libredesk/internal/aiagent/worker.go

package aiagent

import (
	"context"
	"database/sql"
	"fmt"
	"slices"
	"strings"

	"time"

	"github.com/abhinavxd/libredesk/internal/ai"
	aimodels "github.com/abhinavxd/libredesk/internal/ai/models"
	"github.com/abhinavxd/libredesk/internal/aiagent/models"
	"github.com/abhinavxd/libredesk/internal/attachment"
	cmodels "github.com/abhinavxd/libredesk/internal/conversation/models"
	statusmodels "github.com/abhinavxd/libredesk/internal/conversation/status/models"
	imageutil "github.com/abhinavxd/libredesk/internal/image"

	"github.com/abhinavxd/libredesk/internal/stringutil"
	umodels "github.com/abhinavxd/libredesk/internal/user/models"
)

const (
	channelEmail = "email"

	maxImagesPerMessage = 3
	maxImagesTotal      = 4
	maxImageBytes       = 8 << 20

	// confirmMarker is the line the model emits before its trailing confirmation question so it
	// can be split off and sent as a separate message.
	confirmMarker = "[[confirm]]"

	// typingRefreshInterval must stay under the widget's 5s typing expiry (TYPING_RECEIVE_TIMEOUT).
	typingRefreshInterval = 3 * time.Second

	// Run clock: caps one full agent run - every completion call, retry, and tool call
	// combined. The per-call 60s clock (ai.overallRequestTimeout) nests inside it.
	emailRunTimeout    = 3 * time.Minute
	livechatRunTimeout = 90 * time.Second
)

// nonActionableCategories are status categories the assistant skips; it replies only to open
// conversations, never waiting (e.g. snoozed) or resolved ones. Keyed by category, not status name,
// so admin-defined custom statuses are covered too.
var nonActionableCategories = map[string]bool{
	statusmodels.CategoryWaiting:  true,
	statusmodels.CategoryResolved: true,
}

// Run starts the response worker pool.
func (m *Manager) Run(ctx context.Context, workers int) {
	if workers <= 0 {
		workers = 1
	}
	for range workers {
		m.wg.Add(1)
		go func() {
			defer m.wg.Done()
			m.worker(ctx)
		}()
	}
	miners := min(workers, 2)
	for range miners {
		m.wg.Add(1)
		go func() {
			defer m.wg.Done()
			m.miningWorker(ctx)
		}()
	}
}

// Close signals the manager to stop processing and waits for all workers to finish.
func (m *Manager) Close() {
	m.closedMu.Lock()
	if m.closed {
		m.closedMu.Unlock()
		return
	}
	m.closed = true
	close(m.queue)
	close(m.miningQueue)
	m.closedMu.Unlock()
	m.wg.Wait()
}

// worker drains the queue until Close shuts it; a job dropped at shutdown strands the customer with neither a reply nor a handoff.
func (m *Manager) worker(ctx context.Context) {
	for convID := range m.queue {
		if ctx.Err() != nil {
			m.handoffByConvID(convID, m.i18n.T("ai.agent.handoffError"))
		} else {
			m.handleWithRecover(ctx, convID)
		}
		m.markDone(convID)
	}
}

// handleWithRecover runs handle and recovers from panics so a single bad run (LLM chain or tool
// execution) can't crash the whole process and take down every channel.
func (m *Manager) handleWithRecover(ctx context.Context, convID int) {
	defer func() {
		if r := recover(); r != nil {
			m.lo.Error("recovered from panic in ai agent worker", "conversation_id", convID, "panic", r)
		}
	}()
	m.handle(ctx, convID)
}

// HandleConversationEvent enqueues a response when the assignee is an AI assistant.
func (m *Manager) HandleConversationEvent(conversationID, assigneeUserID int) {
	if conversationID == 0 || assigneeUserID == 0 {
		return
	}
	if !m.isAssistantUser(assigneeUserID) {
		return
	}
	m.enqueue(conversationID)
}

func (m *Manager) enqueue(convID int) {
	m.closedMu.RLock()
	defer m.closedMu.RUnlock()
	if m.closed {
		return
	}
	m.mu.Lock()
	if m.inflight[convID] {
		// A response is already running; remember to run again so a message that arrives mid-response
		// still gets answered.
		m.pending[convID] = true
		m.mu.Unlock()
		return
	}
	m.inflight[convID] = true
	m.mu.Unlock()

	select {
	case m.queue <- convID:
	default:
		m.mu.Lock()
		delete(m.inflight, convID)
		delete(m.pending, convID)
		m.mu.Unlock()
		// A dropped job must still land on a human; leaving it assigned to the assistant with no reply
		// strands the customer. wg.Add happens under closedMu.RLock so Close waits for this handoff.
		m.lo.Warn("ai agent queue full, handing off response job", "conversation_id", convID)
		m.wg.Add(1)
		go func() {
			defer m.wg.Done()
			m.handoffByConvID(convID, m.i18n.T("ai.agent.handoffError"))
		}()
	}
}

