iatoolkit 2.71.1__tar.gz → 2.72.1__tar.gz

{iatoolkit-2.71.1/src/iatoolkit.egg-info → iatoolkit-2.72.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iatoolkit
-Version: 2.71.1
+Version: 2.72.1
 Summary: IAToolkit
 Author: Fernando Libedinsky
 License-Expression: MIT

{iatoolkit-2.71.1 → iatoolkit-2.72.1}/src/iatoolkit/__init__.py

@@ -3,7 +3,7 @@
 #
 # IAToolkit is open source software.
 
-__version__ = "2.71.1"
+__version__ = "2.72.1"
 
 # Expose main classes and functions at the top level of the package
 

{iatoolkit-2.71.1 → iatoolkit-2.72.1}/src/iatoolkit/common/access.py

@@ -176,6 +176,22 @@ def role_assigned(company_short_name: str, user_identifier: str, role: str) -> N
                             company_short_name, exc)
 
 
+def filter_llm_models(company_short_name: str, user_identifier: str | None, default_model: str | None,
+                      models: list[dict]) -> tuple[str | None, list[dict]]:
+    """The chat's model choice limited to the models this person may use (BL-010, Fase 2).
+
+    When the company's default is not among them, the first one they may use becomes
+    their default."""
+    if not user_identifier or not Access.registered():
+        return default_model, models
+    allowed = [m for m in models or [] if can(company_short_name, user_identifier, USE, "model",
+                                              str((m or {}).get("id") or ""))]
+    allowed_ids = [str(m.get("id")) for m in allowed]
+    if default_model and default_model not in allowed_ids:
+        default_model = allowed_ids[0] if allowed_ids else None
+    return default_model, allowed
+
+
 def person_can(company_short_name: str, auth_result: dict | None, level: int, resource_type: str = "company",
                resource_key: str | None = None) -> bool:
     """A signed-in person's access, from an AuthService result.

{iatoolkit-2.71.1 → iatoolkit-2.72.1}/src/iatoolkit/locales/en.yaml

@@ -695,6 +695,61 @@ ui:
     access_all_resources: "every resource"
     access_company: "the company"
     access_title: "Access"
+    access_usage: "Usage"
+    access_usage_calls: "calls in recent days"
+    access_usage_people: "people who used it"
+    access_usage_agents: "agents bound to it"
+    access_usage_agents_title: "Agents that use it"
+    access_usage_no_agents: "No agent is bound to it."
+    access_usage_window: "Calls in the last {days} days."
+    access_person_title: "What this person sees"
+    access_group_title: "What this group can do"
+    access_person_company: "Over the company"
+    access_person_none: "No resource has its own access yet: they use what the whole company uses."
+    access_group_none: "Not listed in any resource's access."
+    access_no_access: "no access"
+    access_role_owner: "Owner"
+    access_role_admin: "Administers"
+    access_role_editor: "Edits"
+    access_role_user: "Uses"
+    access_simulator: "Simulate access"
+    access_simulator_hint: "Pick a person and a resource: it tells you whether they can, and why."
+    access_sim_person: "Person"
+    access_sim_type: "Resource type"
+    access_sim_key: "Resource (name or key)"
+    access_sim_run: "Simulate"
+    access_sim_allowed: "Can"
+    access_sim_denied: "Cannot"
+    access_sim_groups: "Their groups"
+    access_reason_owner: "Owns the company: can do everything."
+    access_reason_company_admin: "Administers the company: administers every resource."
+    access_reason_company: "By their level over the company."
+    access_reason_own_access_list: "The resource has its own list: it depends on whether one of their groups is in it."
+    access_reason_type_default: "The resource uses the company's access for its type."
+    access_export: "Export"
+    access_import: "Import permissions"
+    access_import_hint: "Paste an exported YAML. Check what would change first, then apply it."
+    access_import_check: "Check changes"
+    access_import_apply: "Apply"
+    access_import_groups_created: "New groups"
+    access_import_groups_updated: "Changed groups"
+    access_import_members_added: "Members added"
+    access_import_members_removed: "Members removed"
+    access_import_resources_set: "Resources with their access"
+    access_import_errors: "Errors"
+    access_import_nothing: "Nothing to change."
+    access_import_done: "Permissions imported."
+    access_type_agent: "Agent"
+    access_type_tool: "Tool"
+    access_type_model: "Model"
+    access_type_sql_source: "SQL source"
+    access_type_rag_collection: "Collection"
+    access_type_memory_folder: "Memory folder"
+    access_type_knowledge_wiki: "Wiki"
+    access_type_knowledge_table: "Knowledge table"
+    access_type_mcp_tool: "MCP tool"
+    access_type_company: "The company"
+    access_settings_tab: "Settings"
     access_group_owners: "Owners"
     access_group_admins: "Administrators"
     access_group_editors: "Editors"
@@ -725,6 +780,13 @@ ui:
     access_mode_own: "Restricted"
     access_mode_default: "Whole company"
     access_heading_agent: "Who can use this agent?"
+    access_heading_tool: "Who can use this tool?"
+    access_heading_sql_source: "Who can query this SQL source?"
+    access_heading_knowledge_table: "Who can query this table?"
+    access_heading_model: "Who can use this model?"
+    access_heading_knowledge_wiki: "Who can see this wiki?"
+    access_heading_rag_collection: "Who can see this collection?"
+    access_heading_memory_folder: "Who can see this folder?"
     access_heading: "Who has access?"
     access_default: "Company access (default)"
     access_default_hint: "Everyone uses it under the company's general permissions. Add a group to restrict it."
@@ -837,7 +899,7 @@ ui:
     mode_external_sync: "External"
     mode_managed_help: "The wiki is edited from this workspace and pages are saved into storage."
     mode_external_sync_help: "The wiki stays read-only in IAToolkit and updates from the configured storage root."
-    access_control: "Access control"
+    access_control: "Page visibility by labels"
     access_mode_off: "Off"
     access_mode_off_help: "Access labels are stored but no page is filtered."
     access_mode_dry_run: "Dry run"
@@ -1770,6 +1832,19 @@ ui:
 
