@aphexcms/cms-core 9.6.0 → 9.8.0

package/dist/lib/server/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAqB7C;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,GAAG;IACtB,SAAS,EAAE;QACV,QAAQ,EAAE,YAAY,CAAC;QACvB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;KAClB,CAAC;IACF,QAAQ,EAAE;QACT,QAAQ,EAAE,YAAY,CAAC;QACvB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;KAClB,CAAC;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,cAAc,kGAqB7B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,QAqDrD;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,IACtE,GAAG,OAAO,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,uBAejD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAyB7C;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,GAAG;IACtB,SAAS,EAAE;QACV,QAAQ,EAAE,YAAY,CAAC;QACvB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;KAClB,CAAC;IACF,QAAQ,EAAE;QACT,QAAQ,EAAE,YAAY,CAAC;QACvB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;KAClB,CAAC;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,cAAc,kGAqB7B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,QAqErD;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,IACtE,GAAG,OAAO,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,uBAejD"}

package/dist/lib/server/api/index.js

@@ -19,6 +19,10 @@ import { rolesRouter } from './routes/roles.js';
 import { pluginSettingsRouter } from './routes/plugin-settings.js';
 import { userPreferencesRouter } from './routes/user-preferences.js';
 import { userRouter } from './routes/user.js';
+import { workersRunRouter } from './routes/workers-run.js';
+import { jobsRouter } from './routes/jobs.js';
+import { agentChatRouter } from './routes/agent-chat.js';
+import { agentChangeSetsRouter } from './routes/agent-change-sets.js';
 /**
  * Build the Aphex API Hono app shell.
  *
@@ -86,6 +90,18 @@ export function mountAphexBuiltins(app) {
     // Hono would try to match them under the wrong handler chain.
     app.route('/user', userPreferencesRouter);
     app.route('/user', userRouter);
+    // Internal worker endpoint — machine-to-machine, secret-gated (404 unless
+    // jobs.workerSecret is set). Under /internal so it reads as clearly non-public.
+    // → POST /api/internal/workers/run
+    app.route('/internal/workers', workersRunRouter);
+    // Read-only job/event history (observability). → GET /api/jobs, GET /api/events
+    app.route('/', jobsRouter);
+    // In-admin agent streaming chat — 404s unless `aiProvider` is configured.
+    // → POST /api/agent/chat
+    app.route('/agent', agentChatRouter);
+    // Agent audit/undo trail. → GET /api/agent/change-sets, GET /api/agent/change-sets/:id,
+    // POST /api/agent/change-sets/:id/undo
+    app.route('/agent', agentChangeSetsRouter);
     // Health check — unauthenticated, used by load balancers and uptime monitors.
     app.get('/aphex-health', async (c) => {
         try {

