@aphexcms/cms-core 9.5.2 → 9.7.0

package/dist/db/interfaces/events.js

@@ -0,0 +1 @@
+export {};

package/dist/db/interfaces/index.d.ts

@@ -7,6 +7,8 @@ import type { InstanceAdapter } from './instance.js';
 import type { RolesAdapter } from './role.js';
 import type { ReferenceAdapter } from './reference.js';
 import type { PluginSettingsAdapter } from './plugin-settings.js';
+import type { EventJobAdapter } from './events.js';
+import type { PluginStorageAdapter } from './plugin-storage.js';
 export type { DocumentAdapter, DocumentFilters, CreateDocumentData, UpdateDocumentData } from './document.js';
 export type { AssetAdapter, CreateAssetData, UpdateAssetData } from './asset.js';
 export type { UserProfileAdapter, NewUserProfileData } from './user.js';
@@ -16,11 +18,13 @@ export type { InstanceAdapter, InstanceSettings } from './instance.js';
 export type { RolesAdapter } from './role.js';
 export type { ReferenceAdapter, BackReferenceRow, BackReferenceLookup } from './reference.js';
 export type { PluginSettingsAdapter, PluginSettingsRow } from './plugin-settings.js';
+export type { EventJobAdapter } from './events.js';
+export type { PluginStorageAdapter, PluginStorageRecord, CreatePluginRecordInput, ListPluginRecordsOptions } from './plugin-storage.js';
 /**
  * Combined database adapter interface
  * Extends all entity-specific adapters for full database functionality
  */
-export interface DatabaseAdapter extends DocumentAdapter, AssetAdapter, UserProfileAdapter, SchemaAdapter, OrganizationAdapter, InstanceAdapter, RolesAdapter, ReferenceAdapter, PluginSettingsAdapter {
+export interface DatabaseAdapter extends DocumentAdapter, AssetAdapter, UserProfileAdapter, SchemaAdapter, OrganizationAdapter, InstanceAdapter, RolesAdapter, ReferenceAdapter, PluginSettingsAdapter, EventJobAdapter, PluginStorageAdapter {
     connect?(): Promise<void>;
     disconnect?(): Promise<void>;
     isHealthy(): Promise<boolean>;
@@ -46,8 +50,12 @@ export interface DatabaseAdapter extends DocumentAdapter, AssetAdapter, UserProf
      * Execute multiple adapter operations in a single atomic transaction.
      * The callback receives a transactional version of the adapter — all operations
      * within it share the same DB transaction and commit/rollback together.
+     *
+     * Required: every first-party adapter implements this. It is the outbox seam —
+     * emitting a domain event (`appendEvent`) alongside a state change in one callback
+     * is what makes event emission atomic with the write that caused it.
      */
-    withTransaction?<T>(fn: (adapter: DatabaseAdapter) => Promise<T>): Promise<T>;
+    withTransaction<T>(fn: (adapter: DatabaseAdapter) => Promise<T>): Promise<T>;
 }
 /**
  * Database provider factory interface

package/dist/db/interfaces/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/db/interfaces/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAG/D,YAAY,EACX,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACpE,YAAY,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC3F,YAAY,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAElF;;;GAGG;AACH,MAAM,WAAW,eAChB,SACC,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,qBAAqB;IAEtB,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,UAAU,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAG7B,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAG9B;;OAEG;IACH,aAAa,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAE1B;;;OAGG;IACH,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAE7E;;OAEG;IACH,qBAAqB,CAAC,oBAAoB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvE;;OAEG;IACH,kBAAkB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAExC;;;;OAIG;IACH,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC9E;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,IAAI,eAAe,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,OAAO,CAAC,EAAE;QACT,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,GAAG,CAAC,EAAE,OAAO,CAAC;QACd,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACnB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,QAAQ,IAAI,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA6B,SAAQ,eAAe;IACpE,gBAAgB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjD,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC7E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/db/interfaces/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAG7D,YAAY,EACX,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACpE,YAAY,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC3F,YAAY,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAClF,YAAY,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAChD,YAAY,EACX,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,EACxB,MAAM,kBAAkB,CAAC;AAE1B;;;GAGG;AACH,MAAM,WAAW,eAChB,SACC,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,oBAAoB;IAErB,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,UAAU,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAG7B,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAG9B;;OAEG;IACH,aAAa,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAE1B;;;OAGG;IACH,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAE7E;;OAEG;IACH,qBAAqB,CAAC,oBAAoB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvE;;OAEG;IACH,kBAAkB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAExC;;;;;;;;OAQG;IACH,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC7E;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,IAAI,eAAe,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,OAAO,CAAC,EAAE;QACT,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,GAAG,CAAC,EAAE,OAAO,CAAC;QACd,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACnB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,QAAQ,IAAI,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA6B,SAAQ,eAAe;IACpE,gBAAgB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjD,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC7E"}

