whale-code 6.5.4 → 6.5.6

package/dist/server/handlers/catalog.js

@@ -1,999 +1,1398 @@
 import { sanitizeFilterValue } from "../lib/utils.js";
+
 // ============================================================================
 // PRODUCTS — Full product catalog management
 // Products, categories, field schemas, pricing schemas, catalogs, assignments
 // ============================================================================
+
 export async function handleProducts(sb, args, storeId) {
-    const sid = storeId;
-    switch (args.action) {
-        // ======================== PRODUCTS ========================
-        case "browse": {
-            // Category summary with product counts, price ranges, stock status
-            const { data: cats, error: catErr } = await sb.from("categories")
-                .select("id, name, slug, parent_id, display_order, product_count, catalog_id")
-                .eq("store_id", sid)
-                .eq("is_active", true)
-                .order("display_order", { ascending: true });
-            if (catErr)
-                return { success: false, error: catErr.message };
-            // Status distribution via count queries
-            const { count: activeCount } = await sb.from("products").select("id", { count: "exact", head: true }).eq("store_id", sid).neq("status", "archived");
-            const { count: archivedCount } = await sb.from("products").select("id", { count: "exact", head: true }).eq("store_id", sid).eq("status", "archived");
-            return {
-                success: true,
-                data: {
-                    categories: cats,
-                    product_status_summary: { active: activeCount || 0, archived: archivedCount || 0 },
-                    tip: "Use products.find with category or status filters to drill into a specific set. Use products.get for full product detail."
-                }
-            };
-        }
-        case "find": {
-            const offset = args.offset || 0;
-            let q = sb.from("products")
-                .select("id, name, sku, status, type, stock_quantity, category:categories!primary_category_id(name)", { count: "exact" })
-                .eq("store_id", sid)
-                .order("created_at", { ascending: false });
-            if (args.limit) {
-                q = q.range(offset, offset + args.limit - 1);
-            }
-            else if (offset > 0) {
-                q = q.range(offset, offset + 999);
-            }
-            if (args.query) {
-                const sq = sanitizeFilterValue(String(args.query));
-                q = q.or(`name.ilike.%${sq}%,sku.ilike.%${sq}%,description.ilike.%${sq}%`);
-            }
-            if (args.category || args.category_id) {
-                // Accept both category (name or UUID) and category_id (UUID)
-                const catInput = (args.category_id || args.category);
-                const catVal = sanitizeFilterValue(catInput);
-                let matchedCatId = null;
-                if (/^[0-9a-f]{8}-/.test(catVal)) {
-                    matchedCatId = catVal;
-                }
-                else {
-                    const { data: cats } = await sb.from("categories").select("id").ilike("name", `%${catVal}%`).eq("store_id", sid).limit(1);
-                    if (cats?.length)
-                        matchedCatId = cats[0].id;
-                }
-                if (matchedCatId) {
-                    // Include sub-categories (children of the matched category)
-                    const { data: children } = await sb.from("categories").select("id").eq("parent_id", matchedCatId).eq("store_id", sid);
-                    const catIds = [matchedCatId, ...(children || []).map(c => c.id)];
-                    q = q.in("primary_category_id", catIds);
-                }
-                else {
-                    // Category not found — return empty result
-                    q = q.eq("primary_category_id", "00000000-0000-0000-0000-000000000000");
-                }
-            }
-            if (args.catalog_id)
-                q = q.eq("catalog_id", args.catalog_id);
-            if (args.status)
-                q = q.eq("status", args.status);
-            // Exclude archived unless explicitly requested or filtering by status
-            if (!args.status && !args.include_archived) {
-                q = q.neq("status", "archived");
-            }
-            if (args.featured !== undefined)
-                q = q.eq("featured", args.featured);
-            const { data, error, count: totalCount } = await q;
-            if (error)
-                return { success: false, error: error.message };
-            // Flatten nested category for display
-            const flattened = (data || []).map((row) => {
-                const { category, ...rest } = row;
-                return { ...rest, category_name: category?.name || null };
+  const sid = storeId;
+  switch (args.action) {
+    // ======================== PRODUCTS ========================
+
+    case "browse":
+      {
+        // Category summary with product counts, price ranges, stock status
+        const {
+          data: cats,
+          error: catErr
+        } = await sb.from("categories").select("id, name, slug, parent_id, display_order, product_count, catalog_id").eq("store_id", sid).eq("is_active", true).order("display_order", {
+          ascending: true
+        });
+        if (catErr) return {
+          success: false,
+          error: catErr.message
+        };
+
+        // Status distribution via count queries
+        const {
+          count: activeCount
+        } = await sb.from("products").select("id", {
+          count: "exact",
+          head: true
+        }).eq("store_id", sid).neq("status", "archived");
+        const {
+          count: archivedCount
+        } = await sb.from("products").select("id", {
+          count: "exact",
+          head: true
+        }).eq("store_id", sid).eq("status", "archived");
+        return {
+          success: true,
+          data: {
+            categories: cats,
+            product_status_summary: {
+              active: activeCount || 0,
+              archived: archivedCount || 0
+            },
+            tip: "Use products.find with category or status filters to drill into a specific set. Use products.get for full product detail."
+          }
+        };
+      }
+    case "find":
+      {
+        const offset = args.offset || 0;
+        let q = sb.from("products").select("id, name, sku, status, type, stock_quantity, category:categories!primary_category_id(name)", {
+          count: "exact"
+        }).eq("store_id", sid).order("created_at", {
+          ascending: false
+        });
+        if (args.limit) {
+          q = q.range(offset, offset + args.limit - 1);
+        } else if (offset > 0) {
+          q = q.range(offset, offset + 999);
+        }
+        if (args.query) {
+          const sq = sanitizeFilterValue(String(args.query));
+          q = q.or(`name.ilike.%${sq}%,sku.ilike.%${sq}%,description.ilike.%${sq}%`);
+        }
+        if (args.category || args.category_id) {
+          // Accept both category (name or UUID) and category_id (UUID)
+          const catInput = args.category_id || args.category;
+          const catVal = sanitizeFilterValue(catInput);
+          let matchedCatId = null;
+          if (/^[0-9a-f]{8}-/.test(catVal)) {
+            matchedCatId = catVal;
+          } else {
+            const {
+              data: cats
+            } = await sb.from("categories").select("id").ilike("name", `%${catVal}%`).eq("store_id", sid).limit(1);
+            if (cats?.length) matchedCatId = cats[0].id;
+          }
+          if (matchedCatId) {
+            // Include sub-categories (children of the matched category)
+            const {
+              data: children
+            } = await sb.from("categories").select("id").eq("parent_id", matchedCatId).eq("store_id", sid);
+            const catIds = [matchedCatId, ...(children || []).map(c => c.id)];
+            q = q.in("primary_category_id", catIds);
+          } else {
+            // Category not found — return empty result
+            q = q.eq("primary_category_id", "00000000-0000-0000-0000-000000000000");
+          }
+        }
+        if (args.catalog_id) q = q.eq("catalog_id", args.catalog_id);
+        if (args.status) q = q.eq("status", args.status);
+        // Exclude archived unless explicitly requested or filtering by status
+        if (!args.status && !args.include_archived) {
+          q = q.neq("status", "archived");
+        }
+        if (args.featured !== undefined) q = q.eq("featured", args.featured);
+        const {
+          data,
+          error,
+          count: totalCount
+        } = await q;
+        if (error) return {
+          success: false,
+          error: error.message
+        };
+        // Flatten nested category for display
+        const flattened = (data || []).map(row => {
+          const {
+            category,
+            ...rest
+          } = row;
+          return {
+            ...rest,
+            category_name: category?.name || null
+          };
+        });
+        return {
+          success: true,
+          total: totalCount,
+          count: flattened.length,
+          offset,
+          ...(args.limit ? {
+            limit: args.limit
+          } : {}),
+          data: flattened
+        };
+      }
+    case "get":
+      {
+        const pid = args.product_id;
+        const {
+          data: product,
+          error: pErr
+        } = await sb.from("products").select("*, category:categories!primary_category_id(id, name, slug)").eq("id", pid).eq("store_id", sid).single();
+        if (pErr) return {
+          success: false,
+          error: pErr.message
+        };
+        const {
+          data: fieldSchemas
+        } = await sb.from("product_field_schemas").select("field_schema_id, field_schema:field_schemas!field_schema_id(id, name, fields, icon)").eq("product_id", pid);
+        const {
+          data: pricingSchemas
+        } = await sb.from("product_pricing_schemas").select("pricing_schema_id, pricing_schema:pricing_schemas!pricing_schema_id(id, name, tiers, quality_tier)").eq("product_id", pid);
+        const {
+          data: inventory
+        } = await sb.from("inventory").select("id, quantity, location:locations!location_id(id, name)").eq("product_id", pid).eq("store_id", sid);
+        return {
+          success: true,
+          data: {
+            ...product,
+            field_schemas: fieldSchemas?.map(fs => fs.field_schema) || [],
+            pricing_schemas: pricingSchemas?.map(ps => ps.pricing_schema) || [],
+            inventory: inventory || []
+          }
+        };
+      }
+    case "create":
+      {
+        const name = args.name;
+        if (!name) return {
+          success: false,
+          error: "name is required"
+        };
+        const insert = {
+          store_id: sid,
+          name
+        };
+        if (args.sku) insert.sku = args.sku;
+        if (args.description) insert.description = args.description;
+        if (args.short_description) insert.short_description = args.short_description;
+        if (args.type) insert.type = args.type;
+        if (args.status) insert.status = args.status;
+        if (args.cost_price !== undefined) insert.cost_price = args.cost_price;
+        if (args.wholesale_price !== undefined) insert.wholesale_price = args.wholesale_price;
+        if (args.featured !== undefined) insert.featured = args.featured;
+        if (args.stock_quantity !== undefined) insert.stock_quantity = args.stock_quantity;
+        if (args.manage_stock !== undefined) insert.manage_stock = args.manage_stock;
+        if (args.weight !== undefined) insert.weight = args.weight;
+        if (args.tax_status) insert.tax_status = args.tax_status;
+        if (args.tax_class) insert.tax_class = args.tax_class;
+        if (args.catalog_id) insert.catalog_id = args.catalog_id;
+        if (args.pricing_data) insert.pricing_data = args.pricing_data;
+        // custom_fields NOT inserted directly — schema is the source of truth
+        // Agent-provided custom_fields are filtered against schema keys post-insert
+        if (args.featured_image !== undefined) insert.featured_image = args.featured_image;
+        if (args.image_gallery !== undefined) insert.image_gallery = args.image_gallery;
+        if (args.is_wholesale !== undefined) insert.is_wholesale = args.is_wholesale;
+        if (args.wholesale_only !== undefined) insert.wholesale_only = args.wholesale_only;
+        if (args.minimum_wholesale_quantity !== undefined) insert.minimum_wholesale_quantity = args.minimum_wholesale_quantity;
+        const catArg = args.category || args.primary_category_id || args.category_id;
+        if (catArg) {
+          if (/^[0-9a-f]{8}-/.test(catArg)) {
+            insert.primary_category_id = catArg;
+          } else {
+            const {
+              data: cats
+            } = await sb.from("categories").select("id").ilike("name", `%${catArg}%`).eq("store_id", sid).limit(1);
+            if (cats?.length) insert.primary_category_id = cats[0].id;
+          }
+        }
+        if (args.pricing_schema_id) insert.pricing_schema_id = args.pricing_schema_id;
+        const {
+          data,
+          error
+        } = await sb.from("products").insert(insert).select("id, name, sku, slug, status, primary_category_id, pricing_schema_id, created_at").single();
+        if (error) return {
+          success: false,
+          error: error.message
+        };
+
+        // Explicit schema assignments from args
+        if (args.field_schema_ids && Array.isArray(args.field_schema_ids)) {
+          const rows = args.field_schema_ids.map(fsId => ({
+            product_id: data.id,
