@open-mercato/ai-assistant 0.6.7-develop.6862.1.c11a64ce0a → 0.6.7

package/src/modules/ai_assistant/api/ai/chat/route.ts

@@ -15,7 +15,6 @@ import {
   type AiAgentLoopBudgetPreset,
 } from '../../../lib/agent-runtime'
 import { AgentPolicyError } from '../../../lib/agent-tools'
-import { AiModerationBlockedError, AiModerationUnavailableError } from '../../../lib/moderation'
 import { readBaseurlAllowlist, isBaseurlAllowlisted } from '../../../lib/baseurl-allowlist'
 import {
   canonicalProviderId,
@@ -701,15 +700,6 @@ export async function POST(req: NextRequest): Promise<Response> {
     if (error instanceof AgentPolicyError) {
       return jsonError(statusForDenyCode(error.code), error.message, error.code)
     }
-    // Input pre-moderation outcomes (spec 2026-06-04). The blocked categories
-    // are NEVER sent to the client — only the typed code, which the chat UI
-    // maps to a generic translated message.
-    if (error instanceof AiModerationBlockedError) {
-      return jsonError(400, 'Input rejected by the content safety filter.', 'moderation_blocked')
-    }
-    if (error instanceof AiModerationUnavailableError) {
-      return jsonError(503, 'Content safety check temporarily unavailable.', 'moderation_unavailable')
-    }
     logger.error('AI Chat Agent — Dispatch failure', { err: error })
     return jsonError(
       500,

package/src/modules/ai_assistant/api/settings/__tests__/route.test.ts

@@ -8,7 +8,7 @@
  */
 
 const authMock = jest.fn()
-const userHasAllFeaturesMock = jest.fn()
+const loadAclMock = jest.fn()
 const createRequestContainerMock = jest.fn()
 const upsertDefaultMock = jest.fn()
 const clearDefaultMock = jest.fn()
@@ -96,10 +96,10 @@ describe('PUT /api/ai_assistant/settings', () => {
     jest.clearAllMocks()
     consoleErrorSpy = jest.spyOn(console, 'error').mockImplementation(() => {})
     authMock.mockResolvedValue({ sub: 'user-1', tenantId: 'tenant-1', orgId: 'org-1' })
-    userHasAllFeaturesMock.mockResolvedValue(true)
+    loadAclMock.mockResolvedValue({ features: ['ai_assistant.settings.manage'], isSuperAdmin: false })
     createRequestContainerMock.mockResolvedValue({
       resolve: (name: string) => {
-        if (name === 'rbacService') return { userHasAllFeatures: userHasAllFeaturesMock }
+        if (name === 'rbacService') return { loadAcl: loadAclMock }
         if (name === 'em') return {}
         return null
       },
@@ -131,7 +131,7 @@ describe('PUT /api/ai_assistant/settings', () => {
   })
 
   it('returns 403 when caller lacks ai_assistant.settings.manage', async () => {
-    userHasAllFeaturesMock.mockResolvedValueOnce(false)
+    loadAclMock.mockResolvedValueOnce({ features: ['ai_assistant.view'], isSuperAdmin: false })
 
     const response = await PUT(buildRequest('PUT', { providerId: 'openai' }) as any)
 
@@ -161,56 +161,6 @@ describe('PUT /api/ai_assistant/settings', () => {
     )
   })
 
-  it('forwards inputModeration to the override upsert and echoes it back', async () => {
-    upsertDefaultMock.mockResolvedValueOnce({
-      id: 'row-1',
-      tenantId: 'tenant-1',
-      organizationId: 'org-1',
-      agentId: 'catalog.catalog_assistant',
-      providerId: null,
-      modelId: null,
-      baseUrl: null,
-      inputModeration: true,
-      updatedAt: new Date('2026-06-10T00:00:00Z'),
-    })
-
-    const response = await PUT(
-      buildRequest('PUT', { agentId: 'catalog.catalog_assistant', inputModeration: true }) as any,
-    )
-
-    expect(response.status).toBe(200)
-    const json = await response.json()
-    expect(json.inputModeration).toBe(true)
-    expect(upsertDefaultMock).toHaveBeenCalledWith(
-      expect.objectContaining({ agentId: 'catalog.catalog_assistant', inputModeration: true }),
-      expect.objectContaining({ tenantId: 'tenant-1' }),
-    )
-  })
-
-  it('passes inputModeration: null (inherit) through to the upsert', async () => {
-    upsertDefaultMock.mockResolvedValueOnce({
-      id: 'row-1',
-      tenantId: 'tenant-1',
-      organizationId: 'org-1',
-      agentId: 'catalog.catalog_assistant',
-      providerId: null,
-      modelId: null,
-      baseUrl: null,
-      inputModeration: null,
-      updatedAt: new Date('2026-06-10T00:00:00Z'),
-    })
-
-    const response = await PUT(
-      buildRequest('PUT', { agentId: 'catalog.catalog_assistant', inputModeration: null }) as any,
-    )
-
-    expect(response.status).toBe(200)
-    expect(upsertDefaultMock).toHaveBeenCalledWith(
-      expect.objectContaining({ inputModeration: null }),
-      expect.anything(),
-    )
-  })
-
   it('saves per-agent chat override allowlist without requiring a model override', async () => {
     upsertDefaultMock.mockResolvedValueOnce({
       id: 'row-1',
@@ -318,7 +268,7 @@ describe('PUT /api/ai_assistant/settings', () => {
   })
 