// handoffByConvID loads a conversation and its assistant, then hands it to a human. Used when a
// response job can't be queued, so an overloaded queue never leaves a customer without a reply.
func (m *Manager) handoffByConvID(convID int, reason string) {
	defer func() {
		if r := recover(); r != nil {
			m.lo.Error("recovered from panic handing off dropped ai job", "conversation_id", convID, "panic", r)
		}
	}()
	conv, err := m.convo.GetConversation(convID, "", "")
	if err != nil {
		m.lo.Error("error loading conversation to hand off dropped ai job", "conversation_id", convID, "error", err)
		return
	}
	if !conv.AssignedUserID.Valid {
		return
	}
	assistant, err := m.GetAssistantByUserID(int(conv.AssignedUserID.Int))
	if err != nil {
		if err != sql.ErrNoRows {
			m.lo.Error("error loading assistant to hand off dropped ai job", "conversation_id", convID, "error", err)
		}
		return
	}
	m.handoff(conv, assistant, reason)
}

func (m *Manager) markDone(convID int) {
	m.mu.Lock()
	requeue := m.pending[convID]
	delete(m.pending, convID)
	delete(m.inflight, convID)
	if !requeue {
		delete(m.lastSeen, convID)
	}
	m.mu.Unlock()
	if requeue {
		m.enqueue(convID)
	}
}

func (m *Manager) handle(ctx context.Context, convID int) {
	conv, err := m.convo.GetConversation(convID, "", "")
	if err != nil {
		m.lo.Error("error fetching conversation for ai agent", "conversation_id", convID, "error", err)
		return
	}
	if !conv.AssignedUserID.Valid {
		return
	}
	assistant, err := m.GetAssistantByUserID(int(conv.AssignedUserID.Int))
	if err != nil {
		if err != sql.ErrNoRows {
			m.lo.Error("error fetching assistant for ai agent", "conversation_id", convID, "user_id", conv.AssignedUserID.Int, "error", err)
		}
		return
	}
	m.lo.Debug("ai agent handling conversation", "conversation_id", convID, "conversation_uuid", conv.UUID, "assistant_id", assistant.ID, "assistant", assistant.Name, "status", conv.Status.String, "enabled", assistant.Enabled)
	if !assistant.Enabled {
		return
	}
	if nonActionableCategories[conv.StatusCategory.String] {
		return
	}

	private := false
	msgs, _, err := m.convo.GetConversationMessages(conv.UUID, 1, m.maxHistoryMessages, &private, []string{cmodels.MessageIncoming, cmodels.MessageOutgoing})
	if err != nil {
		m.lo.Error("error fetching messages for ai agent", "conversation_uuid", conv.UUID, "error", err)
		return
	}
	slices.Reverse(msgs)
	inbound := latestInboundContact(msgs)
	if inbound == nil {
		return
	}
	// Only respond to a fresh inbound customer message, never to the assistant's own or automated
	// replies. A requeued run sees the previous run's just-posted reply as the last message, so it
	// instead checks for an inbound message the previous run's history never included.
	m.mu.Lock()
	prevSeen, hasPrev := m.lastSeen[convID]
	m.lastSeen[convID] = msgs[len(msgs)-1].ID
	m.mu.Unlock()
	if !lastIsInboundContact(msgs) && (!hasPrev || inbound.ID <= prevSeen) {
		return
	}
	// The reply and any identity-scoped tools act as the primary contact. An email thread can carry
	// messages from other participants (CC'd, or joined via plus-address, each a distinct contact), so
	// only act on a turn the primary contact authored - otherwise a participant's message could drive
	// tool actions under the contact's identity. Anyone else gets a human.
	if inbound.SenderID != conv.ContactID {
		m.handoff(conv, assistant, m.i18n.T("ai.agent.handoffOtherParticipant"))
		return
	}
	// Turn cap is per engagement (since the assistant was last assigned), so a human reassigning a
	// capped conversation to the assistant gives it a fresh budget instead of bouncing straight back.
	var turns int
	if err := m.q.CountAITurns.Get(&turns, conv.ID, assistant.UserID); err != nil {
		m.lo.Error("error counting ai turns", "conversation_id", conv.ID, "error", err)
		m.handoff(conv, assistant, m.i18n.T("ai.agent.handoffError"))
		return
	}
	if turns >= assistant.MaxTurns {
		m.handoff(conv, assistant, m.i18n.T("ai.agent.handoffMaxTurns"))
		return
	}