+            field_schema_id: fsId
+          }));
+          await sb.from("product_field_schemas").insert(rows);
+        }
+        if (args.pricing_schema_ids && Array.isArray(args.pricing_schema_ids)) {
+          const rows = args.pricing_schema_ids.map(psId => ({
+            product_id: data.id,
+            pricing_schema_id: psId
+          }));
+          await sb.from("product_pricing_schemas").insert(rows);
+        }
+        const productUpdates = {};
+        const inherited = [];
+
+        // Auto-inherit field schema from category — ALWAYS merge with schema template
+        const categoryId = insert.primary_category_id;
+        if (categoryId && !args.field_schema_ids) {
+          const {
+            data: cat
+          } = await sb.from("categories").select("field_schema_id").eq("id", categoryId).single();
+          if (cat?.field_schema_id) {
+            await sb.from("product_field_schemas").upsert({
+              product_id: data.id,
+              field_schema_id: cat.field_schema_id
+            }, {
+              onConflict: "product_id,field_schema_id"
             });
-            return { success: true, total: totalCount, count: flattened.length, offset, ...(args.limit ? { limit: args.limit } : {}), data: flattened };
-        }
-        case "get": {
-            const pid = args.product_id;
-            const { data: product, error: pErr } = await sb.from("products")
-                .select("*, category:categories!primary_category_id(id, name, slug)")
-                .eq("id", pid).eq("store_id", sid).single();
-            if (pErr)
-                return { success: false, error: pErr.message };
-            const { data: fieldSchemas } = await sb.from("product_field_schemas")
-                .select("field_schema_id, field_schema:field_schemas!field_schema_id(id, name, fields, icon)")
-                .eq("product_id", pid);
-            const { data: pricingSchemas } = await sb.from("product_pricing_schemas")
-                .select("pricing_schema_id, pricing_schema:pricing_schemas!pricing_schema_id(id, name, tiers, quality_tier)")
-                .eq("product_id", pid);
-            const { data: inventory } = await sb.from("inventory")
-                .select("id, quantity, location:locations!location_id(id, name)")
-                .eq("product_id", pid).eq("store_id", sid);
-            return {
-                success: true,
-                data: {
-                    ...product,
-                    field_schemas: fieldSchemas?.map(fs => fs.field_schema) || [],
-                    pricing_schemas: pricingSchemas?.map(ps => ps.pricing_schema) || [],
-                    inventory: inventory || []
-                }
-            };
-        }
-        case "create": {
-            const name = args.name;
-            if (!name)
-                return { success: false, error: "name is required" };
-            const insert = { store_id: sid, name };
-            if (args.sku)
-                insert.sku = args.sku;
-            if (args.description)
-                insert.description = args.description;
-            if (args.short_description)
-                insert.short_description = args.short_description;
-            if (args.type)
-                insert.type = args.type;
-            if (args.status)
-                insert.status = args.status;
-            if (args.cost_price !== undefined)
-                insert.cost_price = args.cost_price;
-            if (args.wholesale_price !== undefined)
-                insert.wholesale_price = args.wholesale_price;
-            if (args.featured !== undefined)
-                insert.featured = args.featured;
-            if (args.stock_quantity !== undefined)
-                insert.stock_quantity = args.stock_quantity;
-            if (args.manage_stock !== undefined)
-                insert.manage_stock = args.manage_stock;
-            if (args.weight !== undefined)
-                insert.weight = args.weight;
-            if (args.tax_status)
-                insert.tax_status = args.tax_status;
-            if (args.tax_class)
-                insert.tax_class = args.tax_class;
-            if (args.catalog_id)
-                insert.catalog_id = args.catalog_id;
-            if (args.pricing_data)
-                insert.pricing_data = args.pricing_data;
-            // custom_fields NOT inserted directly — schema is the source of truth
-            // Agent-provided custom_fields are filtered against schema keys post-insert
-            if (args.featured_image !== undefined)
-                insert.featured_image = args.featured_image;
-            if (args.image_gallery !== undefined)
-                insert.image_gallery = args.image_gallery;
-            if (args.is_wholesale !== undefined)
-                insert.is_wholesale = args.is_wholesale;
-            if (args.wholesale_only !== undefined)
-                insert.wholesale_only = args.wholesale_only;
-            if (args.minimum_wholesale_quantity !== undefined)
-                insert.minimum_wholesale_quantity = args.minimum_wholesale_quantity;
-            const catArg = (args.category || args.primary_category_id || args.category_id);
-            if (catArg) {
-                if (/^[0-9a-f]{8}-/.test(catArg)) {
-                    insert.primary_category_id = catArg;
-                }
-                else {
-                    const { data: cats } = await sb.from("categories").select("id").ilike("name", `%${catArg}%`).eq("store_id", sid).limit(1);
-                    if (cats?.length)
-                        insert.primary_category_id = cats[0].id;
-                }
-            }
-            if (args.pricing_schema_id)
-                insert.pricing_schema_id = args.pricing_schema_id;
-            const { data, error } = await sb.from("products").insert(insert).select("id, name, sku, slug, status, primary_category_id, pricing_schema_id, created_at").single();
-            if (error)
-                return { success: false, error: error.message };
-            // Explicit schema assignments from args
-            if (args.field_schema_ids && Array.isArray(args.field_schema_ids)) {
-                const rows = args.field_schema_ids.map(fsId => ({ product_id: data.id, field_schema_id: fsId }));
-                await sb.from("product_field_schemas").insert(rows);
-            }
-            if (args.pricing_schema_ids && Array.isArray(args.pricing_schema_ids)) {
-                const rows = args.pricing_schema_ids.map(psId => ({ product_id: data.id, pricing_schema_id: psId }));
-                await sb.from("product_pricing_schemas").insert(rows);
-            }
-            const productUpdates = {};
-            const inherited = [];
-            // Auto-inherit field schema from category — ALWAYS merge with schema template
-            const categoryId = insert.primary_category_id;
-            if (categoryId && !args.field_schema_ids) {
-                const { data: cat } = await sb.from("categories").select("field_schema_id").eq("id", categoryId).single();
-                if (cat?.field_schema_id) {
-                    await sb.from("product_field_schemas").upsert({ product_id: data.id, field_schema_id: cat.field_schema_id }, { onConflict: "product_id,field_schema_id" });
-                    // Schema is source of truth — only schema keys allowed
-                    const { data: fs } = await sb.from("field_schemas").select("fields").eq("id", cat.field_schema_id).single();
-                    if (fs?.fields && Array.isArray(fs.fields)) {
-                        const schemaKeys = new Set();
-                        const fieldValues = {};
-                        for (const f of fs.fields) {
-                            const key = f.key;
-                            if (key) {
-                                schemaKeys.add(key);
-                                fieldValues[key] = f.default ?? null;
-                            }
-                        }
-                        // Only accept agent values for keys that exist in the schema
-                        const agentValues = args.custom_fields || {};
-                        for (const [k, v] of Object.entries(agentValues)) {
-                            if (schemaKeys.has(k))
-                                fieldValues[k] = v;
-                        }
-                        productUpdates.custom_fields = fieldValues;
-                    }
-                    inherited.push(`field_schema:${cat.field_schema_id}`);
-                }
-                // Also check junction table for additional schemas
-                const { data: catFieldSchemas } = await sb.from("category_field_schemas").select("field_schema_id").eq("category_id", categoryId);
-                if (catFieldSchemas?.length) {
-                    const cat2 = await sb.from("categories").select("field_schema_id").eq("id", categoryId).single();
-                    const rows = catFieldSchemas.filter(r => r.field_schema_id !== cat2?.data?.field_schema_id).map(r => ({ product_id: data.id, field_schema_id: r.field_schema_id }));
-                    if (rows.length)
-                        await sb.from("product_field_schemas").insert(rows);
-                }
-            }
-            // If pricing_schema_id provided, hydrate pricing_data from schema
-            if (insert.pricing_schema_id && !args.pricing_data) {
-                const { data: ps } = await sb.from("pricing_schemas").select("tiers").eq("id", insert.pricing_schema_id).single();
-                if (ps?.tiers)
-                    productUpdates.pricing_data = ps.tiers;
-            }
-            // Apply any post-insert updates
-            if (Object.keys(productUpdates).length > 0) {
-                await sb.from("products").update(productUpdates).eq("id", data.id);
-            }
-            // Re-read the full product for response
-            const { data: full } = await sb.from("products")
-                .select("id, name, sku, slug, status, primary_category_id, pricing_schema_id, custom_fields, pricing_data, created_at")
-                .eq("id", data.id).single();
-            if (inherited.length && full)
-                full.inherited = inherited;
-            return { success: true, data: full || data };
-        }
-        case "update": {
-            const pid = args.product_id;
-            if (!pid)
-                return { success: false, error: "product_id is required" };
-            const updates = {};
-            if (args.name !== undefined)
-                updates.name = args.name;
-            if (args.sku !== undefined)
-                updates.sku = args.sku;
-            if (args.description !== undefined)
-                updates.description = args.description;
-            if (args.short_description !== undefined)
-                updates.short_description = args.short_description;
-            if (args.type !== undefined)
-                updates.type = args.type;
-            if (args.status !== undefined)
-                updates.status = args.status;
-            if (args.cost_price !== undefined)
-                updates.cost_price = args.cost_price;
-            if (args.wholesale_price !== undefined)
-                updates.wholesale_price = args.wholesale_price;
-            if (args.featured !== undefined)
-                updates.featured = args.featured;
-            if (args.stock_quantity !== undefined)
-                updates.stock_quantity = args.stock_quantity;
-            if (args.manage_stock !== undefined)
-                updates.manage_stock = args.manage_stock;
-            if (args.weight !== undefined)
-                updates.weight = args.weight;
-            if (args.tax_status !== undefined)
-                updates.tax_status = args.tax_status;
-            if (args.tax_class !== undefined)
-                updates.tax_class = args.tax_class;
-            if (args.catalog_id !== undefined)
-                updates.catalog_id = args.catalog_id;
-            if (args.pricing_schema_id !== undefined)
-                updates.pricing_schema_id = args.pricing_schema_id;
-            if (args.pricing_data !== undefined)
-                updates.pricing_data = args.pricing_data;
-            // custom_fields filtered to schema keys only (schema = source of truth)
-            if (args.custom_fields !== undefined) {
-                const agentFV = args.custom_fields;
-                // Look up product's linked field schema to get allowed keys
-                const { data: pfs } = await sb.from("product_field_schemas").select("field_schema_id").eq("product_id", pid).limit(1);
-                if (pfs?.length) {
-                    const { data: fsDef } = await sb.from("field_schemas").select("fields").eq("id", pfs[0].field_schema_id).single();
-                    if (fsDef?.fields && Array.isArray(fsDef.fields)) {
-                        const { data: existing } = await sb.from("products").select("custom_fields").eq("id", pid).single();
-                        const base = existing?.custom_fields || {};
-                        const filtered = { ...base };
-                        const schemaKeys = new Set(fsDef.fields.map((f) => f.key).filter(Boolean));
-                        for (const [k, v] of Object.entries(agentFV)) {
-                            if (schemaKeys.has(k))
-                                filtered[k] = v;
-                        }
-                        updates.custom_fields = filtered;
-                    }
-                    else {
-                        updates.custom_fields = agentFV; // no schema definition found, pass through
-                    }
-                }
-                else {
-                    updates.custom_fields = agentFV; // no schema linked, pass through
-                }
-            }