   it('allows superAdmin even without the manage feature', async () => {
-    userHasAllFeaturesMock.mockResolvedValueOnce(true)
+    loadAclMock.mockResolvedValueOnce({ features: [], isSuperAdmin: true })
 
     const response = await PUT(buildRequest('PUT', { providerId: 'openai' }) as any)
 
@@ -387,10 +337,10 @@ describe('DELETE /api/ai_assistant/settings', () => {
     jest.clearAllMocks()
     consoleErrorSpy = jest.spyOn(console, 'error').mockImplementation(() => {})
     authMock.mockResolvedValue({ sub: 'user-1', tenantId: 'tenant-1', orgId: 'org-1' })
-    userHasAllFeaturesMock.mockResolvedValue(true)
+    loadAclMock.mockResolvedValue({ features: ['ai_assistant.settings.manage'], isSuperAdmin: false })
     createRequestContainerMock.mockResolvedValue({
       resolve: (name: string) => {
-        if (name === 'rbacService') return { userHasAllFeatures: userHasAllFeaturesMock }
+        if (name === 'rbacService') return { loadAcl: loadAclMock }
         if (name === 'em') return {}
         return null
       },
@@ -411,7 +361,7 @@ describe('DELETE /api/ai_assistant/settings', () => {
   })
 
   it('returns 403 when caller lacks ai_assistant.settings.manage', async () => {
-    userHasAllFeaturesMock.mockResolvedValueOnce(false)
+    loadAclMock.mockResolvedValueOnce({ features: ['ai_assistant.view'], isSuperAdmin: false })
 
     const response = await DELETE(buildRequest('DELETE', {}) as any)
 

package/src/modules/ai_assistant/api/settings/allowlist/route.ts

@@ -151,11 +151,12 @@ export async function PUT(req: NextRequest) {
   try {
     const container = await createRequestContainer()
     const rbacService = container.resolve<RbacService>('rbacService')
-    const canManage = await rbacService.userHasAllFeatures(
-      auth.sub,
-      ['ai_assistant.settings.manage'],
-      { tenantId: auth.tenantId, organizationId: auth.orgId },
-    )
+    const acl = await rbacService.loadAcl(auth.sub, {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+    })
+    const canManage =
+      acl.isSuperAdmin || acl.features.includes('ai_assistant.settings.manage')
     if (!canManage) {
       return NextResponse.json({ error: 'Forbidden', code: 'forbidden' }, { status: 403 })
     }
@@ -196,11 +197,12 @@ export async function DELETE(req: NextRequest) {
   try {
     const container = await createRequestContainer()
     const rbacService = container.resolve<RbacService>('rbacService')
-    const canManage = await rbacService.userHasAllFeatures(
-      auth.sub,
-      ['ai_assistant.settings.manage'],
-      { tenantId: auth.tenantId, organizationId: auth.orgId },
-    )
+    const acl = await rbacService.loadAcl(auth.sub, {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+    })
+    const canManage =
+      acl.isSuperAdmin || acl.features.includes('ai_assistant.settings.manage')
     if (!canManage) {
       return NextResponse.json({ error: 'Forbidden', code: 'forbidden' }, { status: 403 })
     }

