refactor(services): migrate builtin_tools_manage_service to SQLAlchemy 2.0 select() API

[wdeveloper16]

part of #22668

Files:

• api/services/tools/builtin_tools_manage_service.py

Description:
Migrates 16 occurrences of legacy session.query() in the builtin tool provider
management service. Notable changes:

• Bulk is_default clear via session.execute(update(...).values(is_default=False).execution_options(synchronize_session=False))
• Boolean column filter: BuiltinToolProvider.is_default == True → .is_(True)
• Count check: session.query(...).count() → session.scalar(select(func.count(...)))
• Added delete, func, update to SQLAlchemy imports

[github-actions]

Pyrefly Diff

No changes detected.

[github-actions]

Pyrefly Diff

No changes detected.

[github-actions]

Pyrefly Diff

No changes detected.

[Copilot]

Pull request overview

Migrates BuiltinToolManageService database access from legacy session.query() usage to SQLAlchemy 2.0 select() / session.scalar(s) APIs to improve typing and align with modern ORM patterns.

Changes:

• Replaced session.query(...).first()/count()/update()/delete() patterns with select(), session.scalar(s), session.execute(update/delete(...)), and func.count(...).
• Updated boolean filtering to use .is_(True) and introduced bulk update with synchronize_session=False.
• Adjusted unit tests to mock session.scalar() / session.execute() instead of session.query() chains.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
api/services/tools/builtin_tools_manage_service.py	Refactors ORM queries/updates/deletes to SQLAlchemy 2.0 select() style throughout the builtin tools management service.
api/tests/unit_tests/services/tools/test_builtin_tools_manage_service.py	Updates unit tests’ session mocks to match the new scalar() / execute()-based data access patterns.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

In this test, ToolOAuthTenantClient.oauth_params is a property that returns a dict parsed from encrypted_oauth_params (see api/models/tools.py), but the mock sets oauth_params to a JSON string. This makes the test less representative and could hide type/usage issues. Consider setting oauth_params to a dict (or mocking encrypted_oauth_params and oauth_params consistently with the model).

Suggested change

	user_client = MagicMock(oauth_params='{"encrypted": "data"}')
	user_client = MagicMock(oauth_params={"encrypted": "data"})