-            if (args.is_wholesale !== undefined)
-                updates.is_wholesale = args.is_wholesale;
-            if (args.wholesale_only !== undefined)
-                updates.wholesale_only = args.wholesale_only;
-            if (args.minimum_wholesale_quantity !== undefined)
-                updates.minimum_wholesale_quantity = args.minimum_wholesale_quantity;
-            if (args.featured_image !== undefined)
-                updates.featured_image = args.featured_image;
-            if (args.image_gallery !== undefined)
-                updates.image_gallery = args.image_gallery;
-            const updateCatArg = (args.category ?? args.primary_category_id ?? args.category_id);
-            if (updateCatArg !== undefined) {
-                if (!updateCatArg) {
-                    updates.primary_category_id = null;
-                }
-                else if (/^[0-9a-f]{8}-/.test(updateCatArg)) {
-                    updates.primary_category_id = updateCatArg;
-                }
-                else {
-                    const { data: cats } = await sb.from("categories").select("id").ilike("name", `%${updateCatArg}%`).eq("store_id", sid).limit(1);
-                    if (cats?.length)
-                        updates.primary_category_id = cats[0].id;
-                }
-            }
-            const { data, error } = await sb.from("products")
-                .update(updates).eq("id", pid).eq("store_id", sid)
-                .select("id, name, sku, slug, status, cost_price, pricing_schema_id, updated_at").single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        case "delete": {
-            const pid = args.product_id;
-            if (!pid)
-                return { success: false, error: "product_id is required" };
-            if (args.hard === true) {
-                const { error } = await sb.from("products").delete().eq("id", pid).eq("store_id", sid);
-                return error ? { success: false, error: error.message } : { success: true, data: { id: pid, deleted: true } };
-            }
-            const { data, error } = await sb.from("products")
-                .update({ status: "archived" }).eq("id", pid).eq("store_id", sid)
-                .select("id, name, status").single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        // ======================== CATEGORIES ========================
-        case "list_categories": {
-            let q = sb.from("categories")
-                .select("id, name, slug, description, icon, parent_id, display_order, is_active, featured, product_count, catalog_id, field_schema_id, created_at")
-                .eq("store_id", sid)
-                .order("display_order", { ascending: true });
-            if (args.catalog_id)
-                q = q.eq("catalog_id", args.catalog_id);
-            if (args.parent_id)
-                q = q.eq("parent_id", args.parent_id);
-            if (args.active_only !== false)
-                q = q.eq("is_active", true);
-            const { data, error } = await q.limit(args.limit || 100);
-            return error ? { success: false, error: error.message } : { success: true, count: data?.length, data };
-        }
-        case "get_category": {
-            const catId = args.category_id;
-            const { data: cat, error: catErr } = await sb.from("categories")
-                .select("*").eq("id", catId).eq("store_id", sid).single();
-            if (catErr)
-                return { success: false, error: catErr.message };
-            const { data: fieldAssigns } = await sb.from("category_field_schemas")
-                .select("sort_order, is_active, field_schema:field_schemas!field_schema_id(id, name, fields, icon)")
-                .eq("category_id", catId).eq("is_active", true).order("sort_order");
-            const { data: pricingAssigns } = await sb.from("category_pricing_schemas")
-                .select("sort_order, is_active, pricing_schema:pricing_schemas!pricing_schema_id(id, name, tiers, quality_tier)")
-                .eq("category_id", catId).eq("is_active", true).order("sort_order");
-            const { data: children } = await sb.from("categories")
-                .select("id, name, slug, display_order, is_active, product_count")
-                .eq("parent_id", catId).order("display_order");
-            return {
-                success: true,
-                data: {
-                    ...cat,
-                    field_schemas: fieldAssigns?.map(a => ({ ...a.field_schema, sort_order: a.sort_order })) || [],
-                    pricing_schemas: pricingAssigns?.map(a => ({ ...a.pricing_schema, sort_order: a.sort_order })) || [],
-                    subcategories: children || []
-                }
-            };
-        }
-        case "create_category": {
-            const name = args.name;
-            if (!name)
-                return { success: false, error: "name is required" };
-            const insert = { store_id: sid, name, slug: name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") };
-            if (args.description)
-                insert.description = args.description;
-            if (args.icon)
-                insert.icon = args.icon;
-            if (args.parent_id)
-                insert.parent_id = args.parent_id;
-            if (args.catalog_id)
-                insert.catalog_id = args.catalog_id;
-            if (args.display_order !== undefined)
-                insert.display_order = args.display_order;
-            if (args.field_schema_id)
-                insert.field_schema_id = args.field_schema_id;
-            const { data, error } = await sb.from("categories").insert(insert)
-                .select("id, name, slug, parent_id, catalog_id, display_order, created_at").single();
-            if (error)
-                return { success: false, error: error.message };
-            if (args.field_schema_ids && Array.isArray(args.field_schema_ids)) {
-                const rows = args.field_schema_ids.map((fsId, i) => ({ category_id: data.id, field_schema_id: fsId, sort_order: i + 1 }));
-                await sb.from("category_field_schemas").insert(rows);
-            }
-            if (args.pricing_schema_ids && Array.isArray(args.pricing_schema_ids)) {
-                const rows = args.pricing_schema_ids.map((psId, i) => ({ category_id: data.id, pricing_schema_id: psId, sort_order: i + 1 }));
-                await sb.from("category_pricing_schemas").insert(rows);
-            }
-            return { success: true, data };
-        }
-        case "update_category": {
-            const catId = args.category_id;
-            if (!catId)
-                return { success: false, error: "category_id is required" };
-            const updates = {};
-            if (args.name !== undefined)
-                updates.name = args.name;
-            if (args.description !== undefined)
-                updates.description = args.description;
-            if (args.icon !== undefined)
-                updates.icon = args.icon;
-            if (args.parent_id !== undefined)
-                updates.parent_id = args.parent_id;
-            if (args.catalog_id !== undefined)
-                updates.catalog_id = args.catalog_id;
-            if (args.display_order !== undefined)
-                updates.display_order = args.display_order;
-            if (args.is_active !== undefined)
-                updates.is_active = args.is_active;
-            if (args.featured !== undefined)
-                updates.featured = args.featured;
-            if (args.field_schema_id !== undefined)
-                updates.field_schema_id = args.field_schema_id;
-            const { data, error } = await sb.from("categories")
-                .update(updates).eq("id", catId).eq("store_id", sid)
-                .select("id, name, slug, is_active, display_order, updated_at").single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        case "delete_category": {
-            const catId = args.category_id;
-            if (!catId)
-                return { success: false, error: "category_id is required" };
-            if (args.hard === true) {
-                const { error } = await sb.from("categories").delete().eq("id", catId).eq("store_id", sid);
-                return error ? { success: false, error: error.message } : { success: true, data: { id: catId, deleted: true } };
-            }
-            const { data, error } = await sb.from("categories")
-                .update({ is_active: false }).eq("id", catId).eq("store_id", sid)
-                .select("id, name, is_active").single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        // ======================== FIELD SCHEMAS ========================
-        case "list_field_schemas": {
-            let q = sb.from("field_schemas")
-                .select("id, name, slug, description, icon, fields, is_public, is_active, catalog_id, store_id, install_count, created_at")
-                .eq("is_active", true);
-            // Show store-owned schemas AND public schemas (prevent IDOR)
-            if (args.public_only === true) {
-                q = q.eq("is_public", true);
-            }
-            else {
-                q = q.or(`store_id.eq.${sid},is_public.eq.true`);
-            }
-            if (args.catalog_id)
-                q = q.eq("catalog_id", args.catalog_id);
-            if (args.limit)
-                q = q.limit(args.limit);
-            const { data, error } = await q.order("name");
-            return error ? { success: false, error: error.message } : { success: true, count: data?.length, data };
-        }
-        case "get_field_schema": {
-            const fsId = (args.field_schema_id || args.schema_id);
-            if (!fsId)
-                return { success: false, error: "field_schema_id is required" };
-            // Allow access to own schemas OR public schemas (prevent IDOR)
-            const { data, error } = await sb.from("field_schemas").select("*").eq("id", fsId)
-                .or(`store_id.eq.${sid},is_public.eq.true`).single();
-            if (error)
-                return { success: false, error: error.message };
-            const { data: assignments } = await sb.from("category_field_schemas")
-                .select("category:categories!category_id(id, name)").eq("field_schema_id", fsId).eq("is_active", true);
-            return { success: true, data: { ...data, assigned_categories: assignments?.map(a => a.category) || [] } };
-        }
-        case "create_field_schema": {
-            const name = args.name;
-            if (!name)
-                return { success: false, error: "name is required" };
-            if (!args.fields || !Array.isArray(args.fields))
-                return { success: false, error: "fields array is required" };
-            // Auto-resolve catalog_id: use provided value, or fall back to store's default catalog
-            let catalogId = args.catalog_id;
-            if (!catalogId) {
-                const { data: defaultCatalog } = await sb.from("catalogs")
-                    .select("id").eq("store_id", sid).eq("is_default", true).single();
-                if (defaultCatalog)
-                    catalogId = defaultCatalog.id;
-            }
-            const insert = {
-                store_id: sid,
-                name,
-                slug: name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, ""),
-                fields: args.fields
-            };
-            if (args.description)
-                insert.description = args.description;
-            if (args.icon)
-                insert.icon = args.icon;
-            if (catalogId)
-                insert.catalog_id = catalogId;
-            if (args.is_public !== undefined)
-                insert.is_public = args.is_public;
-            const { data, error } = await sb.from("field_schemas").insert(insert)
-                .select("id, name, slug, fields, icon, is_active, catalog_id, created_at").single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        case "update_field_schema": {
-            const fsId = (args.field_schema_id || args.schema_id);
-            if (!fsId)
-                return { success: false, error: "field_schema_id is required" };
-            const updates = {};
-            if (args.name !== undefined)
-                updates.name = args.name;
-            if (args.description !== undefined)
-                updates.description = args.description;
-            if (args.icon !== undefined)
-                updates.icon = args.icon;
-            if (args.fields !== undefined)
-                updates.fields = args.fields;
-            if (args.is_public !== undefined)
-                updates.is_public = args.is_public;
-            if (args.is_active !== undefined)
-                updates.is_active = args.is_active;
-            if (args.catalog_id !== undefined)
-                updates.catalog_id = args.catalog_id;
-            // Only allow modification of own schemas (prevent IDOR)
-            const { data, error } = await sb.from("field_schemas")
-                .update(updates).eq("id", fsId).eq("store_id", sid)
-                .select("id, name, slug, fields, icon, is_active, catalog_id, updated_at").single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        case "delete_field_schema": {
-            const fsId = (args.field_schema_id || args.schema_id);
-            if (!fsId)
-                return { success: false, error: "field_schema_id is required" };
-            // Only allow deletion of own schemas (prevent IDOR)
-            const { data, error } = await sb.from("field_schemas")
-                .update({ is_active: false, deleted_at: new Date().toISOString() }).eq("id", fsId).eq("store_id", sid)
