feat(planning): ship holiday-aware planning and assistant upgrades

packages/api/src/__tests__/assistant-router.test.ts

@@ -0,0 +1,34 @@
+import { describe, expect, it } from "vitest";
+import { PermissionKey, type PermissionKey as PermissionKeyValue } from "@capakraken/shared";
+import { getAvailableAssistantTools } from "../router/assistant.js";
+
+function getToolNames(permissions: PermissionKeyValue[]) {
+  return getAvailableAssistantTools(new Set(permissions)).map((tool) => tool.function.name);
+}
+
+describe("assistant router tool gating", () => {
+  it("hides advanced tools unless the dedicated assistant permission is granted", () => {
+    const withoutAdvanced = getToolNames([PermissionKey.VIEW_COSTS]);
+    const withAdvanced = getToolNames([
+      PermissionKey.VIEW_COSTS,
+      PermissionKey.USE_ASSISTANT_ADVANCED_TOOLS,
+    ]);
+
+    expect(withoutAdvanced).not.toContain("find_best_project_resource");
+    expect(withAdvanced).toContain("find_best_project_resource");
+  });
+
+  it("keeps user administration tools behind manageUsers", () => {
+    const withoutManageUsers = getToolNames([]);
+    const withManageUsers = getToolNames([PermissionKey.MANAGE_USERS]);
+
+    expect(withoutManageUsers).not.toContain("list_users");
+    expect(withManageUsers).toContain("list_users");
+  });
+
+  it("continues to hide cost-aware advanced tools when viewCosts is missing", () => {
+    const names = getToolNames([PermissionKey.USE_ASSISTANT_ADVANCED_TOOLS]);
+
+    expect(names).not.toContain("find_best_project_resource");
+  });
+});