package/dist/db/interfaces/plugin-storage.d.ts

@@ -0,0 +1,39 @@
+import type { Page } from '../../types/events.js';
+/** A stored plugin record — arbitrary JSON data under a `(plugin, collection)` namespace. */
+export interface PluginStorageRecord {
+    id: string;
+    organizationId: string;
+    /** Owning plugin namespace, e.g. `'forms'`. Package-namespace it to avoid collisions. */
+    plugin: string;
+    /** Sub-namespace within the plugin, e.g. a form's id `'contact'`. */
+    collection: string;
+    /** Arbitrary JSON payload the plugin defines. */
+    data: Record<string, unknown>;
+    createdAt: Date;
+}
+/** Input to persist a record. `id` may be supplied so it can match a related event's id. */
+export interface CreatePluginRecordInput {
+    id?: string;
+    organizationId: string;
+    plugin: string;
+    collection: string;
+    data: Record<string, unknown>;
+}
+/** Query for a plugin's records (newest first). */
+export interface ListPluginRecordsOptions {
+    organizationId: string;
+    plugin: string;
+    /** Filter to one collection within the plugin. */
+    collection?: string;
+    limit?: number;
+    offset?: number;
+}
+export interface PluginStorageAdapter {
+    /** Persist a record. Call on the tx handle to commit it atomically with `appendEvent`. */
+    createPluginRecord(input: CreatePluginRecordInput): Promise<PluginStorageRecord>;
+    /** Read one record by id (org-scoped) — e.g. a consumer resolving an event's record id. */
+    getPluginRecord(organizationId: string, id: string): Promise<PluginStorageRecord | null>;
+    /** List a plugin's records (optionally one collection), newest first. */
+    listPluginRecords(options: ListPluginRecordsOptions): Promise<Page<PluginStorageRecord>>;
+}
+//# sourceMappingURL=plugin-storage.d.ts.map

package/dist/db/interfaces/plugin-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-storage.d.ts","sourceRoot":"","sources":["../../../src/lib/db/interfaces/plugin-storage.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE/C,6FAA6F;AAC7F,MAAM,WAAW,mBAAmB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,yFAAyF;IACzF,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,SAAS,EAAE,IAAI,CAAC;CAChB;AAED,4FAA4F;AAC5F,MAAM,WAAW,uBAAuB;IACvC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED,mDAAmD;AACnD,MAAM,WAAW,wBAAwB;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACpC,0FAA0F;IAC1F,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjF,2FAA2F;IAC3F,eAAe,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACzF,yEAAyE;IACzE,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;CACzF"}

package/dist/db/interfaces/plugin-storage.js

@@ -0,0 +1 @@
+export {};

package/dist/events/catalog.d.ts

@@ -0,0 +1,8 @@
+import { z } from 'zod';
+/** Emitted after a document's draft is copied to published, inside the publish transaction. */
+export declare const documentPublished: import("./define-event.js").EventDefinition<"document.published", z.ZodObject<{
+    documentId: z.ZodString;
+    documentType: z.ZodString;
+    publishedHash: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>>;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/events/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/lib/events/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,+FAA+F;AAC/F,eAAO,MAAM,iBAAiB;;;;kBAO7B,CAAC"}

package/dist/events/catalog.js

@@ -0,0 +1,11 @@
+import { z } from 'zod';
+import { defineEvent } from './define-event.js';
+// Built-in event catalog. The payload carries identifiers + intentional metadata only —
+// never secrets or full document copies (the log is not a content mirror). `organizationId`
+// and `createdBy` are columns on the row, so they're not repeated in the payload.
+/** Emitted after a document's draft is copied to published, inside the publish transaction. */
+export const documentPublished = defineEvent('document.published', z.object({
+    documentId: z.string(),
+    documentType: z.string(),
+    publishedHash: z.string().nullable()
+}));