 
   db_explorer:
+    sql_source_open_detail: "View and configure the source"
+    sql_source_switch: "Switch source"
+    sql_source_tab_connection: "Connection"
+    sql_source_test: "Test connection"
+    sql_source_testing: "Connecting..."
+    sql_source_test_ok: "Connected · {count} tables"
+    sql_source_test_failed: "Could not connect"
+    sql_source_tables_hint: "With the switch off, tick in the list on the left the tables that enter the context."
+    sql_source_pick: "Choose a source"
+    sql_source_none: "No SQL sources yet"
+    sql_source_kind: "SQL source"
+    sql_sources_status_active: "Active"
+    sql_sources_status_inactive: "Inactive"
     data_explorer: "Data Explorer"
     database_connection: "Database Connection"
     tables: "Tables"
@@ -2581,6 +2656,33 @@ ui:
 
     runtime_defaults_card_title: "Runtime defaults"
   rag:
+    collections_tab: "Collections"
+    collection_new: "New collection"
+    collection_filter: "Filter collections"
+    collection_pick: "Pick a collection to see its detail."
+    collection_none: "No collections."
+    collection_document: "document"
+    collection_documents: "documents"
+    collection_memory_badge: "Memory folder"
+    collection_tab_general: "General"
+    collection_memory_note: "It is the collection of the Memory folder “{folder}”: it is managed in Memory."
+    collection_description: "Description"
+    collection_description_hint: "The AI reads it to decide when to search this collection."
+    collection_parser: "Document reader"
+    collection_parser_default: "the company's"
+    collection_delete: "Delete collection"
+    collection_delete_only_empty: "Only an empty collection can be deleted: delete its documents first."
+    collection_save: "Save"
+    collection_last_load: "Last load"
+    collection_view_documents: "See its documents"
+    collection_upload: "Upload documents"
+    collection_new_hint: "Group documents so the AI searches them together."
+    collection_name: "Name"
+    collection_create: "Create collection"
+    collection_created: "Collection created."
+    collection_saved: "Collection updated."
+    collection_delete_confirm: "Delete the collection “{name}”?"
+    collection_deleted: "Collection deleted."
     ingestion: "Ingestion"
     ingestion_description: "Ingest documents into the knowledge base."
     workbench: "Workbench"
@@ -2693,6 +2795,7 @@ errors:
   company_not_found: "The company {company_short_name} does not exist."
   access:
     agent_denied: "You do not have access to the agent {prompt_name}."
+    model_denied: "You do not have access to the model {model}."
   timeout: "timeout expired."
   auth:
     invalid_password: "The provided password is incorrect."

