feat(ai): services partages A2 + SSE streaming B4 + confirmations UI B5 (#79)

backend/tools/registry.py

@@ -18,6 +18,7 @@ from typing import Any
 
 from pydantic import BaseModel, ValidationError
 
+from backend.services.errors import ServiceError
 from backend.tools.audit import log_tool_call
 from backend.tools.context import (
     ToolConfirmationRequired,
@@ -136,6 +137,17 @@ def _audit(ctx: ToolContext, spec: ToolSpec, arguments: dict[str, Any], *, ok: b
         logger.debug(f"Tool audit failed for '{spec.name}': {e}")
 
 
+def _map_service_error(e: ServiceError) -> ToolError:
+    """Map a shared-layer :class:`ServiceError` to a tool domain error."""
+    if e.code == "not_found":
+        return ToolNotFoundError(e.message, details=e.details)
+    if e.code in ("permission_denied", "path_outside_vault", "vault_access_denied"):
+        return ToolPermissionError(e.message, code=e.code, details=e.details)
+    if e.code == "invalid_arguments":
+        return ToolValidationError(e.message, details=e.details)
+    return ToolError(e.message, code=e.code, details=e.details)
+
+
 def call_tool(
     name: str,
     ctx: ToolContext,
@@ -191,6 +203,10 @@ def call_tool(
     except ToolError as e:
         _audit(ctx, spec, arguments, ok=False, error=e.code)
         raise
+    except ServiceError as e:
+        mapped = _map_service_error(e)
+        _audit(ctx, spec, arguments, ok=False, error=mapped.code)
+        raise mapped from e
     except Exception as e:
         logger.error(f"Tool '{name}' failed: {e}")
         exec_error = ToolError(f"Tool '{name}' failed: {e}", code="tool_execution_error")