package/dist/events/consumer.d.ts

@@ -0,0 +1,79 @@
+import type { DatabaseAdapter } from '../db/interfaces/index.js';
+import type { EmailAdapter } from '../email/interfaces/email.js';
+import type { Logger } from '../utils/logger.js';
+import type { JobHandler } from '../jobs/types.js';
+/**
+ * The event as a consumer sees it — the immutable fields of the `cms_domain_events` row that
+ * triggered this delivery. `id` is the event's id (stable across retries of the same
+ * delivery), so a consumer can dedupe on it if its side effect isn't naturally idempotent.
+ */
+export interface ConsumedEvent {
+    id: string;
+    type: string;
+    organizationId: string;
+    payload: Record<string, unknown>;
+    correlationId: string | null;
+    causationId: string | null;
+    createdBy: string | null;
+    createdAt: Date;
+}
+/**
+ * Reads a plugin's resolved, **decrypted** per-org settings — bound to the triggering event's
+ * organization, so a consumer can pull its own config (connection details, `secret` fields like
+ * API keys) without threading org ids around. `pluginId` is the settings declaration's id (the
+ * plugin's package name); an author reading their own plugin's settings passes their own id.
+ * The `.get(orgId, pluginId)` on the host's PluginSettingsService satisfies this structurally.
+ */
+export interface PluginSettingsReader {
+    get(organizationId: string, pluginId: string): Promise<Record<string, unknown>>;
+}
+/** The consumer-facing settings accessor — already scoped to the event's org. */
+export interface ConsumerSettingsReader {
+    /** Decrypted settings for `pluginId` in the event's organization ({} if never configured). */
+    get(pluginId: string): Promise<Record<string, unknown>>;
+}
+/** What an event-consumer handler receives. `databaseAdapter` is the live adapter (org-scoped calls take an org id). */
+export interface EventConsumerContext {
+    event: ConsumedEvent;
+    databaseAdapter: DatabaseAdapter;
+    logger: Logger;
+    /** Read this plugin's own decrypted settings for the event's org (e.g. a webhook URL secret). */
+    settings: ConsumerSettingsReader;
+    /**
+     * The configured email adapter, or `null` when the app has no email configured. A consumer that
+     * sends notifications (e.g. a form's "new submission" email) must handle `null` — treat it as
+     * "email disabled" and skip, never throw, so a missing key doesn't dead-letter the delivery.
+     */
+    emailAdapter: EmailAdapter | null;
+}
+/** Runtime services the consumer wrapper injects into each delivery's context. */
+export interface ConsumerHandlerDeps {
+    pluginSettingsService: PluginSettingsReader;
+    /** The app's email adapter (or `null` if email isn't configured). Passed straight to the consumer. */
+    emailAdapter?: EmailAdapter | null;
+}
+/**
+ * Runs when a subscribed event fires. Resolve to ack the delivery; throw to retry it (with
+ * backoff, until the delivery job's attempts are exhausted, then dead-letter). MUST be
+ * idempotent: at-least-once delivery means it can run more than once for the same event.
+ */
+export type EventConsumerHandler = (ctx: EventConsumerContext) => Promise<void>;
+/**
+ * Reserved job-type prefix for consumer deliveries. Namespaced so a delivery job can never
+ * collide with a document job or a plugin's own `aphex/job/handler` type. The relay enqueues
+ * `consumerJobType(id)`; the resolver registers the matching handler under the same key.
+ */
+export declare const CONSUMER_JOB_PREFIX = "aphex/consumer:";
+/** The delivery job type for a consumer id. */
+export declare function consumerJobType(consumerId: string): string;
+/** Build the delivery job payload for an event (the relay's side of the envelope). */
+export declare function toDeliveryPayload(event: ConsumedEvent): Record<string, unknown>;
+/**
+ * Adapt an `EventConsumerHandler` into a `JobHandler`. The runner calls the returned function
+ * with a claimed delivery job; it reconstructs the `ConsumedEvent` from the job payload, binds
+ * a settings reader to the event's org, and invokes the consumer. Throwing propagates to the
+ * runner as a retryable failure. `deps` is injected by the runner (`runJobsBatch`), which is
+ * where the live services live — the resolver only knows which consumers exist, not how to run them.
+ */
+export declare function toConsumerJobHandler(handler: EventConsumerHandler, deps: ConsumerHandlerDeps): JobHandler;
+//# sourceMappingURL=consumer.d.ts.map

package/dist/events/consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer.d.ts","sourceRoot":"","sources":["../../src/lib/events/consumer.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACpC,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAChF;AAED,iFAAiF;AACjF,MAAM,WAAW,sBAAsB;IACtC,8FAA8F;IAC9F,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACxD;AAED,wHAAwH;AACxH,MAAM,WAAW,oBAAoB;IACpC,KAAK,EAAE,aAAa,CAAC;IACrB,eAAe,EAAE,eAAe,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,iGAAiG;IACjG,QAAQ,EAAE,sBAAsB,CAAC;IACjC;;;;OAIG;IACH,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;CAClC;AAED,kFAAkF;AAClF,MAAM,WAAW,mBAAmB;IACnC,qBAAqB,EAAE,oBAAoB,CAAC;IAC5C,sGAAsG;IACtG,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CACnC;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAErD,+CAA+C;AAC/C,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE1D;AAqBD,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa/E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,oBAAoB,EAC7B,IAAI,EAAE,mBAAmB,GACvB,UAAU,CAcZ"}