{iatoolkit-2.71.1 → iatoolkit-2.72.1}/src/iatoolkit/locales/es.yaml

@@ -709,6 +709,61 @@ ui:
     access_all_resources: "todos los recursos"
     access_company: "la empresa"
     access_title: "Acceso"
+    access_usage: "Uso"
+    access_usage_calls: "llamadas en los últimos días"
+    access_usage_people: "personas que lo usaron"
+    access_usage_agents: "agentes que lo tienen ligado"
+    access_usage_agents_title: "Agentes que lo usan"
+    access_usage_no_agents: "Ningún agente lo tiene ligado."
+    access_usage_window: "Llamadas de los últimos {days} días."
+    access_person_title: "Qué ve esta persona"
+    access_group_title: "Qué puede este grupo"
+    access_person_company: "Sobre la empresa"
+    access_person_none: "Ningún recurso tiene acceso propio todavía: usa lo de toda la empresa."
+    access_group_none: "No aparece en la lista de acceso de ningún recurso."
+    access_no_access: "sin acceso"
+    access_role_owner: "Dueño"
+    access_role_admin: "Administra"
+    access_role_editor: "Edita"
+    access_role_user: "Usa"
+    access_simulator: "Simular acceso"
+    access_simulator_hint: "Elige una persona y un recurso: te dice si puede y por qué."
+    access_sim_person: "Persona"
+    access_sim_type: "Tipo de recurso"
+    access_sim_key: "Recurso (nombre o clave)"
+    access_sim_run: "Simular"
+    access_sim_allowed: "Puede"
+    access_sim_denied: "No puede"
+    access_sim_groups: "Sus grupos"
+    access_reason_owner: "Es dueño de la empresa: puede todo."
+    access_reason_company_admin: "Administra la empresa: administra todos los recursos."
+    access_reason_company: "Según su nivel sobre la empresa."
+    access_reason_own_access_list: "El recurso tiene lista propia: decide si alguno de sus grupos está en ella."
+    access_reason_type_default: "El recurso usa el acceso de la empresa para su tipo."
+    access_export: "Exportar"
+    access_import: "Importar permisos"
+    access_import_hint: "Pega un YAML exportado. Primero revisa qué cambiaría y después aplícalo."
+    access_import_check: "Revisar cambios"
+    access_import_apply: "Aplicar"
+    access_import_groups_created: "Grupos nuevos"
+    access_import_groups_updated: "Grupos modificados"
+    access_import_members_added: "Miembros que se agregan"
+    access_import_members_removed: "Miembros que se quitan"
+    access_import_resources_set: "Recursos con su acceso"
+    access_import_errors: "Errores"
+    access_import_nothing: "No hay nada que cambiar."
+    access_import_done: "Permisos importados."
+    access_type_agent: "Agente"
+    access_type_tool: "Tool"
+    access_type_model: "Modelo"
+    access_type_sql_source: "Fuente SQL"
+    access_type_rag_collection: "Colección"
+    access_type_memory_folder: "Carpeta de Memoria"
+    access_type_knowledge_wiki: "Wiki"
+    access_type_knowledge_table: "Knowledge table"
+    access_type_mcp_tool: "Tool MCP"
+    access_type_company: "La empresa"
+    access_settings_tab: "Configuración"
     access_group_owners: "Dueños"
     access_group_admins: "Administradores"
     access_group_editors: "Editores"
@@ -739,6 +794,13 @@ ui:
     access_mode_own: "Restringido"
     access_mode_default: "Toda la empresa"
     access_heading_agent: "¿Quién puede usar este agente?"
+    access_heading_tool: "¿Quién puede usar esta tool?"
+    access_heading_sql_source: "¿Quién puede consultar esta fuente SQL?"
+    access_heading_knowledge_table: "¿Quién puede consultar esta tabla?"
+    access_heading_model: "¿Quién puede usar este modelo?"
+    access_heading_knowledge_wiki: "¿Quién puede ver esta wiki?"
+    access_heading_rag_collection: "¿Quién puede ver esta colección?"
+    access_heading_memory_folder: "¿Quién puede ver esta carpeta?"
     access_heading: "¿Quién tiene acceso?"
     access_default: "Acceso de la empresa (por defecto)"
     access_default_hint: "Lo usan todos según los permisos generales de la empresa. Agrega un grupo para restringirlo."
@@ -851,7 +913,7 @@ ui:
     mode_external_sync: "Externa"
     mode_managed_help: "La wiki se edita desde esta interfaz y guarda sus páginas en storage."
     mode_external_sync_help: "La wiki queda de solo lectura en IAToolkit y se actualiza desde la raíz storage configurada."
-    access_control: "Control de acceso"
+    access_control: "Visibilidad de páginas por etiquetas"
     access_mode_off: "Desactivado"
     access_mode_off_help: "Las etiquetas de acceso se guardan pero no se filtra ninguna página."
     access_mode_dry_run: "Simulación"
@@ -1786,6 +1848,19 @@ ui:
 