	contactLines := contactFieldLines(conv.Contact)
	systemPrompt := buildSystemPrompt(assistant)
	if len(contactLines) == 0 {
		systemPrompt += "\n\n" + noContactIdentityNote
	}
	history := m.buildHistory(msgs, conv.ContactID)
	// Keep customer-controlled data (contact fields, subject, attributes) out of the system prompt; it
	// stays in a user-role block so it ranks below the assistant's instructions, not beside them.
	if block := customerContextBlock(conv, contactLines); block != "" {
		history = append([]aimodels.ChatMessage{{Role: aimodels.RoleUser, Content: block}}, history...)
	}
	m.lo.Debug("ai agent running", "conversation_uuid", conv.UUID, "history_messages", len(history), "turns", turns)

	// A JWT livechat contact is trusted by login; everyone else (email channel, anonymous visitor)
	// is trusted only within an OTP verification window. Read live so mid-turn verification counts.
	verified := func() bool {
		if conv.InboxChannel != channelEmail && conv.Contact.Type == umodels.UserTypeContact {
			return true
		}
		return m.isConversationVerified(conv.UUID, conv.Contact.Email.String)
	}
	// Snapshot for the run-start registration decisions (one Redis read); tctx still gets the live
	// closure so mid-turn verification is picked up per tool call.
	runVerified := verified()
	m.lo.Debug("ai agent verification state", "conversation_uuid", conv.UUID, "channel", conv.InboxChannel, "contact_type", conv.Contact.Type, "has_email", conv.Contact.Email.String != "", "verified", runVerified)

	outcome := &runOutcome{}
	tools := []ai.Tool{
		&searchKnowledgeTool{m: m},
		&resolveTool{m: m, conv: conv, outcome: outcome},
	}
	if assistant.HandoffEnabled {
		tools = append(tools, &handoffTool{m: m, conv: conv, assistant: assistant, outcome: outcome})
	}
	if recent := m.recentContactConversations(conv, runVerified); len(recent) > 0 {
		systemPrompt += fmt.Sprintf("\n\nThis customer has %d other conversation(s) from the last %d days. Call get_previous_conversations if the current issue might be a follow-up or related to them.", len(recent), recentConversationDays)
		tools = append(tools, &previousConversationsTool{m: m, conversations: recent})
	}

	// Register the verification tools whenever verification is OTP-based, even if the run starts
	// verified: the 30-min window can expire mid-run and a blocked tool then points the model at
	// them. set_contact_email is visitor-only, so a self-claimed email can be corrected in chat; a
	// known contact's email is never swappable this way.
	needsVerification := m.assistantHasVerifiedTool(assistant)
	if needsVerification && (conv.InboxChannel == channelEmail || conv.Contact.Type != umodels.UserTypeContact) {
		offerSetEmail := conv.Contact.Type == umodels.UserTypeVisitor
		tools = append(tools, &sendEmailVerificationTool{m: m, conv: &conv})
		tools = append(tools, &checkEmailVerificationTool{m: m, conv: &conv})
		if offerSetEmail {
			tools = append(tools, &setContactEmailTool{m: m, conv: &conv})
		}
		m.lo.Debug("ai agent offering verification tools", "conversation_uuid", conv.UUID, "set_contact_email_offered", offerSetEmail)
	}
	if needsVerification && !runVerified {
		systemPrompt += "\n\n" + verificationNote
	}

