fix(voice): create ElevenLabs tools before agent setup

[Shujakuinkuraudo]

Summary

• replace deprecated ElevenLabs prompt.tools usage with prompt.tool_ids
• auto-create or reuse the required client tools before creating/updating the Hapi voice agent
• keep the shared web helper aligned with the new ElevenLabs tool-based agent setup

Testing

• verified createOrUpdateHapiAgent() succeeds with an ElevenLabs key that has ConvAI write access
• verified the resulting ElevenLabs agent includes messageCodingAgent and processPermissionRequest
• built the Linux x64 single-executable binary successfully via bun run build:single-exe

[github-actions]

Findings

• [Major] Auto-discovery now hard-fails without ConvAI write scope — getOrCreateAgentId() now treats tool creation and agent patching as mandatory before it will return an existing agent ID, so installations that rely on ELEVENLABS_API_KEY only can start returning Failed to create ElevenLabs agent automatically even when the agent already exists and token minting would otherwise be possible. Evidence hub/src/web/routes/voice.ts:203, hub/src/web/routes/voice.ts:217.

Summary

• Review mode: initial
• 1 finding. The new auto-provisioning path turns token issuance into a write operation for existing agents, which is a regression for accounts without ConvAI write permission.
• Residual risk: Not found in repo/docs: automated coverage for the write-denied / existing-agent path.

Testing

• Not run (automation; untrusted PR code)

HAPI Bot