 
   db_explorer:
+    sql_source_open_detail: "Ver y configurar la fuente"
+    sql_source_switch: "Cambiar de fuente"
+    sql_source_tab_connection: "Conexión"
+    sql_source_test: "Probar conexión"
+    sql_source_testing: "Conectando..."
+    sql_source_test_ok: "Conectada · {count} tablas"
+    sql_source_test_failed: "No se pudo conectar"
+    sql_source_tables_hint: "Con el interruptor apagado, marca en la lista de la izquierda las tablas que entran al contexto."
+    sql_source_pick: "Elige una fuente"
+    sql_source_none: "Todavía no hay fuentes SQL"
+    sql_source_kind: "Fuente SQL"
+    sql_sources_status_active: "Activa"
+    sql_sources_status_inactive: "Inactiva"
     data_explorer: "Explorador de datos"
     database_connection: "Bases de datos"
     tables: "Tablas"
@@ -2599,6 +2674,33 @@ ui:
 
     runtime_defaults_card_title: "Valores por defecto en runtime"
   rag:
+    collections_tab: "Colecciones"
+    collection_new: "Nueva colección"
+    collection_filter: "Filtrar colecciones"
+    collection_pick: "Elige una colección para ver su detalle."
+    collection_none: "No hay colecciones."
+    collection_document: "documento"
+    collection_documents: "documentos"
+    collection_memory_badge: "Carpeta de Memoria"
+    collection_tab_general: "General"
+    collection_memory_note: "Es la colección de la carpeta de Memoria «{folder}»: se administra en Memoria."
+    collection_description: "Descripción"
+    collection_description_hint: "La IA la lee para decidir cuándo buscar en esta colección."
+    collection_parser: "Lector de documentos"
+    collection_parser_default: "el de la empresa"
+    collection_delete: "Eliminar colección"
+    collection_delete_only_empty: "Solo se elimina una colección vacía: borra antes sus documentos."
+    collection_save: "Guardar"
+    collection_last_load: "Última carga"
+    collection_view_documents: "Ver sus documentos"
+    collection_upload: "Cargar documentos"
+    collection_new_hint: "Agrupa documentos para que la IA los busque juntos."
+    collection_name: "Nombre"
+    collection_create: "Crear colección"
+    collection_created: "Colección creada."
+    collection_saved: "Colección actualizada."
+    collection_delete_confirm: "¿Eliminar la colección «{name}»?"
+    collection_deleted: "Colección eliminada."
     ingestion: "Ingesta"
     ingestion_description: "Ingestar documentos en la base de conocimiento."
     workbench: "Area de trabajo"
@@ -2708,6 +2810,7 @@ errors:
   company_not_found: "La empresa {company_short_name} no existe."
   access:
     agent_denied: "No tienes acceso al agente {prompt_name}."
+    model_denied: "No tienes acceso al modelo {model}."
   timeout: "El tiempo de espera ha expirado."
 