	tctx := ai.ToolContext{
		ContactID:         conv.Contact.ID,
		ContactExternalID: conv.Contact.ExternalUserID.String,
		ContactType:       conv.Contact.Type,
		ConversationUUID:  conv.UUID,
		InboxID:           conv.InboxID,
		ContactEmail:      func() string { return conv.Contact.Email.String },
		Verified:          verified,
	}
	timeout := emailRunTimeout
	if conv.InboxChannel != channelEmail {
		timeout = livechatRunTimeout
	}
	runCtx, cancel := context.WithTimeout(ctx, timeout)
	defer cancel()
	stopTyping := m.keepTyping(conv.UUID)
	answer, err := m.ai.RunAgentWithTools(runCtx, systemPrompt, history, m.maxSteps, tctx, assistant.ToolIDs, false, false, tools)
	stopTyping()
	// A human agent may have taken over or resolved the conversation mid-run; if so, drop this
	// run's reply and status actions instead of talking over them.
	if fresh, ferr := m.convo.GetConversation(convID, "", ""); ferr == nil {
		if !fresh.AssignedUserID.Valid || int(fresh.AssignedUserID.Int) != assistant.UserID || nonActionableCategories[fresh.StatusCategory.String] {
			m.lo.Debug("ai agent conversation changed mid-run, dropping reply", "conversation_uuid", conv.UUID)
			return
		}
	}
	if err != nil {
		m.lo.Error("error running ai agent", "conversation_uuid", conv.UUID, "error", err)
		if !outcome.handedOff {
			m.handoff(conv, assistant, m.i18n.T("ai.agent.handoffError"))
		}
		return
	}
	// The assistant escalated; the handoff tool already reassigned and noted it.
	if outcome.handedOff {
		m.lo.Debug("ai agent handed off", "conversation_uuid", conv.UUID)
		return
	}
	// The model's text answer is the reply to the customer. Handoff and resolve are separate tool actions.
	answer, confirm := splitConfirmation(strings.TrimSpace(answer))
	// Email gets one message; separate chat-style bubbles only suit the widget.
	if conv.InboxChannel == channelEmail && confirm != "" {
		answer, confirm = answer+"\n\n"+confirm, ""
	}
	if answer != "" {
		m.lo.Debug("ai agent replying", "conversation_uuid", conv.UUID, "reply_len", len(answer), "resolved", outcome.resolved)
		if err := m.postReply(conv, assistant, answer, nil); err != nil {
			m.handoff(conv, assistant, m.i18n.T("ai.agent.handoffError"))
			return
		}
	}
	if confirm != "" {
		if err := m.postReply(conv, assistant, confirm, map[string]any{"is_confirmation": true}); err != nil {
			m.handoff(conv, assistant, m.i18n.T("ai.agent.handoffError"))
			return
		}
	}
	if outcome.resolved && (answer != "" || turns > 0) {
		m.resolve(conv, assistant)
		return
	}
	if answer == "" {
		m.lo.Debug("ai agent no answer, handing off", "conversation_uuid", conv.UUID)
		m.handoff(conv, assistant, m.i18n.T("ai.agent.handoffNoAnswer"))
	}
}

// resolve runs after the reply is queued so the CSAT survey sent on resolve follows the answer.
func (m *Manager) resolve(conv cmodels.Conversation, assistant models.Assistant) {
	if err := m.convo.UpdateConversationStatus(conv.UUID, 0, cmodels.StatusResolved, "", m.actorUser(assistant)); err != nil {
		m.lo.Error("error resolving conversation", "conversation_uuid", conv.UUID, "error", err)
		return
	}
	m.recordEvent(assistant.ID, conv.ID, "resolve")
}

// keepTyping re-broadcasts typing until the returned stop func runs; the widget clears the indicator 5s after the last event.
func (m *Manager) keepTyping(conversationUUID string) func() {
	m.convo.BroadcastTypingToWidgetClientsOnly(conversationUUID, true)
	stop := make(chan struct{})
	go func() {
		t := time.NewTicker(typingRefreshInterval)
		defer t.Stop()
		for {
			select {
			case <-stop:
				return
			case <-t.C:
				m.convo.BroadcastTypingToWidgetClientsOnly(conversationUUID, true)
			}
		}
	}()
	return func() {
		close(stop)
		m.convo.BroadcastTypingToWidgetClientsOnly(conversationUUID, false)
	}
}

func (m *Manager) postReply(conv cmodels.Conversation, assistant models.Assistant, text string, meta map[string]any) error {
	var to []string
	if conv.InboxChannel == channelEmail && conv.Contact.Email.String != "" {
		to = []string{conv.Contact.Email.String}
	}
	if meta == nil {
		meta = map[string]any{}
	}
	meta["ai_assistant_id"] = assistant.ID
	if _, err := m.convo.QueueReply(nil, conv.InboxID, assistant.UserID, conv.ContactID, conv.UUID, stringutil.Markdown2HTML(text), to, nil, nil, meta); err != nil {
		m.lo.Error("error sending assistant reply", "conversation_uuid", conv.UUID, "error", err)
		return err
	}
	return nil
}