package/dist/events/consumer.js

@@ -0,0 +1,76 @@
+// Event consumers — the "react to a fact" surface. A consumer subscribes to one or more
+// domain-event types and runs when they fire. It is NOT called inline at emit time: the
+// relay turns each event into a durable delivery *job* (one per subscribed consumer), and
+// the ordinary job runner executes it — so a consumer inherits retries, backoff, and
+// dead-lettering for free, and a slow/failing consumer never blocks the write that emitted
+// the event.
+//
+// This module is the bridge between the two halves: `EventConsumerHandler` is what a plugin
+// author writes; `toConsumerJobHandler` adapts it to a `JobHandler` the runner understands,
+// and `consumerJobType` is the reserved job-type namespace the relay enqueues under.
+import { z } from 'zod';
+/**
+ * Reserved job-type prefix for consumer deliveries. Namespaced so a delivery job can never
+ * collide with a document job or a plugin's own `aphex/job/handler` type. The relay enqueues
+ * `consumerJobType(id)`; the resolver registers the matching handler under the same key.
+ */
+export const CONSUMER_JOB_PREFIX = 'aphex/consumer:';
+/** The delivery job type for a consumer id. */
+export function consumerJobType(consumerId) {
+    return `${CONSUMER_JOB_PREFIX}${consumerId}`;
+}
+/**
+ * The delivery job's payload envelope. The relay serializes the triggering event into this
+ * shape; `toConsumerJobHandler` parses it back out — parsing (not casting) so a malformed
+ * payload fails loudly at the handler boundary rather than reaching consumer code as `any`.
+ * `createdAt` crosses the DB as a JSON string and is coerced back to a `Date`.
+ */
+const deliveryEnvelope = z.object({
+    event: z.object({
+        id: z.string(),
+        type: z.string(),
+        organizationId: z.string(),
+        payload: z.record(z.string(), z.unknown()).default({}),
+        correlationId: z.string().nullable().default(null),
+        causationId: z.string().nullable().default(null),
+        createdBy: z.string().nullable().default(null),
+        createdAt: z.coerce.date()
+    })
+});
+/** Build the delivery job payload for an event (the relay's side of the envelope). */
+export function toDeliveryPayload(event) {
+    return {
+        event: {
+            id: event.id,
+            type: event.type,
+            organizationId: event.organizationId,
+            payload: event.payload,
+            correlationId: event.correlationId,
+            causationId: event.causationId,
+            createdBy: event.createdBy,
+            createdAt: event.createdAt.toISOString()
+        }
+    };
+}
+/**
+ * Adapt an `EventConsumerHandler` into a `JobHandler`. The runner calls the returned function
+ * with a claimed delivery job; it reconstructs the `ConsumedEvent` from the job payload, binds
+ * a settings reader to the event's org, and invokes the consumer. Throwing propagates to the
+ * runner as a retryable failure. `deps` is injected by the runner (`runJobsBatch`), which is
+ * where the live services live — the resolver only knows which consumers exist, not how to run them.
+ */
+export function toConsumerJobHandler(handler, deps) {
+    return async ({ job, databaseAdapter, logger }) => {
+        const { event } = deliveryEnvelope.parse(job.payload);
+        const settings = {
+            get: (pluginId) => deps.pluginSettingsService.get(event.organizationId, pluginId)
+        };
+        await handler({
+            event,
+            databaseAdapter,
+            logger,
+            settings,
+            emailAdapter: deps.emailAdapter ?? null
+        });
+    };
+}

package/dist/events/define-event.d.ts

@@ -0,0 +1,17 @@
+import { z } from 'zod';
+/**
+ * A typed domain-event definition: a stable `type` name paired with a zod schema for
+ * its payload. Mirrors the API-contract pattern (`api/schemas/*`) — one source of truth
+ * for the payload shape, with an inferred TS type. Emitters call `parse` so a malformed
+ * payload fails loudly at the write site rather than rotting in the log.
+ */
+export interface EventDefinition<TName extends string, TSchema extends z.ZodTypeAny> {
+    type: TName;
+    schema: TSchema;
+    /** Validate + narrow an unknown payload to the event's payload type. Throws on mismatch. */
+    parse(payload: unknown): z.infer<TSchema>;
+}
+/** The payload type of an event definition. */
+export type EventPayload<D> = D extends EventDefinition<string, infer S> ? z.infer<S> : never;
+export declare function defineEvent<TName extends string, TSchema extends z.ZodTypeAny>(type: TName, schema: TSchema): EventDefinition<TName, TSchema>;
+//# sourceMappingURL=define-event.d.ts.map