package/src/modules/ai_assistant/api/settings/route.ts

@@ -17,7 +17,6 @@ import {
   isOpenCodeProviderConfigured,
 } from '@open-mercato/shared/lib/ai/opencode-provider'
 import { AiAgentRuntimeOverrideRepository, AiAgentRuntimeOverrideValidationError } from '../../data/repositories/AiAgentRuntimeOverrideRepository'
-import { resolveModerationPolicy } from '../../lib/moderation-policy'
 import { AiTenantModelAllowlistRepository } from '../../data/repositories/AiTenantModelAllowlistRepository'
 import { isBaseurlAllowlisted, readBaseurlAllowlist } from '../../lib/baseurl-allowlist'
 import { loadAgentRegistry, listAgents } from '../../lib/agent-registry'
@@ -60,9 +59,6 @@ const runtimeOverrideUpsertSchema = z.object({
   allowedOverrideModelsByProvider: z
     .record(z.string().min(1).max(64), z.array(z.string().min(1).max(256)))
     .optional(),
-  // Input moderation override: true = on, false = off, null = inherit.
-  // Spec 2026-06-04-ai-input-moderation-and-safety-identifiers.
-  inputModeration: z.boolean().nullable().optional(),
 })
 
 const runtimeOverrideClearSchema = z.object({
@@ -252,7 +248,6 @@ export async function GET(req: NextRequest) {
         const em = container.resolve<EntityManager>('em')
         const repo = new AiAgentRuntimeOverrideRepository(em)
         const overrideRow = await repo.getDefault({ tenantId, organizationId, agentId: null })
-        const tenantWideInputModeration = overrideRow?.inputModeration ?? null
         if (overrideRow) {
           tenantOverride = {
             providerId: overrideRow.providerId ?? null,
@@ -368,20 +363,6 @@ export async function GET(req: NextRequest) {
             modelId: agentResolution.modelId,
             baseURL: agentResolution.baseURL ?? null,
             source: agentResolution.source,
-            moderation: {
-              // `untrustedInput` agents enforce moderation; the UI renders a
-              // non-editable "Enforced" badge for them.
-              enforced: agent.untrustedInput === true,
-              // Per-agent control value: null = inherit, true = on, false = off.
-              override: agentOverrideRow?.inputModeration ?? null,
-              // Resolved runtime policy (enforced | on | off) after precedence.
-              effective: resolveModerationPolicy({
-                untrustedInput: agent.untrustedInput,
-                perAgentOverride: agentOverrideRow?.inputModeration ?? null,
-                tenantWideOverride: tenantWideInputModeration,
-                env,
-              }),
-            },
           }
         })
         agentResolutions = await Promise.all(agentResolutionPromises)
@@ -710,11 +691,11 @@ export async function PUT(req: NextRequest) {
   try {
     const container = await createRequestContainer()
     const rbacService = container.resolve<RbacService>('rbacService')
-    const canManage = await rbacService.userHasAllFeatures(
-      auth.sub,
-      ['ai_assistant.settings.manage'],
-      { tenantId: auth.tenantId, organizationId: auth.orgId },
-    )
+    const acl = await rbacService.loadAcl(auth.sub, {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+    })
+    const canManage = acl.isSuperAdmin || acl.features.includes('ai_assistant.settings.manage')
     if (!canManage) {
       return NextResponse.json({ error: 'Forbidden', code: 'forbidden' }, { status: 403 })
     }
@@ -738,9 +719,6 @@ export async function PUT(req: NextRequest) {
       ...(allowedOverrideModelsByProvider !== undefined
         ? { allowedOverrideModelsByProvider }
         : {}),
-      ...(Object.prototype.hasOwnProperty.call(bodyResult.data, 'inputModeration')
-        ? { inputModeration: bodyResult.data.inputModeration ?? null }
-        : {}),
     }
     const row = await repo.upsertDefault(
       upsertInput,
@@ -756,7 +734,6 @@ export async function PUT(req: NextRequest) {
       baseURL: row.baseUrl,
       allowedOverrideProviders: row.allowedOverrideProviders ?? null,
       allowedOverrideModelsByProvider: row.allowedOverrideModelsByProvider ?? {},
-      inputModeration: row.inputModeration ?? null,
       updatedAt: row.updatedAt,
     })
   } catch (error) {
@@ -800,11 +777,11 @@ export async function DELETE(req: NextRequest) {
   try {
     const container = await createRequestContainer()
     const rbacService = container.resolve<RbacService>('rbacService')
-    const canManage = await rbacService.userHasAllFeatures(
-      auth.sub,
-      ['ai_assistant.settings.manage'],
-      { tenantId: auth.tenantId, organizationId: auth.orgId },
-    )
+    const acl = await rbacService.loadAcl(auth.sub, {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+    })
+    const canManage = acl.isSuperAdmin || acl.features.includes('ai_assistant.settings.manage')
     if (!canManage) {
       return NextResponse.json({ error: 'Forbidden', code: 'forbidden' }, { status: 403 })
     }

package/src/modules/ai_assistant/backend/config/ai-assistant/agents/AiAgentSettingsPageClient.tsx