-                .select("id, name, is_active").single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        // ======================== PRICING SCHEMAS ========================
-        case "list_pricing_schemas": {
-            let q = sb.from("pricing_schemas")
-                .select("id, name, slug, description, tiers, quality_tier, is_public, is_active, catalog_id, store_id, install_count, created_at")
-                .eq("is_active", true);
-            // Show store-owned schemas AND public schemas (prevent IDOR)
-            if (args.public_only === true) {
-                q = q.eq("is_public", true);
-            }
-            else {
-                q = q.or(`store_id.eq.${sid},is_public.eq.true`);
-            }
-            if (args.catalog_id)
-                q = q.eq("catalog_id", args.catalog_id);
-            if (args.limit)
-                q = q.limit(args.limit);
-            const { data, error } = await q.order("name");
-            return error ? { success: false, error: error.message } : { success: true, count: data?.length, data };
-        }
-        case "get_pricing_schema": {
-            const psId = (args.pricing_schema_id || args.schema_id);
-            if (!psId)
-                return { success: false, error: "pricing_schema_id is required" };
-            // Allow access to own schemas OR public schemas (prevent IDOR)
-            const { data, error } = await sb.from("pricing_schemas").select("*").eq("id", psId)
-                .or(`store_id.eq.${sid},is_public.eq.true`).single();
-            if (error)
-                return { success: false, error: error.message };
-            const { data: assignments } = await sb.from("category_pricing_schemas")
-                .select("category:categories!category_id(id, name)").eq("pricing_schema_id", psId).eq("is_active", true);
-            return { success: true, data: { ...data, assigned_categories: assignments?.map(a => a.category) || [] } };
-        }
-        case "create_pricing_schema": {
-            const name = args.name;
-            if (!name)
-                return { success: false, error: "name is required" };
-            if (!args.tiers || !Array.isArray(args.tiers))
-                return { success: false, error: "tiers array is required" };
-            // Auto-resolve catalog_id: use provided value, or fall back to store's default catalog
-            let catalogId = args.catalog_id;
-            if (!catalogId) {
-                const { data: defaultCatalog } = await sb.from("catalogs")
-                    .select("id").eq("store_id", sid).eq("is_default", true).single();
-                if (defaultCatalog)
-                    catalogId = defaultCatalog.id;
-            }
-            const insert = {
-                store_id: sid,
-                name,
-                slug: name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, ""),
-                tiers: args.tiers
-            };
-            if (args.description)
-                insert.description = args.description;
-            if (args.quality_tier)
-                insert.quality_tier = args.quality_tier;
-            if (catalogId)
-                insert.catalog_id = catalogId;
-            if (args.is_public !== undefined)
-                insert.is_public = args.is_public;
-            const { data, error } = await sb.from("pricing_schemas").insert(insert)
-                .select("id, name, slug, tiers, quality_tier, is_active, catalog_id, created_at").single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        case "update_pricing_schema": {
-            const psId = (args.pricing_schema_id || args.schema_id);
-            if (!psId)
-                return { success: false, error: "pricing_schema_id is required" };
-            const updates = {};
-            if (args.name !== undefined)
-                updates.name = args.name;
-            if (args.description !== undefined)
-                updates.description = args.description;
-            if (args.tiers !== undefined)
-                updates.tiers = args.tiers;
-            if (args.quality_tier !== undefined)
-                updates.quality_tier = args.quality_tier;
-            if (args.is_public !== undefined)
-                updates.is_public = args.is_public;
-            if (args.is_active !== undefined)
-                updates.is_active = args.is_active;
-            if (args.catalog_id !== undefined)
-                updates.catalog_id = args.catalog_id;
-            // Only allow modification of own schemas (prevent IDOR)
-            const { data, error } = await sb.from("pricing_schemas")
-                .update(updates).eq("id", psId).eq("store_id", sid)
-                .select("id, name, slug, tiers, quality_tier, is_active, catalog_id, updated_at").single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        case "delete_pricing_schema": {
-            const psId = (args.pricing_schema_id || args.schema_id);
-            if (!psId)
-                return { success: false, error: "pricing_schema_id is required" };
-            // Only allow deletion of own schemas (prevent IDOR)
-            const { data, error } = await sb.from("pricing_schemas")
-                .update({ is_active: false, deleted_at: new Date().toISOString() }).eq("id", psId).eq("store_id", sid)
-                .select("id, name, is_active").single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        // ======================== CATALOGS ========================
-        case "list_catalogs": {
-            const { data, error } = await sb.from("catalogs")
-                .select("id, name, slug, description, vertical, is_active, is_default, display_order, created_at")
-                .eq("store_id", sid).order("display_order");
-            return error ? { success: false, error: error.message } : { success: true, count: data?.length, data };
-        }
-        case "create_catalog": {
-            const name = args.name;
-            if (!name)
-                return { success: false, error: "name is required" };
-            // Resolve owner_user_id from store
-            const { data: store } = await sb.from("stores").select("owner_user_id").eq("id", sid).single();
-            const insert = {
-                store_id: sid, name,
-                slug: name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, ""),
-                owner_user_id: store?.owner_user_id
-            };
-            if (args.description)
-                insert.description = args.description;
-            if (args.vertical)
-                insert.vertical = args.vertical;
-            if (args.is_default !== undefined)
-                insert.is_default = args.is_default;
-            if (args.settings)
-                insert.settings = args.settings;
-            const { data, error } = await sb.from("catalogs").insert(insert)
-                .select("id, name, slug, vertical, is_default, created_at").single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        case "update_catalog": {
-            const catId = args.catalog_id;
-            if (!catId)
-                return { success: false, error: "catalog_id is required" };
-            const updates = {};
-            if (args.name !== undefined)
-                updates.name = args.name;
-            if (args.description !== undefined)
-                updates.description = args.description;
-            if (args.vertical !== undefined)
-                updates.vertical = args.vertical;
-            if (args.is_active !== undefined)
-                updates.is_active = args.is_active;
-            if (args.is_default !== undefined)
-                updates.is_default = args.is_default;
-            if (args.settings !== undefined)
-                updates.settings = args.settings;
-            if (args.display_order !== undefined)
-                updates.display_order = args.display_order;
-            const { data, error } = await sb.from("catalogs")
-                .update(updates).eq("id", catId).eq("store_id", sid)
-                .select("id, name, slug, vertical, is_active, is_default, updated_at").single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        // ======================== SCHEMA ASSIGNMENTS ========================
-        case "assign_schema": {
-            const target = args.target; // "category" or "product"
-            const schemaType = args.schema_type; // "field" or "pricing"
-            const targetId = args.target_id;
-            const schemaId = args.schema_id;
-            if (!target || !schemaType || !targetId || !schemaId) {
-                return { success: false, error: "target (category|product), schema_type (field|pricing), target_id, and schema_id are required" };
-            }
-            // Verify target product/category belongs to this store (prevent IDOR)
-            const targetTable = target === "product" ? "products" : "categories";
-            const { data: ownerCheck, error: ownerErr } = await sb.from(targetTable)
-                .select("id").eq("id", targetId).eq("store_id", sid).single();
-            if (ownerErr || !ownerCheck) {
-                return { success: false, error: `${target} not found or does not belong to this store` };
-            }
-            // Verify schema is accessible (own schema or public)
-            const schemaTable = schemaType === "field" ? "field_schemas" : "pricing_schemas";
-            const { data: schemaCheck, error: schemaErr } = await sb.from(schemaTable)
-                .select("id").eq("id", schemaId).or(`store_id.eq.${sid},is_public.eq.true`).single();
-            if (schemaErr || !schemaCheck) {
-                return { success: false, error: `${schemaType} schema not found or not accessible` };
-            }
-            const table = target === "product"
-                ? (schemaType === "field" ? "product_field_schemas" : "product_pricing_schemas")
-                : (schemaType === "field" ? "category_field_schemas" : "category_pricing_schemas");
-            const fkCol = target === "product" ? "product_id" : "category_id";
-            const schemaCol = schemaType === "field" ? "field_schema_id" : "pricing_schema_id";
-            const row = { [fkCol]: targetId, [schemaCol]: schemaId };
-            if (args.sort_order !== undefined)
-                row.sort_order = args.sort_order;
-            const { data, error } = await sb.from(table).upsert(row, { onConflict: `${fkCol},${schemaCol}` }).select().single();
-            if (error)
-                return { success: false, error: error.message };
-            // Hydrate product with schema data
-            if (target === "product") {
-                const productUpdates = {};
-                if (schemaType === "pricing") {
-                    const { data: schema } = await sb.from("pricing_schemas").select("tiers, quality_tier").eq("id", schemaId).single();
-                    productUpdates.pricing_schema_id = schemaId;
-                    if (schema?.tiers)
-                        productUpdates.pricing_data = schema.tiers;
-                }
-                if (schemaType === "field") {
-                    // Schema is source of truth — rebuild custom_fields from schema keys only
-                    const { data: schema } = await sb.from("field_schemas").select("fields").eq("id", schemaId).single();
-                    if (schema?.fields && Array.isArray(schema.fields)) {
-                        const { data: product } = await sb.from("products").select("custom_fields").eq("id", targetId).eq("store_id", sid).single();
-                        const existing = product?.custom_fields || {};
-                        const rebuilt = {};
-                        for (const f of schema.fields) {
-                            const key = f.key;
-                            if (key)
-                                rebuilt[key] = (key in existing) ? existing[key] : (f.default ?? null);
-                        }
-                        productUpdates.custom_fields = rebuilt;
-                    }
+            // Schema is source of truth — only schema keys allowed
+            const {
+              data: fs
+            } = await sb.from("field_schemas").select("fields").eq("id", cat.field_schema_id).single();
+            if (fs?.fields && Array.isArray(fs.fields)) {
+              const schemaKeys = new Set();
+              const fieldValues = {};
+              for (const f of fs.fields) {
+                const key = f.key;
+                if (key) {
+                  schemaKeys.add(key);
+                  fieldValues[key] = f.default ?? null;
                 }
-                if (Object.keys(productUpdates).length > 0) {
-                    await sb.from("products").update(productUpdates).eq("id", targetId).eq("store_id", sid);
-                }
-            }
-            return { success: true, data };
-        }
-        case "unassign_schema": {
-            const target = args.target;
-            const schemaType = args.schema_type;
-            const targetId = args.target_id;
-            const schemaId = args.schema_id;
-            if (!target || !schemaType || !targetId || !schemaId) {
-                return { success: false, error: "target (category|product), schema_type (field|pricing), target_id, and schema_id are required" };
-            }
-            // Verify target product/category belongs to this store (prevent IDOR)
-            const targetTable = target === "product" ? "products" : "categories";
-            const { data: ownerCheck, error: ownerErr } = await sb.from(targetTable)
-                .select("id").eq("id", targetId).eq("store_id", sid).single();
-            if (ownerErr || !ownerCheck) {
-                return { success: false, error: `${target} not found or does not belong to this store` };
+              }