// handoff notes the reason and moves the conversation to the fallback team, or unassigns if none is set.
func (m *Manager) handoff(conv cmodels.Conversation, assistant models.Assistant, reason string) {
	actor := m.actorUser(assistant)
	note := strings.TrimSpace(reason)
	if note == "" {
		note = m.i18n.T("ai.agent.handoffDefault")
	}
	if _, err := m.convo.SendPrivateNote(nil, assistant.UserID, conv.UUID, note, nil); err != nil {
		m.lo.Error("error posting handoff note", "conversation_uuid", conv.UUID, "error", err)
	}
	movedToTeam := false
	if assistant.FallbackTeamID.Valid {
		if err := m.convo.UpdateConversationTeamAssignee(conv.UUID, int(assistant.FallbackTeamID.Int), actor); err != nil {
			m.lo.Error("error assigning fallback team", "conversation_uuid", conv.UUID, "error", err)
		} else {
			movedToTeam = true
		}
		// A same-team assignment keeps the assigned user, and a failed one removes nothing, so
		// re-check who is assigned instead of trusting the pre-run snapshot.
		fresh, err := m.convo.GetConversation(conv.ID, "", "")
		if err == nil && (!fresh.AssignedUserID.Valid || int(fresh.AssignedUserID.Int) != assistant.UserID) {
			m.recordEvent(assistant.ID, conv.ID, "handoff")
			return
		}
	}
	if err := m.convo.RemoveConversationAssignee(conv.UUID, cmodels.AssigneeTypeUser, actor); err != nil {
		m.lo.Error("error unassigning assistant on handoff", "conversation_uuid", conv.UUID, "error", err)
		if !movedToTeam {
			return
		}
	}
	m.recordEvent(assistant.ID, conv.ID, "handoff")
}

func (m *Manager) actorUser(a models.Assistant) umodels.User {
	return umodels.User{ID: a.UserID, FirstName: a.Name, Type: umodels.UserTypeAIAssistant}
}

// PreviewReply runs the assistant against a test message with no side effects and returns the reply and the knowledge base items it was grounded in.
func (m *Manager) PreviewReply(ctx context.Context, assistantID int, message string) (string, []models.PreviewSource, error) {
	a, err := m.GetAssistant(assistantID)
	if err != nil {
		return "", nil, err
	}
	message = strings.TrimSpace(message)
	if message == "" {
		return "", nil, nil
	}
	history := []aimodels.ChatMessage{{Role: aimodels.RoleUser, Content: message}}
	var hits []aimodels.SearchResult
	tools := []ai.Tool{&searchKnowledgeTool{m: m, collect: func(rs []aimodels.SearchResult) { hits = append(hits, rs...) }}}
	runCtx, cancel := context.WithTimeout(ctx, livechatRunTimeout)
	defer cancel()
	// Preview is search-only: no custom tools (empty allowed set), no built-in, no side effects.
	answer, err := m.ai.RunAgentWithTools(runCtx, buildSystemPrompt(a), history, m.maxSteps, ai.ToolContext{}, []int{}, false, false, tools)
	if err != nil {
		return "", nil, err
	}
	main, confirm := splitConfirmation(strings.TrimSpace(answer))
	if confirm != "" {
		main += "\n\n" + confirm
	}
	return main, m.previewSources(hits), nil
}