@@ -121,14 +121,6 @@ type AgentResolution = {
   modelId: string
   baseURL: string | null
   source: string
-  moderation?: {
-    /** `untrustedInput` agents enforce moderation (non-editable). */
-    enforced: boolean
-    /** Per-agent control value: null = inherit, true = on, false = off. */
-    override: boolean | null
-    /** Resolved runtime policy after the precedence chain. */
-    effective: 'enforced' | 'on' | 'off'
-  }
 }
 
 type TenantAllowlist = {
@@ -883,142 +875,6 @@ function MutationPolicySection({ agent }: { agent: AgentSettings }) {
   )
 }
 
-type ModerationControlValue = 'inherit' | 'on' | 'off'
-
-function ModerationSection({ agent }: { agent: AgentSettings }) {
-  const t = useT()
-  const queryClient = useQueryClient()
-  const settingsQuery = useQuery<RuntimeSettingsResponse>({
-    queryKey: ['ai_assistant', 'agent_settings', 'runtime_settings'],
-    queryFn: fetchRuntimeSettings,
-    retry: false,
-  })
-  const agentResolution = settingsQuery.data?.agents.find((entry) => entry.agentId === agent.id) ?? null
-  const moderation = agentResolution?.moderation ?? null
-  const enforced = moderation?.enforced === true
-  const currentValue: ModerationControlValue =
-    moderation?.override === true ? 'on' : moderation?.override === false ? 'off' : 'inherit'
-  const [isSaving, setIsSaving] = React.useState(false)
-  const { runMutation } = useGuardedMutation({ contextId: `ai-agent-moderation-${agent.id}` })
-
-  const save = React.useCallback(
-    async (value: ModerationControlValue) => {
-      if (isSaving || enforced) return
-      setIsSaving(true)
-      try {
-        const inputModeration = value === 'inherit' ? null : value === 'on'
-        await runMutation({
-          operation: async () => {
-            const { ok, status, result } = await apiCall<{ error?: string }>(
-              '/api/ai_assistant/settings',
-              {
-                method: 'PUT',
-                headers: { 'content-type': 'application/json' },
-                credentials: 'include',
-                body: JSON.stringify({ agentId: agent.id, inputModeration }),
-              },
-            )
-            if (!ok) {
-              throw new Error(result?.error ?? `[internal] Failed to save moderation setting (${status}).`)
-            }
-          },
-          context: {},
-        })
-        flash(t('ai_assistant.agents.moderation.saved', 'Input moderation setting saved.'), 'success')
-        await queryClient.invalidateQueries({
-          queryKey: ['ai_assistant', 'agent_settings', 'runtime_settings'],
-        })
-      } catch (err) {
-        flash(err instanceof Error ? err.message : String(err), 'error')
-      } finally {
-        setIsSaving(false)
-      }
-    },
-    [agent.id, enforced, isSaving, queryClient, runMutation, t],
-  )
-
-  return (
-    <section
-      className="rounded-lg border border-border bg-background p-4"
-      data-ai-agent-moderation={agent.id}
-    >
-      <header className="flex flex-wrap items-start justify-between gap-3 border-b border-border pb-3">
-        <div className="flex min-w-0 items-start gap-2">
-          <ShieldAlert className="size-4 text-muted-foreground" aria-hidden />
-          <div className="min-w-0">
-            <h3 className="text-sm font-semibold">
-              {t('ai_assistant.agents.moderation.title', 'Input moderation')}
-            </h3>
-            <p className="text-xs text-muted-foreground">
-              {t(
-                'ai_assistant.agents.moderation.subtitle',
-                'Screen user input for unsafe content before the model runs. Applies only when the resolved provider supports moderation.',
-              )}
-            </p>
-          </div>
-        </div>
-        {moderation ? (
-          <StatusBadge
-            variant={moderation.effective === 'off' ? 'neutral' : 'info'}
-            dot
-            data-ai-agent-moderation-effective
-          >
-            {moderation.effective === 'enforced'
-              ? t('ai_assistant.agents.moderation.effectiveEnforced', 'Enforced')
-              : moderation.effective === 'on'
-                ? t('ai_assistant.agents.moderation.effectiveOn', 'On')
-                : t('ai_assistant.agents.moderation.effectiveOff', 'Off')}
-          </StatusBadge>
-        ) : null}
-      </header>
-
-      <div className="mt-3">
-        {enforced ? (
-          <div className="flex flex-wrap items-center gap-2" data-ai-agent-moderation-enforced>
-            <StatusBadge variant="warning" dot>
-              {t('ai_assistant.agents.moderation.enforcedBadge', 'Enforced')}
-            </StatusBadge>
-            <p className="text-xs text-muted-foreground">
-              {t(
-                'ai_assistant.agents.moderation.enforcedHint',
-                'This agent accepts untrusted input, so moderation is always on and cannot be disabled here.',
-              )}
-            </p>
-          </div>
-        ) : (
-          <div className="max-w-xs">
-            <span className="text-overline font-semibold uppercase tracking-wider text-muted-foreground">
-              {t('ai_assistant.agents.moderation.controlLabel', 'Moderation')}
-            </span>
-            <div className="mt-1">
-              <Select
-                value={currentValue}
-                onValueChange={(value) => save(value as ModerationControlValue)}
-                disabled={isSaving || !agentResolution}
-              >
-                <SelectTrigger aria-label={t('ai_assistant.agents.moderation.controlLabel', 'Moderation')}>
-                  <SelectValue />
-                </SelectTrigger>
-                <SelectContent>
-                  <SelectItem value="inherit">
-                    {t('ai_assistant.agents.moderation.inheritLabel', 'Inherit')}
-                  </SelectItem>
-                  <SelectItem value="on">
-                    {t('ai_assistant.agents.moderation.onLabel', 'On')}
-                  </SelectItem>
-                  <SelectItem value="off">
-                    {t('ai_assistant.agents.moderation.offLabel', 'Off')}
-                  </SelectItem>
-                </SelectContent>
-              </Select>
-            </div>
-          </div>
-        )}
-      </div>
-    </section>
-  )
-}
-
 function AgentModelOverrideSection({ agent }: { agent: AgentSettings }) {
   const t = useT()
   const queryClient = useQueryClient()
@@ -2207,8 +2063,6 @@ function AgentDetailPanel({ agent }: { agent: AgentSettings }) {
 
