feat(ai-tools): add get_quote / list_quotes read tools + reject empty update patch (#2361)

[ToddHebebrand]

Summary

Stacked on #2370 (base branch = fix/2362-manage-quotes-validation) so the diff shows only the #2361 work. Merge #2370 first, then retarget/merge this one.

manage_quotes exposed the full quote write surface (header, blocks, lines, deposits, send/decline/pay-link) with no read tools — inconsistent with siblings (invoices: list_invoices/get_invoice; contracts: list_contracts/get_contract). The model could not discover a quote or see its blocks/lines, and the only "read" workaround was {action:"update", patch:{}} — a write used as a read that bumped updatedAt.

Changes

• list_quotes — org/status filters, newest first, copying the list_contracts pattern. Filters are validated with the shared listQuotesQuerySchema (the same schema the GET /quotes route uses), so a bad filter returns a structured VALIDATION_ERROR. Returns { quotes, showing }.
• get_quote — full view: header (with derived dueOnAcceptanceTotal/depositDueTotal/categoryBreakdown), blocks, and lines, reusing the existing getQuote service the web UI reads. No new SQL.
• Sibling-list registration (the parity contract test enforces all of these):
  • tool registry: registerQuoteTools (aiToolsQuotes.ts), tier 2 / deviceArgs: [] like get_contract;
  • toolInputSchemas (aiToolSchemas.ts);
  • TOOL_PERMISSIONS (aiGuardrails.ts) → quotes:read.
  • TOOL_TIERS (aiAgentSdkTools.ts) is deliberately not touched: the billing-domain siblings (list_contracts, get_contract, get_invoice, list_invoices, manage_quotes itself) are all absent from it — that map only curates the in-app SDK agent's offered toolset; the MCP server path reads the registry tier directly.
• Empty-patch update: {action:"update", patch:{}} now returns {"error":"patch is empty — nothing to update. Use get_quote to read a quote.","code":"VALIDATION_ERROR"} before any UPDATE runs, so a no-op can no longer dirty updatedAt. I chose the reject-with-VALIDATION_ERROR option (over silent short-circuit) because the empty patch was only ever used as a read workaround — rejecting steers the model to the new get_quote, and a silent success would hide caller bugs.

Tests

• aiToolsQuotes.test.ts: list_quotes default limit + filter forwarding + invalid-status VALIDATION_ERROR; get_quote full view + missing quoteId + QUOTE_NOT_FOUND mapping; empty-patch rejection asserting updateQuote is never called.
• Contract sweeps green: aiToolsRegistryParity (schema + RBAC parity for every registered tool), aiTools.deviceArgsCoverage.contract, aiTools.deviceAccessSiteScope.contract, aiGuardrails (97 tests).
• tsc --noEmit --project apps/api/tsconfig.json clean.

Closes #2361

🤖 Generated with Claude Code

[cloudflare-workers-and-pages]

Deploying breeze with    Cloudflare Pages

Latest commit:	ec365cb
Status:	✅  Deploy successful!
Preview URL:	https://e0da2fcf.breeze-9te.pages.dev
Branch Preview URL:	https://feat-2361-quote-read-tools.breeze-9te.pages.dev

View logs

[ToddHebebrand]

Review run: /code-review (high effort, inline finder angles: line-by-line diff scan, removed-behavior audit, cross-file caller trace, reuse/simplification, CLAUDE.md conventions).
Findings: 1 raised → fixed in 3a449f7; 0 outstanding. (Empty-header-patch error message was misleading when the patch contained only unknown/line-level fields, which updateQuoteSchema strips before the check — message now points at update_line as well as get_quote.)
Registration parity verified: registry + toolInputSchemas + TOOL_PERMISSIONS (the aiToolsRegistryParity contract test enforces all three); TOOL_TIERS deliberately untouched to match the billing-domain siblings (list_contracts/get_contract/get_invoice are all absent from it — it only curates the in-app SDK agent's toolset).
Tests: aiToolsQuotes (25), aiToolsRegistryParity, aiTools.deviceArgsCoverage.contract, aiTools.deviceAccessSiteScope.contract (39), aiGuardrails (97) all green; tsc --noEmit --project apps/api/tsconfig.json clean.
Status: review-clean, awaiting maintainer merge. Stacked on #2370 (base = fix/2362-manage-quotes-validation) — merge #2370 first, then retarget this PR to main.