// previewSources dedupes search hits by source, keeping each one's best score. Snippets and help
// articles number their rows independently, so the type is part of a hit's identity.
func (m *Manager) previewSources(hits []aimodels.SearchResult) []models.PreviewSource {
	type sourceKey struct {
		sourceType string
		id         int
	}
	sources := []models.PreviewSource{}
	best := map[sourceKey]int{}
	for _, h := range hits {
		key := sourceKey{h.SourceType, h.SourceID}
		if idx, ok := best[key]; ok {
			sources[idx].Score = max(sources[idx].Score, h.Score)
			continue
		}
		title, err := m.sourceTitle(h.SourceType, h.SourceID)
		if err != nil {
			continue
		}
		best[key] = len(sources)
		sources = append(sources, models.PreviewSource{ID: h.SourceID, Type: h.SourceType, Title: title, Score: h.Score})
	}
	return sources
}

func (m *Manager) sourceTitle(sourceType string, id int) (string, error) {
	switch sourceType {
	case aimodels.SourceHelpArticle:
		return m.ai.GetHelpArticleTitle(id)
	case aimodels.SourceSnippet:
		item, err := m.ai.GetKnowledgeBaseItem(id)
		if err != nil {
			return "", err
		}
		return item.Title, nil
	}
	return "", fmt.Errorf("unknown embedding source type %q", sourceType)
}

func lastIsInboundContact(msgs []cmodels.Message) bool {
	if len(msgs) == 0 {
		return false
	}
	last := msgs[len(msgs)-1]
	return last.Type == cmodels.MessageIncoming && last.SenderType == cmodels.SenderTypeContact
}

func latestInboundContact(msgs []cmodels.Message) *cmodels.Message {
	for i := len(msgs) - 1; i >= 0; i-- {
		if msgs[i].Type == cmodels.MessageIncoming && msgs[i].SenderType == cmodels.SenderTypeContact {
			return &msgs[i]
		}
	}
	return nil
}

func (m *Manager) buildHistory(msgs []cmodels.Message, contactID int) []aimodels.ChatMessage {
	// Tools act as the primary contact, so a CC'd participant's message must never enter the prompt
	// as a trusted user turn - it could inject instructions that drive those tools under the
	// contact's identity. Keep the contact's own messages and the agent's replies; drop other contacts.
	kept := make([]cmodels.Message, 0, len(msgs))
	for _, msg := range msgs {
		if msg.SenderType == cmodels.SenderTypeContact && msg.SenderID != contactID {
			continue
		}
		if msg.IsContinuityMessage() || msg.HasCSAT() {
			continue
		}
		kept = append(kept, msg)
	}
	msgs = kept
	vision := m.ai.VisionEnabled()
	m.lo.Debug("ai agent building history", "messages", len(msgs), "vision", vision)
	// Spend the image budget newest-first so the message being answered never loses its
	// attachments to older ones.
	allowedImages := map[string]bool{}
	if vision {
		imagesLeft := maxImagesTotal
		for i := len(msgs) - 1; i >= 0 && imagesLeft > 0; i-- {
			if msgs[i].SenderType != cmodels.SenderTypeContact {
				continue
			}
			perMsg := 0
			for _, att := range msgs[i].Attachments {
				if imagesLeft <= 0 || perMsg >= maxImagesPerMessage {
					break
				}
				if !strings.HasPrefix(att.ContentType, "image/") || att.Size > maxImageBytes {
					continue
				}
				allowedImages[att.UUID] = true
				perMsg++
				imagesLeft--
			}
		}
	}
	history := make([]aimodels.ChatMessage, 0, len(msgs))
	for _, msg := range msgs {
		role := aimodels.RoleAssistant
		if msg.SenderType == cmodels.SenderTypeContact {
			role = aimodels.RoleUser
		}
		text := m.messageText(msg)

		var images []aimodels.ChatImage
		var markers []string
		// Only the customer's own attachments are worth showing the assistant.
		if role == aimodels.RoleUser {
			for _, att := range msg.Attachments {
				if !strings.HasPrefix(att.ContentType, "image/") {
					m.lo.Debug("ai agent attachment not an image", "uuid", att.UUID, "content_type", att.ContentType)
					markers = append(markers, unreadableFileMarker(att))
					continue
				}
				if !allowedImages[att.UUID] {
					m.lo.Debug("ai agent image not sent", "uuid", att.UUID, "size", att.Size, "vision", vision)
					markers = append(markers, unreadableImageMarker(att))
					continue
				}
				img, ok := m.encodeAttachmentImage(att)
				if !ok {
					markers = append(markers, unreadableImageMarker(att))
					continue
				}
				m.lo.Debug("ai agent attached image", "uuid", att.UUID, "content_type", att.ContentType, "size", att.Size)
				images = append(images, img)
			}
		}

		if text == "" && len(images) == 0 && len(markers) == 0 {
			continue
		}
		if len(markers) > 0 {
			if text != "" {
				text += "\n"
			}
			text += strings.Join(markers, "\n")
		}
		history = append(history, aimodels.ChatMessage{Role: role, Content: text, Images: images})
	}
	return history
}