 

{iatoolkit-2.71.1 → iatoolkit-2.72.1}/src/iatoolkit/services/company_context_service.py

@@ -52,6 +52,7 @@ class CompanyContextService:
         include_sql_context: bool = True,
         include_yaml_context: bool = True,
         selected_context_files: List[str] | None = None,
+        allowed_databases: List[str] | None = None,
     ) -> dict[str, str]:
         """
         Builds the full context by aggregating three sources:
@@ -78,7 +79,9 @@ class CompanyContextService:
         # schema expansion and expose SQL through dedicated schema/query tools.
         if include_sql_context:
             try:
-                sql_context, db_tables = self._get_sql_enriched_context(company_short_name)
+                # allowed_databases: the sources this person may query (BL-010); None is all.
+                sql_context, db_tables = self._get_sql_enriched_context(company_short_name,
+                                                                        allowed_databases=allowed_databases)
                 sql_context = sql_context.strip()
                 sql_source_table_scopes = self._get_sql_source_table_scopes(company_short_name)
             except Exception as e:

{iatoolkit-2.71.1 → iatoolkit-2.72.1}/src/iatoolkit/services/context_builder_service.py

@@ -199,7 +199,7 @@ class ContextBuilderService:
 
         # 1. Get user profile
         user_profile = self.profile_service.get_profile_by_identifier(company_short_name, user_identifier)
-        available_tools = self.tool_service.get_tools_for_llm(company)
+        available_tools = self.tool_service.get_tools_for_llm(company, user_identifier=user_identifier)
 
         # 2. Render the base system prompt (iatoolkit standard)
         system_prompt_payload = self.prompt_service.get_system_prompt_payload(
@@ -223,9 +223,13 @@ class ContextBuilderService:
             service_list=available_tools,
         )
 
-        # 3. Get company specific context (DB Schemas, Docs, etc.)
-        company_context_blocks = self.company_context_service.get_company_context_blocks(company_short_name)
-        collection_context = self._build_collection_context(company_short_name)
+        # 3. Get company specific context (DB Schemas, Docs, etc.), limited to the SQL
+        # sources and collections this person may use (BL-010, Fase 2).
+        allowed_databases, allowed_collections = self._access_restrictions(company_short_name, user_identifier)
+        company_context_blocks = self.company_context_service.get_company_context_blocks(
+            company_short_name, allowed_databases=allowed_databases)
+        collection_context = "" if allowed_collections == [] else self._build_collection_context(
+            company_short_name, collection_names=allowed_collections)
 
         final_system_context = self._join_context_sections(
             rendered_sections.get("identity"),
@@ -274,6 +278,24 @@ class ContextBuilderService:
 
         return capabilities
 
+    def _access_restrictions(self, company_short_name: str,
+                             user_identifier: str | None) -> tuple[list[str] | None, list[str] | None]:
+        """(SQL sources, collections) this person may use; None where nothing is restricted."""
+        from iatoolkit.common import access
+        if not user_identifier or not access.Access.registered():
+            return None, None
+        from iatoolkit import current_iatoolkit
+        from iatoolkit.services.resource_access_scope import ResourceAccessScope
+        from iatoolkit.services.sql_source_service import SqlSourceService
+        injector = current_iatoolkit().get_injector()
+        scope = injector.get(ResourceAccessScope)
+        databases = [str(s.get("database") or "") for s in
+                     injector.get(SqlSourceService).list_sources(company_short_name, include_inactive=False) or []
+                     if s.get("database")]
+        allowed_databases = scope.allowed_databases(company_short_name, user_identifier, databases)
+        return (None if len(allowed_databases) == len(databases) else allowed_databases,
+                scope.allowed_collections(company_short_name, user_identifier))
+
     def build_agent_system_context(
         self,
         company_short_name: str,
@@ -312,6 +334,12 @@ class ContextBuilderService:
             resource_bindings,
             PromptResourceType.RAG_COLLECTION.value,
         )
+        # The agent's sources and collections, minus those this person may not use.
+        allowed_databases, allowed_collections = self._access_restrictions(company_short_name, user_identifier)
+        if allowed_databases is not None:
+            sql_sources = [s for s in sql_sources if s in allowed_databases]
+        if allowed_collections is not None:
+            rag_collections = [c for c in rag_collections if c in allowed_collections]
 
         prompt_capabilities = self._resolve_system_prompt_capabilities(enabled_tools)
         if self.SQL_TOOL_NAME in enabled_tool_names and not sql_sources:
@@ -370,6 +398,7 @@ class ContextBuilderService:
         company_context_policy = context_policy.get("company_context_blocks") or {}
         company_context_blocks = self.company_context_service.get_company_context_blocks(
             company_short_name,
+            allowed_databases=allowed_databases,
             include_sql_context=bool(company_context_policy.get("sql_context")),
             include_yaml_context=bool(company_context_policy.get("yaml_context")),
         )