+              // Only accept agent values for keys that exist in the schema
+              const agentValues = args.custom_fields || {};
+              for (const [k, v] of Object.entries(agentValues)) {
+                if (schemaKeys.has(k)) fieldValues[k] = v;
+              }
+              productUpdates.custom_fields = fieldValues;
             }
-            const table = target === "product"
-                ? (schemaType === "field" ? "product_field_schemas" : "product_pricing_schemas")
-                : (schemaType === "field" ? "category_field_schemas" : "category_pricing_schemas");
-            const fkCol = target === "product" ? "product_id" : "category_id";
-            const schemaCol = schemaType === "field" ? "field_schema_id" : "pricing_schema_id";
-            const { error } = await sb.from(table).delete().eq(fkCol, targetId).eq(schemaCol, schemaId);
-            return error ? { success: false, error: error.message } : { success: true, data: { removed: true, target, schema_type: schemaType, target_id: targetId, schema_id: schemaId } };
-        }
-        // ======================== PRODUCT DEDUP / MERGE ========================
-        case "find_duplicates": {
-            // Find products with similar names (potential duplicates)
-            const { data: all, error: allErr } = await sb.from("products")
-                .select("id, name, sku, status, stock_quantity, cost_price, created_at")
-                .eq("store_id", sid).neq("status", "archived")
-                .order("name");
-            if (allErr)
-                return { success: false, error: allErr.message };
-            // Group by normalized name (lowercase, trim, strip common suffixes like "(TEMP)", "(OLD)", "(COPY)")
-            const nameMap = new Map();
-            for (const p of all || []) {
-                const normalized = (p.name || "").toLowerCase().trim()
-                    .replace(/\s*\((temp|old|copy|duplicate|dup|new|v2)\)\s*/gi, "")
-                    .replace(/\s+/g, " ");
-                if (!normalized)
-                    continue;
-                if (!nameMap.has(normalized))
-                    nameMap.set(normalized, []);
-                nameMap.get(normalized).push(p);
-            }
-            const duplicates = Array.from(nameMap.entries())
-                .filter(([_, products]) => products.length > 1)
-                .map(([normalizedName, products]) => ({
-                normalized_name: normalizedName,
-                count: products.length,
-                products: products.map(p => ({
-                    id: p.id, name: p.name, sku: p.sku, status: p.status,
-                    stock_quantity: p.stock_quantity, cost_price: p.cost_price, created_at: p.created_at,
-                })),
+            inherited.push(`field_schema:${cat.field_schema_id}`);
+          }
+          // Also check junction table for additional schemas
+          const {
+            data: catFieldSchemas
+          } = await sb.from("category_field_schemas").select("field_schema_id").eq("category_id", categoryId);
+          if (catFieldSchemas?.length) {
+            const cat2 = await sb.from("categories").select("field_schema_id").eq("id", categoryId).single();
+            const rows = catFieldSchemas.filter(r => r.field_schema_id !== cat2?.data?.field_schema_id).map(r => ({
+              product_id: data.id,
+              field_schema_id: r.field_schema_id
             }));
-            // Also check by exact SKU match
-            const skuMap = new Map();
-            for (const p of all || []) {
-                if (!p.sku)
-                    continue;
-                const key = p.sku.toLowerCase().trim();
-                if (!skuMap.has(key))
-                    skuMap.set(key, []);
-                skuMap.get(key).push(p);
-            }
-            const skuDupes = Array.from(skuMap.entries())
-                .filter(([_, products]) => products.length > 1)
-                .map(([sku, products]) => ({ sku, count: products.length, products }));
-            // Pre-format as markdown — formatter drops nested products arrays
-            const totalNameDupes = duplicates.reduce((s, d) => s + d.count, 0);
-            const totalSkuDupes = skuDupes.reduce((s, d) => s + d.count, 0);
-            const lines = [
-                `## Duplicate Products`,
-                `**By Name**: ${duplicates.length} groups (${totalNameDupes} products) | **By SKU**: ${skuDupes.length} groups (${totalSkuDupes} products)\n`,
-            ];
-            if (duplicates.length > 0) {
-                lines.push("### Name Duplicates");
-                for (const group of duplicates.slice(0, 20)) {
-                    lines.push(`\n**"${group.normalized_name}"** (${group.count} products):`);
-                    lines.push("| Name | SKU | Status | Stock | Created |");
-                    lines.push("| --- | --- | --- | ---: | --- |");
-                    for (const p of group.products) {
-                        lines.push(`| ${p.name} | ${p.sku || "—"} | ${p.status} | ${p.stock_quantity ?? "—"} | ${p.created_at?.slice(0, 10) || "—"} |`);
-                    }
-                }
-            }
-            if (skuDupes.length > 0) {
-                lines.push("\n### SKU Duplicates");
-                for (const group of skuDupes.slice(0, 20)) {
-                    lines.push(`\n**SKU "${group.sku}"** (${group.count} products):`);
-                    lines.push("| Name | SKU | Status | Stock | Created |");
-                    lines.push("| --- | --- | --- | ---: | --- |");
-                    for (const p of group.products) {
-                        lines.push(`| ${p.name} | ${p.sku || "—"} | ${p.status} | ${p.stock_quantity ?? "—"} | ${p.created_at?.slice(0, 10) || "—"} |`);
-                    }
-                }
+            if (rows.length) await sb.from("product_field_schemas").insert(rows);
+          }
+        }
+
+        // If pricing_schema_id provided, hydrate pricing_data from schema
+        if (insert.pricing_schema_id && !args.pricing_data) {
+          const {
+            data: ps
+          } = await sb.from("pricing_schemas").select("tiers").eq("id", insert.pricing_schema_id).single();
+          if (ps?.tiers) productUpdates.pricing_data = ps.tiers;
+        }
+
+        // Apply any post-insert updates
+        if (Object.keys(productUpdates).length > 0) {
+          await sb.from("products").update(productUpdates).eq("id", data.id);
+        }
+
+        // Re-read the full product for response
+        const {
+          data: full
+        } = await sb.from("products").select("id, name, sku, slug, status, primary_category_id, pricing_schema_id, custom_fields, pricing_data, created_at").eq("id", data.id).single();
+        if (inherited.length && full) full.inherited = inherited;
+        return {
+          success: true,
+          data: full || data
+        };
+      }
+    case "update":
+      {
+        const pid = args.product_id;
+        if (!pid) return {
+          success: false,
+          error: "product_id is required"
+        };
+        const updates = {};
+        if (args.name !== undefined) updates.name = args.name;
+        if (args.sku !== undefined) updates.sku = args.sku;
+        if (args.description !== undefined) updates.description = args.description;
+        if (args.short_description !== undefined) updates.short_description = args.short_description;
+        if (args.type !== undefined) updates.type = args.type;
+        if (args.status !== undefined) updates.status = args.status;
+        if (args.cost_price !== undefined) updates.cost_price = args.cost_price;
+        if (args.wholesale_price !== undefined) updates.wholesale_price = args.wholesale_price;
+        if (args.featured !== undefined) updates.featured = args.featured;
+        if (args.stock_quantity !== undefined) updates.stock_quantity = args.stock_quantity;
+        if (args.manage_stock !== undefined) updates.manage_stock = args.manage_stock;
+        if (args.weight !== undefined) updates.weight = args.weight;
+        if (args.tax_status !== undefined) updates.tax_status = args.tax_status;
+        if (args.tax_class !== undefined) updates.tax_class = args.tax_class;
+        if (args.catalog_id !== undefined) updates.catalog_id = args.catalog_id;
+        if (args.pricing_schema_id !== undefined) updates.pricing_schema_id = args.pricing_schema_id;
+        if (args.pricing_data !== undefined) updates.pricing_data = args.pricing_data;
+        // custom_fields filtered to schema keys only (schema = source of truth)
+        if (args.custom_fields !== undefined) {
+          const agentFV = args.custom_fields;
+          // Look up product's linked field schema to get allowed keys
+          const {
+            data: pfs
+          } = await sb.from("product_field_schemas").select("field_schema_id").eq("product_id", pid).limit(1);
+          if (pfs?.length) {
+            const {
+              data: fsDef
+            } = await sb.from("field_schemas").select("fields").eq("id", pfs[0].field_schema_id).single();
+            if (fsDef?.fields && Array.isArray(fsDef.fields)) {
+              const {
+                data: existing
+              } = await sb.from("products").select("custom_fields").eq("id", pid).single();
+              const base = existing?.custom_fields || {};
+              const filtered = {
+                ...base
+              };
+              const schemaKeys = new Set(fsDef.fields.map(f => f.key).filter(Boolean));
+              for (const [k, v] of Object.entries(agentFV)) {
+                if (schemaKeys.has(k)) filtered[k] = v;
+              }
+              updates.custom_fields = filtered;
+            } else {
+              updates.custom_fields = agentFV; // no schema definition found, pass through
             }
-            if (duplicates.length === 0 && skuDupes.length === 0) {
-                lines.push("\nNo duplicates found.");
+          } else {
+            updates.custom_fields = agentFV; // no schema linked, pass through
+          }
+        }
+        if (args.is_wholesale !== undefined) updates.is_wholesale = args.is_wholesale;
+        if (args.wholesale_only !== undefined) updates.wholesale_only = args.wholesale_only;
+        if (args.minimum_wholesale_quantity !== undefined) updates.minimum_wholesale_quantity = args.minimum_wholesale_quantity;
+        if (args.featured_image !== undefined) updates.featured_image = args.featured_image;
+        if (args.image_gallery !== undefined) updates.image_gallery = args.image_gallery;
+        const updateCatArg = args.category ?? args.primary_category_id ?? args.category_id;
+        if (updateCatArg !== undefined) {
+          if (!updateCatArg) {
+            updates.primary_category_id = null;
+          } else if (/^[0-9a-f]{8}-/.test(updateCatArg)) {
+            updates.primary_category_id = updateCatArg;
+          } else {
+            const {
+              data: cats
+            } = await sb.from("categories").select("id").ilike("name", `%${updateCatArg}%`).eq("store_id", sid).limit(1);
+            if (cats?.length) updates.primary_category_id = cats[0].id;
+          }
+        }
+        const {
+          data,
+          error
+        } = await sb.from("products").update(updates).eq("id", pid).eq("store_id", sid).select("id, name, sku, slug, status, cost_price, pricing_schema_id, updated_at").single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+    case "delete":
+      {
+        const pid = args.product_id;
+        if (!pid) return {
+          success: false,
+          error: "product_id is required"
+        };
+        if (args.hard === true) {
+          const {
+            error
+          } = await sb.from("products").delete().eq("id", pid).eq("store_id", sid);
+          return error ? {
+            success: false,
+            error: error.message
+          } : {
+            success: true,
+            data: {
+              id: pid,
+              deleted: true
             }
-            return { success: true, data: lines.join("\n") };
-        }
-        case "merge": {
-            const primaryId = args.primary_product_id;
-            const secondaryId = args.secondary_product_id;
-            if (!primaryId || !secondaryId)
-                return { success: false, error: "primary_product_id and secondary_product_id required" };
-            if (primaryId === secondaryId)
-                return { success: false, error: "Cannot merge a product with itself" };
-            // Verify both exist and belong to this store
-            const { data: primary } = await sb.from("products").select("*").eq("id", primaryId).eq("store_id", sid).single();
-            const { data: secondary } = await sb.from("products").select("*").eq("id", secondaryId).eq("store_id", sid).single();
-            if (!primary)
-                return { success: false, error: `Primary product ${primaryId} not found` };
-            if (!secondary)
-                return { success: false, error: `Secondary product ${secondaryId} not found` };
-            const reassignResults = {};
-            // 1. Consolidate inventory — sum quantities per location
-            const { data: secInv } = await sb.from("inventory")
-                .select("product_id, location_id, quantity")
-                .eq("product_id", secondaryId).eq("store_id", sid);
-            if (secInv?.length) {
-                for (const row of secInv) {
-                    if (!row.quantity || row.quantity <= 0)
-                        continue;
-                    // Try to add to existing primary inventory at same location
-                    const { data: priRow } = await sb.from("inventory")
-                        .select("id, quantity")
-                        .eq("product_id", primaryId).eq("location_id", row.location_id).eq("store_id", sid)