package/dist/events/define-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-event.d.ts","sourceRoot":"","sources":["../../src/lib/events/define-event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,eAAe,CAAC,KAAK,SAAS,MAAM,EAAE,OAAO,SAAS,CAAC,CAAC,UAAU;IAClF,IAAI,EAAE,KAAK,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;IAChB,4FAA4F;IAC5F,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;CAC1C;AAED,+CAA+C;AAC/C,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAE9F,wBAAgB,WAAW,CAAC,KAAK,SAAS,MAAM,EAAE,OAAO,SAAS,CAAC,CAAC,UAAU,EAC7E,IAAI,EAAE,KAAK,EACX,MAAM,EAAE,OAAO,GACb,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAMjC"}

package/dist/events/define-event.js

@@ -0,0 +1,7 @@
+export function defineEvent(type, schema) {
+    return {
+        type,
+        schema,
+        parse: (payload) => schema.parse(payload)
+    };
+}

package/dist/events/emit.d.ts

@@ -0,0 +1,11 @@
+import type { DatabaseAdapter } from '../db/interfaces/index.js';
+import type { Document } from '../types/document.js';
+/**
+ * Emit `document.published` (and its outbox row) for a freshly published document. MUST be
+ * called on a TRANSACTION handle (from `withTransaction`) so the event commits atomically with
+ * the publish it describes — the transactional-outbox guarantee. Shared by every publish path,
+ * versioned and non-versioned alike, so the fact fires whenever a publish happens regardless of
+ * whether a version snapshot was taken.
+ */
+export declare function emitDocumentPublished(tx: DatabaseAdapter, organizationId: string, doc: Document): Promise<void>;
+//# sourceMappingURL=emit.d.ts.map

package/dist/events/emit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.d.ts","sourceRoot":"","sources":["../../src/lib/events/emit.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAGlD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAC1C,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/events/emit.js

@@ -0,0 +1,20 @@
+import { documentPublished } from './catalog.js';
+/**
+ * Emit `document.published` (and its outbox row) for a freshly published document. MUST be
+ * called on a TRANSACTION handle (from `withTransaction`) so the event commits atomically with
+ * the publish it describes — the transactional-outbox guarantee. Shared by every publish path,
+ * versioned and non-versioned alike, so the fact fires whenever a publish happens regardless of
+ * whether a version snapshot was taken.
+ */
+export async function emitDocumentPublished(tx, organizationId, doc) {
+    await tx.appendEvent({
+        organizationId,
+        type: documentPublished.type,
+        payload: documentPublished.parse({
+            documentId: doc.id,
+            documentType: doc.type,
+            publishedHash: doc.publishedHash ?? null
+        }),
+        createdBy: doc.updatedBy
+    });
+}

package/dist/events/index.d.ts

@@ -0,0 +1,4 @@
+export * from './define-event.js';
+export * from './catalog.js';
+export * from './consumer.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/events/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/events/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC"}

package/dist/events/index.js

@@ -0,0 +1,3 @@
+export * from './define-event.js';
+export * from './catalog.js';
+export * from './consumer.js';

