feat(utilization-category): scope reads to planning audience

packages/api/src/router/assistant.ts

@@ -230,6 +230,7 @@ const PLANNING_READ_TOOLS = new Set([
   "list_demands",
   "list_clients",
   "list_roles",
+  "list_utilization_categories",
   "check_resource_availability",
   "get_staffing_suggestions",
   "find_capacity",

packages/api/src/router/utilization-category.ts

@@ -6,10 +6,10 @@ import { TRPCError } from "@trpc/server";
 import { z } from "zod";
 import { findUniqueOrThrow } from "../db/helpers.js";
 import { createAuditEntry } from "../lib/audit.js";
-import { adminProcedure, createTRPCRouter, protectedProcedure } from "../trpc.js";
+import { adminProcedure, createTRPCRouter, planningReadProcedure } from "../trpc.js";
 
 export const utilizationCategoryRouter = createTRPCRouter({
-  list: protectedProcedure
+  list: planningReadProcedure
     .input(z.object({ isActive: z.boolean().optional() }).optional())
     .query(async ({ ctx, input }) => {
       return ctx.db.utilizationCategory.findMany({
@@ -20,7 +20,7 @@ export const utilizationCategoryRouter = createTRPCRouter({
       });
     }),
 
-  getById: protectedProcedure
+  getById: planningReadProcedure
     .input(z.object({ id: z.string() }))
     .query(async ({ ctx, input }) => {
       const cat = await findUniqueOrThrow(