// recentContactConversations lists the contact's other recent conversations, only once verified so
// past-conversation PII never reaches an unverified/self-claimed identity.
func (m *Manager) recentContactConversations(conv cmodels.Conversation, verified bool) []models.RecentConversation {
	if !verified {
		return nil
	}
	recent := []models.RecentConversation{}
	if err := m.q.GetRecentContactConvos.Select(&recent, conv.ContactID, conv.ID, recentConversationDays, maxRecentConversations); err != nil {
		m.lo.Error("error fetching recent contact conversations for ai agent", "conversation_uuid", conv.UUID, "error", err)
		return nil
	}
	return recent
}

// assistantHasVerifiedTool reports whether any tool attached to the assistant is verification-gated;
// it fails open so a lookup error keeps the verification flow available.
func (m *Manager) assistantHasVerifiedTool(a models.Assistant) bool {
	if len(a.ToolIDs) == 0 {
		return false
	}
	tools, err := m.ai.GetEnabledToolsByIDs(a.ToolIDs)
	if err != nil {
		m.lo.Error("error fetching assistant tools for verification check", "assistant_id", a.ID, "error", err)
		return true
	}
	for _, t := range tools {
		if t.RequiresVerification {
			return true
		}
	}
	return false
}

func (m *Manager) encodeAttachmentImage(att attachment.Attachment) (aimodels.ChatImage, bool) {
	blob, err := m.media.GetBlob(att.UUID)
	if err != nil {
		m.lo.Error("error reading attachment for ai agent", "uuid", att.UUID, "error", err)
		return aimodels.ChatImage{}, false
	}
	data, mediaType, err := imageutil.EncodeForLLM(blob)
	if err != nil {
		m.lo.Warn("could not encode attachment image for ai agent", "uuid", att.UUID, "error", err)
		return aimodels.ChatImage{}, false
	}
	m.lo.Debug("ai agent encoded image", "uuid", att.UUID, "raw_bytes", len(blob), "encoded_b64", len(data))
	return aimodels.ChatImage{MediaType: mediaType, Data: data}, true
}

func unreadableFileMarker(att attachment.Attachment) string {
	return fmt.Sprintf("[The customer attached a file %q (%s) that cannot be read here. Ask them to share the relevant details as text if it matters.]", att.Name, att.ContentType)
}

func unreadableImageMarker(att attachment.Attachment) string {
	return fmt.Sprintf("[The customer attached an image %q that you cannot view. Ask them to describe it if it matters.]", att.Name)
}

// messageText returns the message text with quoted reply chains stripped, falling back to the full text when stripping leaves nothing (a quote-only reply or forward).
func (m *Manager) messageText(msg cmodels.Message) string {
	full := strings.TrimSpace(msg.TextContent)
	var trimmed string
	if msg.ContentType == cmodels.ContentTypeHTML {
		// Render full with the same link-keeping options as trimmed, else the prefix diffing below never matches.
		if t := stringutil.HTML2TextMarkdownLinks(msg.Content); t != "" {
			full = t
		}
		trimmed = stringutil.HTML2TextNoQuotes(msg.Content)
	} else {
		trimmed = stringutil.TrimPlainTextQuotes(full)
	}
	if trimmed == "" {
		if full != "" {
			m.lo.Debug("ai agent message was quote-only, keeping full text", "message_uuid", msg.UUID, "full_len", len(full))
		}
		return full
	}
	if trimmed != full {
		removed := full
		if rest, ok := strings.CutPrefix(full, trimmed); ok {
			removed = strings.TrimSpace(rest)
		}
		m.lo.Debug("ai agent stripped quoted text", "message_uuid", msg.UUID, "kept_len", len(trimmed), "full_len", len(full), "removed", removed)
	}
	return trimmed
}

func splitConfirmation(answer string) (string, string) {
	idx := strings.LastIndex(answer, confirmMarker)
	if idx == -1 {
		return answer, ""
	}
	main := strings.TrimSpace(strings.ReplaceAll(answer[:idx], confirmMarker, ""))
	confirm := strings.TrimSpace(answer[idx+len(confirmMarker):])
	if main == "" {
		return confirm, ""
	}
	return main, confirm
}