescritura de política de mutación eliminada; el agente usa la política declarada en el código.",
   "ai_assistant.agents.mutation_policy.codeDeclared": "Declarada en el código",
@@ -297,6 +309,8 @@
   "ai_assistant.dock.left": "Anclar a la izquierda",
   "ai_assistant.dock.minimize": "Minimizar",
   "ai_assistant.dock.right": "Anclar a la derecha",
+  "ai_assistant.errors.moderationBlocked": "Tu mensaje fue bloqueado por el filtro de seguridad de contenido. Reformúlalo e inténtalo de nuevo.",
+  "ai_assistant.errors.moderationUnavailable": "La verificación de seguridad de contenido no está disponible temporalmente. Inténtalo de nuevo en un momento.",
   "ai_assistant.launcher.composerPlaceholder": "Pregunte lo que necesite…",
   "ai_assistant.launcher.dialogDescription": "Elige un asistente. Usa ↑/↓ para navegar, Enter para iniciar, Esc para cerrar.",
   "ai_assistant.launcher.dialogTitle": "AI assistants",
@@ -342,6 +356,18 @@
   "ai_assistant.modelPicker.triggerAriaLabel": "Selector de modelo de IA",
   "ai_assistant.modelPicker.useDefault": "Usar predeterminado",
   "ai_assistant.modelPicker.useDefaultWithModel": "Usar predeterminado del agente: {{model}}",
+  "ai_assistant.moderationFlags.columns.agent": "Agente",
+  "ai_assistant.moderationFlags.columns.categories": "Categorías",
+  "ai_assistant.moderationFlags.columns.createdAt": "Marcado el",
+  "ai_assistant.moderationFlags.columns.user": "Usuario",
+  "ai_assistant.moderationFlags.empty": "No hay mensajes marcados.",
+  "ai_assistant.moderationFlags.filters.agentPlaceholder": "modulo.agente",
+  "ai_assistant.moderationFlags.filters.apply": "Aplicar",
+  "ai_assistant.moderationFlags.filters.from": "Desde",
+  "ai_assistant.moderationFlags.filters.to": "Hasta",
+  "ai_assistant.moderationFlags.navTitle": "Marcas de moderación",
+  "ai_assistant.moderationFlags.subtitle": "Entradas bloqueadas por el filtro de seguridad de contenido. Solo indicadores de categoría y puntuaciones — no se almacena el contenido del prompt.",
+  "ai_assistant.moderationFlags.title": "Marcas de moderación",
   "ai_assistant.notifications.conversation_shared.body": "Se ha compartido una conversación de IA con usted.",
   "ai_assistant.notifications.conversation_shared.title": "Conversación compartida con usted",
   "ai_assistant.notifications.conversation_shared.view_button": "Ver conversación",

package/dist/modules/ai_assistant/i18n/pl.json

@@ -62,6 +62,18 @@
   "ai_assistant.agents.model_override.subtitle": "Nadpisz domyślnego dostawcę i model dla tego najemcy i agenta.",
   "ai_assistant.agents.model_override.tenantOverride": "Nadpisanie tenant",
   "ai_assistant.agents.model_override.title": "Dostawca i model",
+  "ai_assistant.agents.moderation.controlLabel": "Moderacja",
+  "ai_assistant.agents.moderation.effectiveEnforced": "Wymuszona",
+  "ai_assistant.agents.moderation.effectiveOff": "Wyłączona",
+  "ai_assistant.agents.moderation.effectiveOn": "Włączona",
+  "ai_assistant.agents.moderation.enforcedBadge": "Wymuszona",
+  "ai_assistant.agents.moderation.enforcedHint": "Ten agent przyjmuje niezaufane dane wejściowe, więc moderacja jest zawsze włączona i nie można jej tutaj wyłączyć.",
+  "ai_assistant.agents.moderation.inheritLabel": "Dziedzicz",
+  "ai_assistant.agents.moderation.offLabel": "Wyłączona",
+  "ai_assistant.agents.moderation.onLabel": "Włączona",
+  "ai_assistant.agents.moderation.saved": "Zapisano ustawienie moderacji danych wejściowych.",
+  "ai_assistant.agents.moderation.subtitle": "Filtruj dane wejściowe użytkownika pod kątem niebezpiecznych treści przed uruchomieniem modelu. Działa tylko, gdy wybrany dostawca obsługuje moderację.",
+  "ai_assistant.agents.moderation.title": "Moderacja danych wejściowych",
   "ai_assistant.agents.mutation_policy.clear": "Wyczyść nadpisanie",
   "ai_assistant.agents.mutation_policy.clearedMessage": "Nadpisanie polityki mutacji usunięte; agent korzysta z polityki zadeklarowanej w kodzie.",
   "ai_assistant.agents.mutation_policy.codeDeclared": "Zadeklarowane w kodzie",
@@ -297,6 +309,8 @@
   "ai_assistant.dock.left": "Dokuj po lewej",
   "ai_assistant.dock.minimize": "Minimalizuj",
   "ai_assistant.dock.right": "Dokuj po prawej",
+  "ai_assistant.errors.moderationBlocked": "Twoja wiadomość została zablokowana przez filtr bezpieczeństwa treści. Przeformułuj ją i spróbuj ponownie.",
+  "ai_assistant.errors.moderationUnavailable": "Sprawdzanie bezpieczeństwa treści jest chwilowo niedostępne. Spróbuj ponownie za chwilę.",
   "ai_assistant.launcher.composerPlaceholder": "Zapytaj o cokolwiek…",
   "ai_assistant.launcher.dialogDescription": "Wybierz asystenta. Nawiguj klawiszami ↑/↓, Enter uruchamia, Esc zamyka.",
   "ai_assistant.launcher.dialogTitle": "Asystenci AI",
@@ -342,6 +356,18 @@
   "ai_assistant.modelPicker.triggerAriaLabel": "Wybierz model AI",
   "ai_assistant.modelPicker.useDefault": "Użyj domyślnego agenta",
   "ai_assistant.modelPicker.useDefaultWithModel": "Użyj domyślnego agenta: {{model}}",
+  "ai_assistant.moderationFlags.columns.agent": "Agent",
+  "ai_assistant.moderationFlags.columns.categories": "Kategorie",
+  "ai_assistant.moderationFlags.columns.createdAt": "Oznaczono",
+  "ai_assistant.moderationFlags.columns.user": "Użytkownik",
+  "ai_assistant.moderationFlags.empty": "Brak oznaczonych wiadomości.",
+  "ai_assistant.moderationFlags.filters.agentPlaceholder": "moduł.agent",
+  "ai_assistant.moderationFlags.filters.apply": "Zastosuj",
+  "ai_assistant.moderationFlags.filters.from": "Od",
+  "ai_assistant.moderationFlags.filters.to": "Do",
+  "ai_assistant.moderationFlags.navTitle": "Flagi moderacji",
+  "ai_assistant.moderationFlags.subtitle": "Dane wejściowe zablokowane przez filtr bezpieczeństwa treści. Tylko flagi kategorii i wyniki — treść promptu nie jest przechowywana.",
+  "ai_assistant.moderationFlags.title": "Flagi moderacji",
   "ai_assistant.notifications.conversation_shared.body": "Udostępniono Ci konwersację z asystentem AI.",
   "ai_assistant.notifications.conversation_shared.title": "Udostępniono Ci konwersację",
   "ai_assistant.notifications.conversation_shared.view_button": "Otwórz konwersację",