       <AgentModelOverrideSection agent={agent} />
 
-      <ModerationSection agent={agent} />
-
       <MutationPolicySection agent={agent} />
 
       <LoopPolicySection agent={agent} />

package/src/modules/ai_assistant/data/entities.ts

@@ -361,17 +361,6 @@ export class AiAgentRuntimeOverride {
    */
   @Property({ name: 'loop_active_tools_json', type: 'jsonb', nullable: true })
   loopActiveToolsJson?: unknown | null
-
-  /**
-   * Per-agent (or tenant-wide when `agent_id` is null) input-moderation
-   * override. `true` = on, `false` = off, `null` = inherit (env default →
-   * off). Additive nullable column; existing rows inherit. The `untrustedInput`
-   * agent flag still forces moderation regardless of this value.
-   *
-   * Spec `2026-06-04-ai-input-moderation-and-safety-identifiers`.
-   */
-  @Property({ name: 'input_moderation', type: 'boolean', nullable: true })
-  inputModeration?: boolean | null
 }
 
 /**
@@ -944,48 +933,3 @@ export class AiChatMessage {
   @Property({ name: 'deleted_at', type: Date, nullable: true })
   deletedAt?: Date | null
 }
-
-/**
- * Append-only audit record of an input that the moderation gate blocked.
- *
- * Stores ONLY category flags + numeric scores — never the prompt content or
- * any PII (Q4 data-minimization decision). Enough to identify repeat abusers
- * and tune policy. No `updated_at` / `deleted_at`: rows are immutable. Two
- * indexes back the audit listing (`tenant_id, created_at`) and the per-user
- * abuse review (`tenant_id, user_id`); every read filters `tenant_id`.
- *
- * Spec `2026-06-04-ai-input-moderation-and-safety-identifiers`.
- */
-@Entity({ tableName: 'ai_moderation_flags' })
-@Index({ name: 'ai_moderation_flags_tenant_created_idx', properties: ['tenantId', 'createdAt'] })
-@Index({ name: 'ai_moderation_flags_tenant_user_idx', properties: ['tenantId', 'userId'] })
-export class AiModerationFlag {
-  [OptionalProps]?: 'id' | 'createdAt' | 'organizationId'
-
-  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })
-  id!: string
-
-  @Property({ name: 'tenant_id', type: 'uuid' })
-  tenantId!: string
-
-  @Property({ name: 'organization_id', type: 'uuid', nullable: true })
-  organizationId?: string | null
-
-  @Property({ name: 'agent_id', type: 'text' })
-  agentId!: string
-
-  @Property({ name: 'user_id', type: 'text' })
-  userId!: string
-
-  @Property({ name: 'provider_id', type: 'text' })
-  providerId!: string
-
-  @Property({ name: 'model_id', type: 'text' })
-  modelId!: string
-
-  @Property({ name: 'categories', type: 'jsonb' })
-  categories!: Record<string, { flagged: boolean; score: number }>
-
-  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })
-  createdAt: Date = new Date()
-}

package/src/modules/ai_assistant/data/repositories/AiAgentRuntimeOverrideRepository.ts

@@ -35,8 +35,6 @@ export interface AiAgentRuntimeOverrideInput extends AiAgentRuntimeOverrideLoopI
   baseURL?: string | null