-                        .maybeSingle();
-                    if (priRow) {
-                        await sb.from("inventory").update({ quantity: (priRow.quantity || 0) + row.quantity, updated_at: new Date().toISOString() }).eq("id", priRow.id);
-                    }
-                    else {
-                        await sb.from("inventory").insert({ store_id: sid, product_id: primaryId, location_id: row.location_id, quantity: row.quantity });
-                    }
-                }
-                // Zero out secondary inventory
-                await sb.from("inventory").update({ quantity: 0 }).eq("product_id", secondaryId).eq("store_id", sid);
-                reassignResults.inventory = `consolidated ${secInv.length} location(s)`;
+          };
+        }
+        const {
+          data,
+          error
+        } = await sb.from("products").update({
+          status: "archived"
+        }).eq("id", pid).eq("store_id", sid).select("id, name, status").single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+
+    // ======================== CATEGORIES ========================
+
+    case "list_categories":
+      {
+        let q = sb.from("categories").select("id, name, slug, description, icon, parent_id, display_order, is_active, featured, product_count, catalog_id, field_schema_id, created_at").eq("store_id", sid).order("display_order", {
+          ascending: true
+        });
+        if (args.catalog_id) q = q.eq("catalog_id", args.catalog_id);
+        if (args.parent_id) q = q.eq("parent_id", args.parent_id);
+        if (args.active_only !== false) q = q.eq("is_active", true);
+        const {
+          data,
+          error
+        } = await q.limit(args.limit || 100);
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          count: data?.length,
+          data
+        };
+      }
+    case "get_category":
+      {
+        const catId = args.category_id;
+        const {
+          data: cat,
+          error: catErr
+        } = await sb.from("categories").select("*").eq("id", catId).eq("store_id", sid).single();
+        if (catErr) return {
+          success: false,
+          error: catErr.message
+        };
+        const {
+          data: fieldAssigns
+        } = await sb.from("category_field_schemas").select("sort_order, is_active, field_schema:field_schemas!field_schema_id(id, name, fields, icon)").eq("category_id", catId).eq("is_active", true).order("sort_order");
+        const {
+          data: pricingAssigns
+        } = await sb.from("category_pricing_schemas").select("sort_order, is_active, pricing_schema:pricing_schemas!pricing_schema_id(id, name, tiers, quality_tier)").eq("category_id", catId).eq("is_active", true).order("sort_order");
+        const {
+          data: children
+        } = await sb.from("categories").select("id, name, slug, display_order, is_active, product_count").eq("parent_id", catId).order("display_order");
+        return {
+          success: true,
+          data: {
+            ...cat,
+            field_schemas: fieldAssigns?.map(a => ({
+              ...a.field_schema,
+              sort_order: a.sort_order
+            })) || [],
+            pricing_schemas: pricingAssigns?.map(a => ({
+              ...a.pricing_schema,
+              sort_order: a.sort_order
+            })) || [],
+            subcategories: children || []
+          }
+        };
+      }
+    case "create_category":
+      {
+        const name = args.name;
+        if (!name) return {
+          success: false,
+          error: "name is required"
+        };
+        const insert = {
+          store_id: sid,
+          name,
+          slug: name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "")
+        };
+        if (args.description) insert.description = args.description;
+        if (args.icon) insert.icon = args.icon;
+        if (args.parent_id) insert.parent_id = args.parent_id;
+        if (args.catalog_id) insert.catalog_id = args.catalog_id;
+        if (args.display_order !== undefined) insert.display_order = args.display_order;
+        if (args.field_schema_id) insert.field_schema_id = args.field_schema_id;
+        const {
+          data,
+          error
+        } = await sb.from("categories").insert(insert).select("id, name, slug, parent_id, catalog_id, display_order, created_at").single();
+        if (error) return {
+          success: false,
+          error: error.message
+        };
+        if (args.field_schema_ids && Array.isArray(args.field_schema_ids)) {
+          const rows = args.field_schema_ids.map((fsId, i) => ({
+            category_id: data.id,
+            field_schema_id: fsId,
+            sort_order: i + 1
+          }));
+          await sb.from("category_field_schemas").insert(rows);
+        }
+        if (args.pricing_schema_ids && Array.isArray(args.pricing_schema_ids)) {
+          const rows = args.pricing_schema_ids.map((psId, i) => ({
+            category_id: data.id,
+            pricing_schema_id: psId,
+            sort_order: i + 1
+          }));
+          await sb.from("category_pricing_schemas").insert(rows);
+        }
+        return {
+          success: true,
+          data
+        };
+      }
+    case "update_category":
+      {
+        const catId = args.category_id;
+        if (!catId) return {
+          success: false,
+          error: "category_id is required"
+        };
+        const updates = {};
+        if (args.name !== undefined) updates.name = args.name;
+        if (args.description !== undefined) updates.description = args.description;
+        if (args.icon !== undefined) updates.icon = args.icon;
+        if (args.parent_id !== undefined) updates.parent_id = args.parent_id;
+        if (args.catalog_id !== undefined) updates.catalog_id = args.catalog_id;
+        if (args.display_order !== undefined) updates.display_order = args.display_order;
+        if (args.is_active !== undefined) updates.is_active = args.is_active;
+        if (args.featured !== undefined) updates.featured = args.featured;
+        if (args.field_schema_id !== undefined) updates.field_schema_id = args.field_schema_id;
+        const {
+          data,
+          error
+        } = await sb.from("categories").update(updates).eq("id", catId).eq("store_id", sid).select("id, name, slug, is_active, display_order, updated_at").single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+    case "delete_category":
+      {
+        const catId = args.category_id;
+        if (!catId) return {
+          success: false,
+          error: "category_id is required"
+        };
+        if (args.hard === true) {
+          const {
+            error
+          } = await sb.from("categories").delete().eq("id", catId).eq("store_id", sid);
+          return error ? {
+            success: false,
+            error: error.message
+          } : {
+            success: true,
+            data: {
+              id: catId,
+              deleted: true
             }
-            else {
-                reassignResults.inventory = "no inventory to consolidate";
+          };
+        }
+        const {
+          data,
+          error
+        } = await sb.from("categories").update({
+          is_active: false
+        }).eq("id", catId).eq("store_id", sid).select("id, name, is_active").single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+
+    // ======================== FIELD SCHEMAS ========================
+
+    case "list_field_schemas":
+      {
+        let q = sb.from("field_schemas").select("id, name, slug, description, icon, fields, is_public, is_active, catalog_id, store_id, install_count, created_at").eq("is_active", true);
+        // Show store-owned schemas AND public schemas (prevent IDOR)
+        if (args.public_only === true) {
+          q = q.eq("is_public", true);
+        } else {
+          q = q.or(`store_id.eq.${sid},is_public.eq.true`);
+        }
+        if (args.catalog_id) q = q.eq("catalog_id", args.catalog_id);
+        if (args.limit) q = q.limit(args.limit);
+        const {
+          data,
+          error
+        } = await q.order("name");
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          count: data?.length,
+          data
+        };
+      }
+    case "get_field_schema":
+      {
+        const fsId = args.field_schema_id || args.schema_id;
+        if (!fsId) return {
+          success: false,
+          error: "field_schema_id is required"
+        };
+        // Allow access to own schemas OR public schemas (prevent IDOR)
+        const {
+          data,
+          error
+        } = await sb.from("field_schemas").select("*").eq("id", fsId).or(`store_id.eq.${sid},is_public.eq.true`).single();
+        if (error) return {
+          success: false,
+          error: error.message
+        };
+        const {
+          data: assignments
+        } = await sb.from("category_field_schemas").select("category:categories!category_id(id, name)").eq("field_schema_id", fsId).eq("is_active", true);
+        return {
+          success: true,
+          data: {
+            ...data,
+            assigned_categories: assignments?.map(a => a.category) || []
+          }
+        };
+      }
+    case "create_field_schema":
+      {
+        const name = args.name;
+        if (!name) return {
+          success: false,
+          error: "name is required"
+        };
+        if (!args.fields || !Array.isArray(args.fields)) return {
+          success: false,
+          error: "fields array is required"
+        };
+
+        // Auto-resolve catalog_id: use provided value, or fall back to store's default catalog
+        let catalogId = args.catalog_id;
+        if (!catalogId) {
+          const {
+            data: defaultCatalog
+          } = await sb.from("catalogs").select("id").eq("store_id", sid).eq("is_default", true).single();
+          if (defaultCatalog) catalogId = defaultCatalog.id;
+        }
+        const insert = {
+          store_id: sid,
+          name,
+          slug: name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, ""),
+          fields: args.fields
+        };
+        if (args.description) insert.description = args.description;
+        if (args.icon) insert.icon = args.icon;
+        if (catalogId) insert.catalog_id = catalogId;
+        if (args.is_public !== undefined) insert.is_public = args.is_public;
+        const {
+          data,
+          error
+        } = await sb.from("field_schemas").insert(insert).select("id, name, slug, fields, icon, is_active, catalog_id, created_at").single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+    case "update_field_schema":
+      {
+        const fsId = args.field_schema_id || args.schema_id;
+        if (!fsId) return {
+          success: false,
+          error: "field_schema_id is required"
+        };
+        const updates = {};
+        if (args.name !== undefined) updates.name = args.name;
+        if (args.description !== undefined) updates.description = args.description;
+        if (args.icon !== undefined) updates.icon = args.icon;
+        if (args.fields !== undefined) updates.fields = args.fields;
+        if (args.is_public !== undefined) updates.is_public = args.is_public;
+        if (args.is_active !== undefined) updates.is_active = args.is_active;
+        if (args.catalog_id !== undefined) updates.catalog_id = args.catalog_id;
+
+        // Only allow modification of own schemas (prevent IDOR)
+        const {
+          data,
+          error
+        } = await sb.from("field_schemas").update(updates).eq("id", fsId).eq("store_id", sid).select("id, name, slug, fields, icon, is_active, catalog_id, updated_at").single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+    case "delete_field_schema":
+      {
+        const fsId = args.field_schema_id || args.schema_id;
+        if (!fsId) return {
+          success: false,
+          error: "field_schema_id is required"
+        };
+        // Only allow deletion of own schemas (prevent IDOR)
+        const {
+          data,
+          error
+        } = await sb.from("field_schemas").update({
+          is_active: false,
+          deleted_at: new Date().toISOString()
+        }).eq("id", fsId).eq("store_id", sid).select("id, name, is_active").single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+
+    // ======================== PRICING SCHEMAS ========================
+
+    case "list_pricing_schemas":
+      {
+        let q = sb.from("pricing_schemas").select("id, name, slug, description, tiers, quality_tier, is_public, is_active, catalog_id, store_id, install_count, created_at").eq("is_active", true);
+        // Show store-owned schemas AND public schemas (prevent IDOR)
+        if (args.public_only === true) {
+          q = q.eq("is_public", true);
+        } else {
+          q = q.or(`store_id.eq.${sid},is_public.eq.true`);
+        }
+        if (args.catalog_id) q = q.eq("catalog_id", args.catalog_id);
+        if (args.limit) q = q.limit(args.limit);
+        const {
+          data,
+          error
+        } = await q.order("name");
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          count: data?.length,
+          data
+        };
+      }
+    case "get_pricing_schema":
+      {
+        const psId = args.pricing_schema_id || args.schema_id;
+        if (!psId) return {
+          success: false,
+          error: "pricing_schema_id is required"
+        };
+        // Allow access to own schemas OR public schemas (prevent IDOR)
+        const {
+          data,
+          error
+        } = await sb.from("pricing_schemas").select("*").eq("id", psId).or(`store_id.eq.${sid},is_public.eq.true`).single();
+        if (error) return {
+          success: false,
+          error: error.message
+        };
+        const {
+          data: assignments