{iatoolkit-2.71.1 → iatoolkit-2.72.1}/src/iatoolkit/services/dispatcher_service.py

@@ -56,6 +56,23 @@ class Dispatcher:
         self._company_instances = None
         self._company_instances_revision = -1
 
+    @staticmethod
+    def _scope_tool_call(company_short_name: str, function_name: str, user_identifier: str | None,
+                         kwargs: dict) -> dict:
+        from iatoolkit.common import access
+        if not user_identifier or not access.Access.registered():
+            # No person (internal runs), or no groups (core alone): nothing is restricted.
+            return kwargs
+        from iatoolkit import current_iatoolkit
+        from iatoolkit.services.resource_access_scope import ResourceAccessScope
+        try:
+            injector = current_iatoolkit().get_injector()
+        except Exception:
+            # No running IAToolkit (unit tests of the dispatcher alone): nothing to scope with.
+            return kwargs
+        scope = injector.get(ResourceAccessScope)
+        return scope.scope_tool_call(company_short_name, function_name, user_identifier, kwargs)
+
     def _safe_rollback(self):
         """
         Best-effort rollback for the shared scoped session used by repositories.
@@ -228,6 +245,9 @@ class Dispatcher:
             )
             return result
         try:
+            # What the person may reach (BL-010, Fase 2): the tool, and the SQL source,
+            # collections or wikis the call names or would search.
+            kwargs = self._scope_tool_call(company_short_name, function_name, user_identifier, kwargs)
             result = self._dispatch_resolved_tool(
                 company_short_name=company_short_name,
                 function_name=function_name,

{iatoolkit-2.71.1 → iatoolkit-2.72.1}/src/iatoolkit/services/query_service.py

@@ -1269,7 +1269,7 @@ class QueryService:
         if not prompt_output_contract:
             return {'rebuild_needed': True, 'error': f"Prompt '{prompt_name}' not found"}
 
-        tools = self.tool_service.get_tools_for_llm(company)
+        tools = self.tool_service.get_tools_for_llm(company, user_identifier=user_identifier)
         is_agent_execution = self._is_agentic_execution(prompt_output_contract)
         tools, _tool_router_metrics = self._apply_prompt_tool_policy(
             company_short_name=company_short_name,
@@ -1528,6 +1528,11 @@ class QueryService:
                 prompt_output_contract=prompt_output_contract,
             )
             effective_model = self._resolve_model(company_short_name, model, prompt_output_contract)
+            # Using a model is a level-1 permission over it (BL-010, Fase 2).
+            if effective_model and not access.can(company_short_name, user_identifier, access.USE, "model",
+                                                  effective_model):
+                return {"error": True, "status_code": 403,
+                        "error_message": self.i18n_service.t('errors.access.model_denied', model=effective_model)}
             output_schema = self._build_output_text_schema_payload(
                 company_short_name,
                 effective_model,
@@ -1616,7 +1621,7 @@ class QueryService:
             is_agent_execution = self._is_agentic_execution(prompt_output_contract) and not is_agent_session_execution
 
             # get the tools availables for this company
-            tools = self.tool_service.get_tools_for_llm(company)
+            tools = self.tool_service.get_tools_for_llm(company, user_identifier=user_identifier)
             log_stage("load_tools")
             tools, tool_router_metrics = self._apply_prompt_tool_policy(
                 company_short_name=company_short_name,
@@ -1920,7 +1925,7 @@ class QueryService:
                 )
 
             is_agent_execution = self._is_agentic_execution(prompt_output_contract)
-            tools = self.tool_service.get_tools_for_llm(company)
+            tools = self.tool_service.get_tools_for_llm(company, user_identifier=user_identifier)
             tools, tool_router_metrics = self._apply_prompt_tool_policy(
                 company_short_name=company_short_name,
                 prompt_output_contract=prompt_output_contract,
@@ -2060,7 +2065,7 @@ class QueryService:
             effective_model = self._resolve_model(company_short_name, None, {})
             provider = self._get_provider(company_short_name, effective_model)
             history_type = self._get_history_type(company_short_name, effective_model)
-            tools = self.tool_service.get_tools_for_llm(company)
+            tools = self.tool_service.get_tools_for_llm(company, user_identifier=user_identifier)
             runtime_context, _user_profile, selected_system_prompt_keys = self.context_builder.build_system_context(
                 company_short_name,
                 user_identifier,