package/dist/field-validation/rule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rule.d.ts","sourceRoot":"","sources":["../../src/lib/field-validation/rule.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAEjC,QAAQ,CAAC,EAAE,GAAG,CAAC;IAEf,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC3C,CACC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,iBAAiB,GACxB,gBAAgB,EAAE,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,gBAAgB,EAAE,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CAC1F;AAED,MAAM,WAAW,cAAc;IAC9B,gBAAgB,EAAE,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACxB;AAED,qBAAa,IAAI;IAChB,OAAO,CAAC,SAAS,CAAkB;IAEnC,OAAO,CAAC,MAAM,CAAmE;IACjF,OAAO,CAAC,MAAM,CAAyC;IACvD,OAAO,CAAC,QAAQ,CAAC,CAAS;IAE1B,MAAM,CAAC,SAAS,SAA4B;IAE5C,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc;IAO5D,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc;IAIrD,QAAQ,IAAI,IAAI;IAMhB,QAAQ,IAAI,IAAI;IAMhB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,cAAc,GAAG,IAAI;IAMhD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,cAAc,GAAG,IAAI;IAMhD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAM1C,MAAM,IAAI,IAAI;IAMd,KAAK,IAAI,IAAI;IAMb,GAAG,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;IAMnE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;IAM3C,QAAQ,IAAI,IAAI;IAMhB,QAAQ,IAAI,IAAI;IAMhB,OAAO,IAAI,IAAI;IAMf,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAM/C,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAM5C,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAM3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAOxD,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,IAAI;IAMjD,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAO7B,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAO/B,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAO5B,KAAK,IAAI,IAAI;IASP,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAwC9E,YAAY;IAgO1B,UAAU,IAAI,OAAO;IAKrB,OAAO,CAAC,sBAAsB;CAkB9B"}
+{"version":3,"file":"rule.d.ts","sourceRoot":"","sources":["../../src/lib/field-validation/rule.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAEjC,QAAQ,CAAC,EAAE,GAAG,CAAC;IAEf,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC3C,CACC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,iBAAiB,GACxB,gBAAgB,EAAE,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,gBAAgB,EAAE,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CAC1F;AAED,MAAM,WAAW,cAAc;IAC9B,gBAAgB,EAAE,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACxB;AAED,qBAAa,IAAI;IAChB,OAAO,CAAC,SAAS,CAAkB;IAEnC,OAAO,CAAC,MAAM,CAAmE;IACjF,OAAO,CAAC,MAAM,CAAyC;IACvD,OAAO,CAAC,QAAQ,CAAC,CAAS;IAE1B,MAAM,CAAC,SAAS,SAA4B;IAE5C,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc;IAO5D,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc;IAIrD,QAAQ,IAAI,IAAI;IAMhB,QAAQ,IAAI,IAAI;IAMhB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,cAAc,GAAG,IAAI;IAMhD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,cAAc,GAAG,IAAI;IAMhD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAM1C,MAAM,IAAI,IAAI;IAMd,KAAK,IAAI,IAAI;IAMb,GAAG,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;IAMnE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;IAM3C,QAAQ,IAAI,IAAI;IAMhB,QAAQ,IAAI,IAAI;IAMhB,OAAO,IAAI,IAAI;IAMf,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAM/C,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAM5C,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAM3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAOxD,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,IAAI;IAMjD,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAO7B,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAO/B,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAO5B,KAAK,IAAI,IAAI;IASP,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAwC9E,YAAY;IAuO1B,UAAU,IAAI,OAAO;IAKrB,OAAO,CAAC,sBAAsB;CAkB9B"}

package/dist/field-validation/rule.js

@@ -4,6 +4,15 @@ import customParseFormat from 'dayjs/plugin/customParseFormat.js';
 import { cmsLogger } from '../utils/logger.js';
 // Enable strict parsing
 dayjs.extend(customParseFormat);
+// A canonical ISO-8601 datetime (what `new Date().toISOString()` and most APIs produce) is a
+// valid datetime regardless of a field's display format. The strict format check below is meant
+// for admin-typed input (`YYYY-MM-DD HH:mm`); machine-stamped values — e.g. a `beforeValidate`
+// hook doing `toISOString()` — arrive as ISO-8601 and must also pass. Date + time, optional
+// seconds/fractional seconds, optional `Z` or numeric offset.
+const ISO_8601_DATETIME = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})?$/;
+function isIso8601DateTime(value) {
+    return ISO_8601_DATETIME.test(value) && !Number.isNaN(Date.parse(value));
+}
 export class Rule {
     _required = false;
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
@@ -325,6 +334,12 @@ export class Rule {
                 if (typeof value === 'string') {
                     const format = rule.constraint || 'YYYY-MM-DD HH:mm';
                     cmsLogger.debug('[Rule.validate] DATETIME validation', { value, format });
+                    // A canonical ISO-8601 timestamp (machine-stamped: hooks, APIs) is always valid,
+                    // independent of the field's admin display format.
+                    if (isIso8601DateTime(value)) {
+                        cmsLogger.debug('[Rule.validate] DATETIME validation PASSED (ISO-8601)');
+                        break;
+                    }
                     // Parse with strict mode
                     const parsed = dayjs(value, format, true);
                     cmsLogger.debug('[Rule.validate] DATETIME parsed', {

package/dist/field-validation/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/lib/field-validation/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAKxD,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACnD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAUrD;AAYD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmC9E;AAED;;GAEG;AACH,wBAAsB,aAAa,CAClC,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,GAAG,EACV,OAAO,GAAE,GAAQ,GACf,OAAO,CAAC;IACV,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,eAAe,EAAE,CAAC;CAC1B,CAAC,CA6ID;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAO/D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CACzC,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,OAAO,GAAE,GAAQ,GACf,OAAO,CAAC,wBAAwB,CAAC,CAqDnC"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/lib/field-validation/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAKxD,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACnD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAUrD;AAYD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmC9E;AAED;;GAEG;AACH,wBAAsB,aAAa,CAClC,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,GAAG,EACV,OAAO,GAAE,GAAQ,GACf,OAAO,CAAC;IACV,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,eAAe,EAAE,CAAC;CAC1B,CAAC,CA6ID;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAO/D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CACzC,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,OAAO,GAAE,GAAQ,GACf,OAAO,CAAC,wBAAwB,CAAC,CA2DnC"}