+        } = await sb.from("category_pricing_schemas").select("category:categories!category_id(id, name)").eq("pricing_schema_id", psId).eq("is_active", true);
+        return {
+          success: true,
+          data: {
+            ...data,
+            assigned_categories: assignments?.map(a => a.category) || []
+          }
+        };
+      }
+    case "create_pricing_schema":
+      {
+        const name = args.name;
+        if (!name) return {
+          success: false,
+          error: "name is required"
+        };
+        if (!args.tiers || !Array.isArray(args.tiers)) return {
+          success: false,
+          error: "tiers array is required"
+        };
+
+        // Auto-resolve catalog_id: use provided value, or fall back to store's default catalog
+        let catalogId = args.catalog_id;
+        if (!catalogId) {
+          const {
+            data: defaultCatalog
+          } = await sb.from("catalogs").select("id").eq("store_id", sid).eq("is_default", true).single();
+          if (defaultCatalog) catalogId = defaultCatalog.id;
+        }
+        const insert = {
+          store_id: sid,
+          name,
+          slug: name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, ""),
+          tiers: args.tiers
+        };
+        if (args.description) insert.description = args.description;
+        if (args.quality_tier) insert.quality_tier = args.quality_tier;
+        if (catalogId) insert.catalog_id = catalogId;
+        if (args.is_public !== undefined) insert.is_public = args.is_public;
+        const {
+          data,
+          error
+        } = await sb.from("pricing_schemas").insert(insert).select("id, name, slug, tiers, quality_tier, is_active, catalog_id, created_at").single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+    case "update_pricing_schema":
+      {
+        const psId = args.pricing_schema_id || args.schema_id;
+        if (!psId) return {
+          success: false,
+          error: "pricing_schema_id is required"
+        };
+        const updates = {};
+        if (args.name !== undefined) updates.name = args.name;
+        if (args.description !== undefined) updates.description = args.description;
+        if (args.tiers !== undefined) updates.tiers = args.tiers;
+        if (args.quality_tier !== undefined) updates.quality_tier = args.quality_tier;
+        if (args.is_public !== undefined) updates.is_public = args.is_public;
+        if (args.is_active !== undefined) updates.is_active = args.is_active;
+        if (args.catalog_id !== undefined) updates.catalog_id = args.catalog_id;
+
+        // Only allow modification of own schemas (prevent IDOR)
+        const {
+          data,
+          error
+        } = await sb.from("pricing_schemas").update(updates).eq("id", psId).eq("store_id", sid).select("id, name, slug, tiers, quality_tier, is_active, catalog_id, updated_at").single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+    case "delete_pricing_schema":
+      {
+        const psId = args.pricing_schema_id || args.schema_id;
+        if (!psId) return {
+          success: false,
+          error: "pricing_schema_id is required"
+        };
+        // Only allow deletion of own schemas (prevent IDOR)
+        const {
+          data,
+          error
+        } = await sb.from("pricing_schemas").update({
+          is_active: false,
+          deleted_at: new Date().toISOString()
+        }).eq("id", psId).eq("store_id", sid).select("id, name, is_active").single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+
+    // ======================== CATALOGS ========================
+
+    case "list_catalogs":
+      {
+        const {
+          data,
+          error
+        } = await sb.from("catalogs").select("id, name, slug, description, vertical, is_active, is_default, display_order, created_at").eq("store_id", sid).order("display_order");
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          count: data?.length,
+          data
+        };
+      }
+    case "create_catalog":
+      {
+        const name = args.name;
+        if (!name) return {
+          success: false,
+          error: "name is required"
+        };
+        // Resolve owner_user_id from store
+        const {
+          data: store
+        } = await sb.from("stores").select("owner_user_id").eq("id", sid).single();
+        const insert = {
+          store_id: sid,
+          name,
+          slug: name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, ""),
+          owner_user_id: store?.owner_user_id
+        };
+        if (args.description) insert.description = args.description;
+        if (args.vertical) insert.vertical = args.vertical;
+        if (args.is_default !== undefined) insert.is_default = args.is_default;
+        if (args.settings) insert.settings = args.settings;
+        const {
+          data,
+          error
+        } = await sb.from("catalogs").insert(insert).select("id, name, slug, vertical, is_default, created_at").single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+    case "update_catalog":
+      {
+        const catId = args.catalog_id;
+        if (!catId) return {
+          success: false,
+          error: "catalog_id is required"
+        };
+        const updates = {};
+        if (args.name !== undefined) updates.name = args.name;
+        if (args.description !== undefined) updates.description = args.description;
+        if (args.vertical !== undefined) updates.vertical = args.vertical;
+        if (args.is_active !== undefined) updates.is_active = args.is_active;
+        if (args.is_default !== undefined) updates.is_default = args.is_default;
+        if (args.settings !== undefined) updates.settings = args.settings;
+        if (args.display_order !== undefined) updates.display_order = args.display_order;
+        const {
+          data,
+          error
+        } = await sb.from("catalogs").update(updates).eq("id", catId).eq("store_id", sid).select("id, name, slug, vertical, is_active, is_default, updated_at").single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+
+    // ======================== SCHEMA ASSIGNMENTS ========================
+
+    case "assign_schema":
+      {
+        const target = args.target; // "category" or "product"
+        const schemaType = args.schema_type; // "field" or "pricing"
+        const targetId = args.target_id;
+        const schemaId = args.schema_id;
+        if (!target || !schemaType || !targetId || !schemaId) {
+          return {
+            success: false,
+            error: "target (category|product), schema_type (field|pricing), target_id, and schema_id are required"
+          };
+        }
+
+        // Verify target product/category belongs to this store (prevent IDOR)
+        const targetTable = target === "product" ? "products" : "categories";
+        const {
+          data: ownerCheck,
+          error: ownerErr
+        } = await sb.from(targetTable).select("id").eq("id", targetId).eq("store_id", sid).single();
+        if (ownerErr || !ownerCheck) {
+          return {
+            success: false,
+            error: `${target} not found or does not belong to this store`
+          };
+        }
+
+        // Verify schema is accessible (own schema or public)
+        const schemaTable = schemaType === "field" ? "field_schemas" : "pricing_schemas";
+        const {
+          data: schemaCheck,
+          error: schemaErr
+        } = await sb.from(schemaTable).select("id").eq("id", schemaId).or(`store_id.eq.${sid},is_public.eq.true`).single();
+        if (schemaErr || !schemaCheck) {
+          return {
+            success: false,
+            error: `${schemaType} schema not found or not accessible`
+          };
+        }
+        const table = target === "product" ? schemaType === "field" ? "product_field_schemas" : "product_pricing_schemas" : schemaType === "field" ? "category_field_schemas" : "category_pricing_schemas";
+        const fkCol = target === "product" ? "product_id" : "category_id";
+        const schemaCol = schemaType === "field" ? "field_schema_id" : "pricing_schema_id";
+        const row = {
+          [fkCol]: targetId,
+          [schemaCol]: schemaId
+        };
+        if (args.sort_order !== undefined) row.sort_order = args.sort_order;
+        const {
+          data,
+          error
+        } = await sb.from(table).upsert(row, {
+          onConflict: `${fkCol},${schemaCol}`
+        }).select().single();
+        if (error) return {
+          success: false,
+          error: error.message
+        };
+
+        // Hydrate product with schema data
+        if (target === "product") {
+          const productUpdates = {};
+          if (schemaType === "pricing") {
+            const {
+              data: schema
+            } = await sb.from("pricing_schemas").select("tiers, quality_tier").eq("id", schemaId).single();
+            productUpdates.pricing_schema_id = schemaId;
+            if (schema?.tiers) productUpdates.pricing_data = schema.tiers;
+          }
+          if (schemaType === "field") {
+            // Schema is source of truth — rebuild custom_fields from schema keys only
+            const {
+              data: schema
+            } = await sb.from("field_schemas").select("fields").eq("id", schemaId).single();
+            if (schema?.fields && Array.isArray(schema.fields)) {
+              const {
+                data: product
+              } = await sb.from("products").select("custom_fields").eq("id", targetId).eq("store_id", sid).single();
+              const existing = product?.custom_fields || {};
+              const rebuilt = {};
+              for (const f of schema.fields) {
+                const key = f.key;
+                if (key) rebuilt[key] = key in existing ? existing[key] : f.default ?? null;
+              }
+              productUpdates.custom_fields = rebuilt;
             }
-            // 2. Reassign order_items
-            const { error: oiErr, count: oiCount } = await sb.from("order_items")
-                .update({ product_id: primaryId }).eq("product_id", secondaryId);
-            reassignResults.order_items = oiErr ? `error: ${oiErr.message}` : `moved ${oiCount ?? 0} rows`;
-            // 3. Reassign cart_items
-            const { error: ciErr, count: ciCount } = await sb.from("cart_items")
-                .update({ product_id: primaryId }).eq("product_id", secondaryId);
-            reassignResults.cart_items = ciErr ? `error: ${ciErr.message}` : `moved ${ciCount ?? 0} rows`;
-            // 4. Reassign purchase_order_items
-            const { error: poiErr, count: poiCount } = await sb.from("purchase_order_items")
-                .update({ product_id: primaryId }).eq("product_id", secondaryId);
-            reassignResults.purchase_order_items = poiErr ? `error: ${poiErr.message}` : `moved ${poiCount ?? 0} rows`;
-            // 5. Reassign product_reviews
-            const { error: prErr, count: prCount } = await sb.from("product_reviews")
-                .update({ product_id: primaryId }).eq("product_id", secondaryId);
-            reassignResults.product_reviews = prErr ? `error: ${prErr.message}` : `moved ${prCount ?? 0} rows`;
-            // 6. Fill in missing fields on primary from secondary
-            const fillFields = ["description", "short_description", "cost_price", "wholesale_price", "weight", "featured_image", "image_gallery"];
-            const fills = {};
-            for (const field of fillFields) {
-                if (!primary[field] && secondary[field])
-                    fills[field] = secondary[field];
+          }
+          if (Object.keys(productUpdates).length > 0) {
+            await sb.from("products").update(productUpdates).eq("id", targetId).eq("store_id", sid);
+          }
+        }
+        return {
+          success: true,
+          data
+        };
+      }
+    case "unassign_schema":
+      {
+        const target = args.target;
+        const schemaType = args.schema_type;
+        const targetId = args.target_id;
+        const schemaId = args.schema_id;
+        if (!target || !schemaType || !targetId || !schemaId) {
+          return {
+            success: false,
+            error: "target (category|product), schema_type (field|pricing), target_id, and schema_id are required"
+          };
+        }
+
+        // Verify target product/category belongs to this store (prevent IDOR)
+        const targetTable = target === "product" ? "products" : "categories";
+        const {
+          data: ownerCheck,
+          error: ownerErr
+        } = await sb.from(targetTable).select("id").eq("id", targetId).eq("store_id", sid).single();
+        if (ownerErr || !ownerCheck) {
+          return {
+            success: false,
+            error: `${target} not found or does not belong to this store`
+          };
+        }
+        const table = target === "product" ? schemaType === "field" ? "product_field_schemas" : "product_pricing_schemas" : schemaType === "field" ? "category_field_schemas" : "category_pricing_schemas";
+        const fkCol = target === "product" ? "product_id" : "category_id";
+        const schemaCol = schemaType === "field" ? "field_schema_id" : "pricing_schema_id";
+        const {
+          error
+        } = await sb.from(table).delete().eq(fkCol, targetId).eq(schemaCol, schemaId);
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data: {
+            removed: true,
+            target,
+            schema_type: schemaType,
+            target_id: targetId,
+            schema_id: schemaId
+          }
+        };
+      }
+
+    // ======================== PRODUCT DEDUP / MERGE ========================
+
+    case "find_duplicates":
+      {
+        // Find products with similar names (potential duplicates)
+        const {
+          data: all,
+          error: allErr