   allowedOverrideProviders?: string[] | null
   allowedOverrideModelsByProvider?: Record<string, string[]>
-  /** Input-moderation override: true = on, false = off, null = inherit. */
-  inputModeration?: boolean | null
   /**
    * Optional: the agent's declared allowedTools. When provided, loopActiveToolsJson
    * is validated to be a subset. When omitted, allowlist validation is skipped
@@ -272,7 +270,6 @@ export class AiAgentRuntimeOverrideRepository {
         if ('loopMaxTokens' in input) existing.loopMaxTokens = input.loopMaxTokens ?? null
         if ('loopStopWhenJson' in input) existing.loopStopWhenJson = input.loopStopWhenJson ?? null
         if ('loopActiveToolsJson' in input) existing.loopActiveToolsJson = input.loopActiveToolsJson ?? null
-        if ('inputModeration' in input) existing.inputModeration = input.inputModeration ?? null
         await tx.persist(existing).flush()
         return existing
       }
@@ -298,7 +295,6 @@ export class AiAgentRuntimeOverrideRepository {
         loopMaxTokens: input.loopMaxTokens ?? null,
         loopStopWhenJson: input.loopStopWhenJson ?? null,
         loopActiveToolsJson: input.loopActiveToolsJson ?? null,
-        inputModeration: input.inputModeration ?? null,
       } as unknown as AiAgentRuntimeOverride)
       await tx.persist(row).flush()
       return row

package/src/modules/ai_assistant/di.ts

@@ -1,13 +1,9 @@
-import { asFunction, asValue } from 'awilix'
+import { asValue } from 'awilix'
 import type { AwilixContainer } from 'awilix'
 import { toolRegistry } from './lib/tool-registry'
-import { createModerationService } from './lib/moderation'
 
 export function register(container: AwilixContainer): void {
   container.register({
     mcpToolRegistry: asValue(toolRegistry),
-    // Input pre-moderation service (OpenAI /v1/moderations). Singleton +
-    // overridable by downstream apps via the module overrides DI seam.
-    moderationService: asFunction(() => createModerationService()).singleton(),
   })
 }

package/src/modules/ai_assistant/events.ts

@@ -61,12 +61,6 @@ const events = [
     category: 'lifecycle' as const,
     clientBroadcast: true,
   },
-  {
-    id: 'ai_assistant.moderation_flag.created',
-    label: 'AI Moderation Flag Created',
-    entity: 'ai_moderation_flag',
-    category: 'system' as const,
-  },
 ] as const
 
 export const eventsConfig = createModuleEvents({
@@ -154,19 +148,4 @@ export interface AiConversationUnsharedPayload {
   participantUserId: string
 }
 
-/**
- * Emitted (best-effort) when the input moderation gate blocks a turn and the
- * audit row is persisted. Carries category flags only — never prompt content.
- *
- * Spec `2026-06-04-ai-input-moderation-and-safety-identifiers`.
- */
-export interface AiModerationFlagCreatedPayload {
-  id: string
-  tenantId: string
-  organizationId: string | null
-  agentId: string
-  userId: string
-  categories: string[]
-}
-
 export default eventsConfig