package/dist/field-validation/utils.js

@@ -239,7 +239,13 @@ export async function validateDocumentData(schema, data, context = {}) {
             type: field.type,
             value
         });
-        const result = await validateField(field, value, { ...context, ...dataForValidation });
+        // Build the document context here from the data we're already validating —
+        // no need for callers to pass it. Cross-field validators read it via
+        // `Rule.custom((v, { document }) => ...)`, matching ValidationContext.
+        const result = await validateField(field, value, {
+            ...context,
+            document: dataForValidation
+        });
         cmsLogger.debug('[validateDocumentData]', `Field "${field.name}" validation result`, {
             isValid: result.isValid,
             errors: result.errors

package/dist/forms/define-form.d.ts

@@ -0,0 +1,25 @@
+import type { Field } from '../types/schemas.js';
+import type { FormDefinition } from './types.js';
+/**
+ * Define a form whose submission type is inferred from its own fields.
+ *
+ * @example
+ * ```ts
+ * export const contactForm = defineForm({
+ *   id: 'contact',
+ *   title: 'Contact us',
+ *   fields: [
+ *     { name: 'name', type: 'string', title: 'Name', validation: (R) => R.required() },
+ *     { name: 'email', type: 'string', title: 'Email', validation: (R) => R.required().email() },
+ *     { name: 'message', type: 'text', title: 'Message', validation: (R) => R.required() }
+ *   ]
+ * });
+ *
+ * type ContactSubmission = InferForm<typeof contactForm>;
+ * // { name?: string; email?: string; message?: string }
+ * ```
+ */
+export declare function defineForm<const F extends readonly Field[]>(form: Omit<FormDefinition, 'fields'> & {
+    fields: F;
+}): FormDefinition<F>;
+//# sourceMappingURL=define-form.d.ts.map

package/dist/forms/define-form.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-form.d.ts","sourceRoot":"","sources":["../../src/lib/forms/define-form.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,SAAS,KAAK,EAAE,EAC1D,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG;IAAE,MAAM,EAAE,CAAC,CAAA;CAAE,GAClD,cAAc,CAAC,CAAC,CAAC,CAEnB"}

package/dist/forms/define-form.js

@@ -0,0 +1,22 @@
+/**
+ * Define a form whose submission type is inferred from its own fields.
+ *
+ * @example
+ * ```ts
+ * export const contactForm = defineForm({
+ *   id: 'contact',
+ *   title: 'Contact us',
+ *   fields: [
+ *     { name: 'name', type: 'string', title: 'Name', validation: (R) => R.required() },
+ *     { name: 'email', type: 'string', title: 'Email', validation: (R) => R.required().email() },
+ *     { name: 'message', type: 'text', title: 'Message', validation: (R) => R.required() }
+ *   ]
+ * });
+ *
+ * type ContactSubmission = InferForm<typeof contactForm>;
+ * // { name?: string; email?: string; message?: string }
+ * ```
+ */
+export function defineForm(form) {
+    return form;
+}

package/dist/forms/index.d.ts

@@ -0,0 +1,4 @@
+export * from './types.js';
+export * from './define-form.js';
+export * from './validate.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/forms/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/forms/index.ts"],"names":[],"mappings":"AAEA,cAAc,SAAS,CAAC;AACxB,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC"}

package/dist/forms/index.js

@@ -0,0 +1,5 @@
+// Forms primitives — developer-owned form definitions with compile-time inference and
+// runtime validation reuse. Plain TS (no Svelte), safe in the root barrel.
+export * from './types.js';
+export * from './define-form.js';
+export * from './validate.js';