+        } = await sb.from("products").select("id, name, sku, status, stock_quantity, cost_price, created_at").eq("store_id", sid).neq("status", "archived").order("name");
+        if (allErr) return {
+          success: false,
+          error: allErr.message
+        };
+
+        // Group by normalized name (lowercase, trim, strip common suffixes like "(TEMP)", "(OLD)", "(COPY)")
+        const nameMap = new Map();
+        for (const p of all || []) {
+          const normalized = (p.name || "").toLowerCase().trim().replace(/\s*\((temp|old|copy|duplicate|dup|new|v2)\)\s*/gi, "").replace(/\s+/g, " ");
+          if (!normalized) continue;
+          if (!nameMap.has(normalized)) nameMap.set(normalized, []);
+          nameMap.get(normalized).push(p);
+        }
+        const duplicates = Array.from(nameMap.entries()).filter(([_, products]) => products.length > 1).map(([normalizedName, products]) => ({
+          normalized_name: normalizedName,
+          count: products.length,
+          products: products.map(p => ({
+            id: p.id,
+            name: p.name,
+            sku: p.sku,
+            status: p.status,
+            stock_quantity: p.stock_quantity,
+            cost_price: p.cost_price,
+            created_at: p.created_at
+          }))
+        }));
+
+        // Also check by exact SKU match
+        const skuMap = new Map();
+        for (const p of all || []) {
+          if (!p.sku) continue;
+          const key = p.sku.toLowerCase().trim();
+          if (!skuMap.has(key)) skuMap.set(key, []);
+          skuMap.get(key).push(p);
+        }
+        const skuDupes = Array.from(skuMap.entries()).filter(([_, products]) => products.length > 1).map(([sku, products]) => ({
+          sku,
+          count: products.length,
+          products
+        }));
+
+        // Pre-format as markdown — formatter drops nested products arrays
+        const totalNameDupes = duplicates.reduce((s, d) => s + d.count, 0);
+        const totalSkuDupes = skuDupes.reduce((s, d) => s + d.count, 0);
+        const lines = [`## Duplicate Products`, `**By Name**: ${duplicates.length} groups (${totalNameDupes} products) | **By SKU**: ${skuDupes.length} groups (${totalSkuDupes} products)\n`];
+        if (duplicates.length > 0) {
+          lines.push("### Name Duplicates");
+          for (const group of duplicates.slice(0, 20)) {
+            lines.push(`\n**"${group.normalized_name}"** (${group.count} products):`);
+            lines.push("| Name | SKU | Status | Stock | Created |");
+            lines.push("| --- | --- | --- | ---: | --- |");
+            for (const p of group.products) {
+              lines.push(`| ${p.name} | ${p.sku || "—"} | ${p.status} | ${p.stock_quantity ?? "—"} | ${p.created_at?.slice(0, 10) || "—"} |`);
             }
-            // Merge custom_fields (secondary fills gaps)
-            if (secondary.custom_fields && typeof secondary.custom_fields === "object") {
-                const merged = { ...secondary.custom_fields, ...(primary.custom_fields || {}) };
-                fills.custom_fields = merged;
+          }
+        }
+        if (skuDupes.length > 0) {
+          lines.push("\n### SKU Duplicates");
+          for (const group of skuDupes.slice(0, 20)) {
+            lines.push(`\n**SKU "${group.sku}"** (${group.count} products):`);
+            lines.push("| Name | SKU | Status | Stock | Created |");
+            lines.push("| --- | --- | --- | ---: | --- |");
+            for (const p of group.products) {
+              lines.push(`| ${p.name} | ${p.sku || "—"} | ${p.status} | ${p.stock_quantity ?? "—"} | ${p.created_at?.slice(0, 10) || "—"} |`);
             }
-            if (Object.keys(fills).length > 0) {
-                await sb.from("products").update(fills).eq("id", primaryId).eq("store_id", sid);
-                reassignResults.field_fills = Object.keys(fills).join(", ");
+          }
+        }
+        if (duplicates.length === 0 && skuDupes.length === 0) {
+          lines.push("\nNo duplicates found.");
+        }
+        return {
+          success: true,
+          data: lines.join("\n")
+        };
+      }
+    case "merge":
+      {
+        const primaryId = args.primary_product_id;
+        const secondaryId = args.secondary_product_id;
+        if (!primaryId || !secondaryId) return {
+          success: false,
+          error: "primary_product_id and secondary_product_id required"
+        };
+        if (primaryId === secondaryId) return {
+          success: false,
+          error: "Cannot merge a product with itself"
+        };
+
+        // Verify both exist and belong to this store
+        const {
+          data: primary
+        } = await sb.from("products").select("*").eq("id", primaryId).eq("store_id", sid).single();
+        const {
+          data: secondary
+        } = await sb.from("products").select("*").eq("id", secondaryId).eq("store_id", sid).single();
+        if (!primary) return {
+          success: false,
+          error: `Primary product ${primaryId} not found`
+        };
+        if (!secondary) return {
+          success: false,
+          error: `Secondary product ${secondaryId} not found`
+        };
+        const reassignResults = {};
+
+        // 1. Consolidate inventory — sum quantities per location
+        const {
+          data: secInv
+        } = await sb.from("inventory").select("product_id, location_id, quantity").eq("product_id", secondaryId).eq("store_id", sid);
+        if (secInv?.length) {
+          for (const row of secInv) {
+            if (!row.quantity || row.quantity <= 0) continue;
+            // Try to add to existing primary inventory at same location
+            const {
+              data: priRow
+            } = await sb.from("inventory").select("id, quantity").eq("product_id", primaryId).eq("location_id", row.location_id).eq("store_id", sid).maybeSingle();
+            if (priRow) {
+              await sb.from("inventory").update({
+                quantity: (priRow.quantity || 0) + row.quantity,
+                updated_at: new Date().toISOString()
+              }).eq("id", priRow.id);
+            } else {
+              await sb.from("inventory").insert({
+                store_id: sid,
+                product_id: primaryId,
+                location_id: row.location_id,
+                quantity: row.quantity
+              });
             }
-            // 7. Archive the secondary product
-            await sb.from("products").update({
-                status: "archived",
-                name: `[MERGED] ${secondary.name}`,
-            }).eq("id", secondaryId).eq("store_id", sid);
-            // Re-read primary
-            const { data: merged } = await sb.from("products")
-                .select("id, name, sku, status, stock_quantity, cost_price, created_at, updated_at")
-                .eq("id", primaryId).single();
-            return {
-                success: true,
-                data: {
-                    merged_product: merged,
-                    archived_product: { id: secondaryId, name: secondary.name },
-                    reassign_results: reassignResults,
-                }
-            };
+          }
+          // Zero out secondary inventory
+          await sb.from("inventory").update({
+            quantity: 0
+          }).eq("product_id", secondaryId).eq("store_id", sid);
+          reassignResults.inventory = `consolidated ${secInv.length} location(s)`;
+        } else {
+          reassignResults.inventory = "no inventory to consolidate";
         }
-        default:
-            return { success: false, error: `Unknown products action: ${args.action}. Valid: browse, find, get, create, update, delete, find_duplicates, merge, list_categories, get_category, create_category, update_category, delete_category, list_field_schemas, get_field_schema, create_field_schema, update_field_schema, delete_field_schema, list_pricing_schemas, get_pricing_schema, create_pricing_schema, update_pricing_schema, delete_pricing_schema, list_catalogs, create_catalog, update_catalog, assign_schema, unassign_schema` };
-    }
+
+        // 2. Reassign order_items
+        const {
+          error: oiErr,
+          count: oiCount
+        } = await sb.from("order_items").update({
+          product_id: primaryId
+        }).eq("product_id", secondaryId);
+        reassignResults.order_items = oiErr ? `error: ${oiErr.message}` : `moved ${oiCount ?? 0} rows`;
+
+        // 3. Reassign cart_items
+        const {
+          error: ciErr,
+          count: ciCount
+        } = await sb.from("cart_items").update({
+          product_id: primaryId
+        }).eq("product_id", secondaryId);
+        reassignResults.cart_items = ciErr ? `error: ${ciErr.message}` : `moved ${ciCount ?? 0} rows`;
+
+        // 4. Reassign purchase_order_items
+        const {
+          error: poiErr,
+          count: poiCount
+        } = await sb.from("purchase_order_items").update({
+          product_id: primaryId
+        }).eq("product_id", secondaryId);
+        reassignResults.purchase_order_items = poiErr ? `error: ${poiErr.message}` : `moved ${poiCount ?? 0} rows`;
+
+        // 5. Reassign product_reviews
+        const {
+          error: prErr,
+          count: prCount
+        } = await sb.from("product_reviews").update({
+          product_id: primaryId
+        }).eq("product_id", secondaryId);
+        reassignResults.product_reviews = prErr ? `error: ${prErr.message}` : `moved ${prCount ?? 0} rows`;
+
+        // 6. Fill in missing fields on primary from secondary
+        const fillFields = ["description", "short_description", "cost_price", "wholesale_price", "weight", "featured_image", "image_gallery"];
+        const fills = {};
+        for (const field of fillFields) {
+          if (!primary[field] && secondary[field]) fills[field] = secondary[field];
+        }
+        // Merge custom_fields (secondary fills gaps)
+        if (secondary.custom_fields && typeof secondary.custom_fields === "object") {
+          const merged = {
+            ...secondary.custom_fields,
+            ...(primary.custom_fields || {})
+          };
+          fills.custom_fields = merged;
+        }
+        if (Object.keys(fills).length > 0) {
+          await sb.from("products").update(fills).eq("id", primaryId).eq("store_id", sid);
+          reassignResults.field_fills = Object.keys(fills).join(", ");
+        }
+
+        // 7. Archive the secondary product
+        await sb.from("products").update({
+          status: "archived",
+          name: `[MERGED] ${secondary.name}`
+        }).eq("id", secondaryId).eq("store_id", sid);
+
+        // Re-read primary
+        const {
+          data: merged
+        } = await sb.from("products").select("id, name, sku, status, stock_quantity, cost_price, created_at, updated_at").eq("id", primaryId).single();
+        return {
+          success: true,
+          data: {
+            merged_product: merged,
+            archived_product: {
+              id: secondaryId,
+              name: secondary.name
+            },
+            reassign_results: reassignResults
+          }
+        };
+      }
+    default:
+      return {
+        success: false,
+        error: `Unknown products action: ${args.action}. Valid: browse, find, get, create, update, delete, find_duplicates, merge, list_categories, get_category, create_category, update_category, delete_category, list_field_schemas, get_field_schema, create_field_schema, update_field_schema, delete_field_schema, list_pricing_schemas, get_pricing_schema, create_pricing_schema, update_pricing_schema, delete_pricing_schema, list_catalogs, create_catalog, update_catalog, assign_schema, unassign_schema`
+      };
+  }
 }
 export async function handleCollections(sb, args, storeId) {
-    const sid = storeId;
-    switch (args.action) {
-        case "find": {
-            let q = sb.from("creation_collections").select("*").eq("store_id", sid);
-            if (args.name) {
-                const sn = sanitizeFilterValue(args.name);
-                q = q.ilike("name", `%${sn}%`);
-            }
-            const { data, error } = await q.limit(100);
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        case "create": {
-            const slug = args.slug || (args.name || "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
-            const { data, error } = await sb.from("creation_collections")
-                .insert({ store_id: sid, name: args.name, slug }).select().single();
-            return error ? { success: false, error: error.message } : { success: true, data };
-        }
-        default:
-            return { success: false, error: `Unknown collections action: ${args.action}` };
-    }
+  const sid = storeId;
+  switch (args.action) {
+    case "find":
+      {
+        let q = sb.from("creation_collections").select("*").eq("store_id", sid);
+        if (args.name) {
+          const sn = sanitizeFilterValue(args.name);
+          q = q.ilike("name", `%${sn}%`);
+        }
+        const {
+          data,
+          error
+        } = await q.limit(100);
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+    case "create":
+      {
+        const slug = args.slug || (args.name || "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
+        const {
+          data,
+          error
+        } = await sb.from("creation_collections").insert({
+          store_id: sid,
+          name: args.name,
+          slug
+        }).select().single();
+        return error ? {
+          success: false,
+          error: error.message
+        } : {
+          success: true,
+          data
+        };
+      }
+    default:
+      return {
+        success: false,
+        error: `Unknown collections action: ${args.action}`
+      };
+  }
 }
+//# sourceMappingURL=catalog.js.map