package/dist/forms/types.d.ts

@@ -0,0 +1,49 @@
+import type { Field, InferFields } from '../types/schemas.js';
+/**
+ * A developer-authored form. `id` is the stable public key (submission endpoint + event
+ * payload); `fields` is an ordinary CMS field array, so a text field, an email (a `string`
+ * with an email `Rule`), a number, a boolean, etc. all just work.
+ *
+ * The type parameter preserves the exact field literals when built via `defineForm`, which is
+ * what lets `InferForm<typeof form>` recover the submission shape with no generated types.
+ */
+export interface FormDefinition<F extends readonly Field[] = readonly Field[]> {
+    /** Stable public id — the submission key and the `form.submitted` payload's `formId`. */
+    id: string;
+    title: string;
+    /** The form's fields, reusing the CMS field DSL. */
+    fields: F;
+    /** Optional message a client can show after a successful submit. */
+    successMessage?: string;
+    /**
+     * Optional input transform, run on the raw submission BEFORE validation — the one thing
+     * validation can't do (it judges, never mutates): `trim()` strings, lowercase an email, coerce
+     * shapes. Return the transformed data. This is the forms-native equivalent of a schema's
+     * `beforeValidate` hook — a form isn't a document, so it owns its own input shaping here rather
+     * than borrowing the document-hook machinery. Rejection (required, format) still belongs in a
+     * field's `validation` Rule; side effects (notify) belong in a `form.submitted` consumer.
+     */
+    transform?: (data: Record<string, unknown>) => Record<string, unknown>;
+    /**
+     * Where a "new submission" notification is sent. One address or several. Kept next to the form
+     * definition so the routing decision lives with the form, not in a global env var — different
+     * forms notify different inboxes. Omit to store-only (no notification); a notification consumer
+     * skips forms without it. The email itself is sent out of band by a `form.submitted` consumer,
+     * never in the submit path.
+     */
+    notifyEmail?: string | string[];
+    /**
+     * Persist submissions to `cms_plugin_storage` (under `plugin:'forms', collection:id`). Default
+     * `true`. Set `false` for a
+     * "just email me" form — the `form.submitted` event still fires (so notification consumers
+     * run), but nothing is stored. Matches the real split where some forms only notify.
+     */
+    store?: boolean;
+}
+/**
+ * The typed shape of a form's submission data, inferred from its fields. Values are
+ * `T | undefined` (a submission may omit optional fields); required-ness is enforced at
+ * runtime by validation, exactly as in the rest of the CMS.
+ */
+export type InferForm<D> = D extends FormDefinition<infer F> ? InferFields<F> : never;
+//# sourceMappingURL=types.d.ts.map

package/dist/forms/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/forms/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC,SAAS,SAAS,KAAK,EAAE,GAAG,SAAS,KAAK,EAAE;IAC5E,yFAAyF;IACzF,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,MAAM,EAAE,CAAC,CAAC;IACV,oEAAoE;IACpE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvE;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAChC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC"}

package/dist/forms/types.js

@@ -0,0 +1 @@
+export {};

package/dist/forms/validate.d.ts

@@ -0,0 +1,9 @@
+import type { FormDefinition } from './types.js';
+import { type DocumentValidationResult } from '../field-validation/utils.js';
+/**
+ * Validate raw submission data against a form's fields. Returns the standard
+ * `DocumentValidationResult` (`isValid`, field-keyed `errors`, `normalizedData`) — the core
+ * submit path rejects on `!isValid` and stores/emits from `normalizedData`.
+ */
+export declare function validateFormData(form: FormDefinition, data: Record<string, unknown>): Promise<DocumentValidationResult>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/forms/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/lib/forms/validate.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAwB,KAAK,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAYhG;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC/B,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,OAAO,CAAC,wBAAwB,CAAC,CAEnC"}

package/dist/forms/validate.js

@@ -0,0 +1,18 @@
+import { validateDocumentData } from '../field-validation/utils.js';
+/** Adapt a form to a schema-like object so the field validator can run against it. */
+function formToSchema(form) {
+    return {
+        type: 'object',
+        name: form.id,
+        title: form.title,
+        fields: [...form.fields]
+    };
+}
+/**
+ * Validate raw submission data against a form's fields. Returns the standard
+ * `DocumentValidationResult` (`isValid`, field-keyed `errors`, `normalizedData`) — the core
+ * submit path rejects on `!isValid` and stores/emits from `normalizedData`.
+ */
+export function validateFormData(form, data) {
+    return validateDocumentData(formToSchema(form), data);
+}

package/dist/hooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../src/lib/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAO7C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAa,SAAS,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAIN,KAAK,QAAQ,EACb,MAAM,oBAAoB,CAAC;AAG5B,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,SAAS,CAAC;IAClB,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,eAAe,EAAE,eAAe,CAAC;IACjC,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,YAAY,CAAC;IAC3B,uEAAuE;IACvE,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,sFAAsF;IACtF,YAAY,EAAE,YAAY,CAAC;CAC3B;AAmCD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI,CAGrE;AAgBD,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAmMvD"}
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../src/lib/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAO7C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAa,SAAS,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE3E,OAAO,EAIN,KAAK,QAAQ,EACb,MAAM,oBAAoB,CAAC;AAG5B,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,SAAS,CAAC;IAClB,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,eAAe,EAAE,eAAe,CAAC;IACjC,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,YAAY,CAAC;IAC3B,uEAAuE;IACvE,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,sFAAsF;IACtF,YAAY,EAAE,YAAY,CAAC;CAC3B;AAsCD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI,CAGrE;AAgBD,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CA+MvD"}