package/dist/lib/server/api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lib/server/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAwB3C;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc;IAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAElD,iEAAiE;IACjE,GAAG,CAAC,GAAG,CACN,GAAG,EACH,SAAS,CAAC;QACT,OAAO,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,0BAA0B;QACrD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,GAAG,CAAC;KAC3F,CAAC,CACF,CAAC;IAEF,mEAAmE;IACnE,0DAA0D;IAC1D,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC9B,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,IAAI,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAmB;IACrD,0DAA0D;IAC1D,mEAAmE;IACnE,gEAAgE;IAChE,iEAAiE;IACjE,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACrC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC9C,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;IAChD,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;IAChD,uEAAuE;IACvE,6DAA6D;IAC7D,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACzC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAE7C,mEAAmE;IACnE,sEAAsE;IACtE,iEAAiE;IACjE,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACvC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAC7C,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACvC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAEnC,2EAA2E;IAC3E,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;IACvD,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;IAC5D,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IACxD,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IACrD,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IAEjD,mEAAmE;IACnE,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAEjC,gFAAgF;IAChF,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IAEpD,kDAAkD;IAClD,0DAA0D;IAC1D,kEAAkE;IAClE,8DAA8D;IAC9D,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC1C,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAE/B,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC;YACJ,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC3C,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;YAClD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAID;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,SAAuD;IACpF,OAAO,KAAK,EAAE,CAAmC,EAAE,EAAE;QACpD,MAAM,SAAS,GAAG;YACjB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;YAClB,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YACvB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAA4B;YAC/C,MAAM,EAAE;gBACP,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ;gBACxB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;aAChB;YACD,uEAAuE;YACvE,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS;YAC3B,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,WAAW;SACtE,CAAC;QACF,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lib/server/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAwBnE;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc;IAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAElD,iEAAiE;IACjE,GAAG,CAAC,GAAG,CACN,GAAG,EACH,SAAS,CAAC;QACT,OAAO,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,0BAA0B;QACrD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,GAAG,CAAC;KAC3F,CAAC,CACF,CAAC;IAEF,mEAAmE;IACnE,0DAA0D;IAC1D,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC9B,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,IAAI,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAmB;IACrD,0DAA0D;IAC1D,mEAAmE;IACnE,gEAAgE;IAChE,iEAAiE;IACjE,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACrC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC9C,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;IAChD,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;IAChD,uEAAuE;IACvE,6DAA6D;IAC7D,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACzC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAE7C,mEAAmE;IACnE,sEAAsE;IACtE,iEAAiE;IACjE,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACvC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAC7C,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACvC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAEnC,2EAA2E;IAC3E,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;IACvD,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;IAC5D,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IACxD,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IACrD,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IAEjD,mEAAmE;IACnE,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAEjC,gFAAgF;IAChF,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IAEpD,kDAAkD;IAClD,0DAA0D;IAC1D,kEAAkE;IAClE,8DAA8D;IAC9D,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC1C,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAE/B,0EAA0E;IAC1E,gFAAgF;IAChF,mCAAmC;IACnC,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IAEjD,gFAAgF;IAChF,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAE3B,0EAA0E;IAC1E,yBAAyB;IACzB,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAErC,wFAAwF;IACxF,uCAAuC;IACvC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAE3C,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC;YACJ,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC3C,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;YAClD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAID;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,SAAuD;IACpF,OAAO,KAAK,EAAE,CAAmC,EAAE,EAAE;QACpD,MAAM,SAAS,GAAG;YACjB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;YAClB,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YACvB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAA4B;YAC/C,MAAM,EAAE;gBACP,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ;gBACxB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;aAChB;YACD,uEAAuE;YACvE,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS;YAC3B,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,WAAW;SACtE,CAAC;QACF,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC,CAAC;AACH,CAAC"}

package/dist/lib/server/api/routes/agent-change-sets.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from 'hono';
+import type { AphexEnv } from '../index.js';
+export declare const agentChangeSetsRouter: Hono<AphexEnv>;
+//# sourceMappingURL=agent-change-sets.d.ts.map

package/dist/lib/server/api/routes/agent-change-sets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-change-sets.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/agent-change-sets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAM5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAqBzC,eAAO,MAAM,qBAAqB,EAAE,IAAI,CAAC,QAAQ,CAiI9C,CAAC"}

package/dist/lib/server/api/routes/agent-change-sets.js

@@ -0,0 +1,132 @@
+import { Hono } from 'hono';
+import { z } from 'zod';
+import { authToContext } from '../../../local-api/auth-helpers.js';
+import { hasCapability } from '../../../types/capabilities.js';
+import { RevisionConflictError } from '../../../db/interfaces.js';
+import { cmsLogger } from '../../../utils/logger.js';
+import { withCreatedByNames } from './resolve-created-by.js';
+const listChangeSetsQuery = z.object({
+    limit: z.coerce.number().int().min(1).max(200).optional(),
+    offset: z.coerce.number().int().min(0).optional()
+});
+/** Map an adapter Page into the ApiResponse `pagination` shape the client expects. */
+function toPagination(page) {
+    const pageSize = page.limit || 1;
+    return {
+        total: page.total,
+        page: Math.floor(page.offset / pageSize) + 1,
+        pageSize,
+        totalPages: Math.max(1, Math.ceil(page.total / pageSize)),
+        hasNextPage: page.offset + page.limit < page.total,
+        hasPrevPage: page.offset > 0
+    };
+}
+export const agentChangeSetsRouter = new Hono()
+    // Read-only audit history — visible to anyone who can read content, same posture as
+    // GET /api/jobs · /api/events (jobs.ts's requireHistoryAccess).
+    .get('/change-sets', async (c) => {
+    const auth = c.var.auth;
+    if (!auth || auth.type === 'partial_session') {
+        return c.json({ success: false, error: 'Authentication required' }, 401);
+    }
+    if (!hasCapability(auth, 'document.read')) {
+        return c.json({ success: false, error: 'Insufficient permissions' }, 403);
+    }
+    const q = listChangeSetsQuery.safeParse(c.req.query());
+    if (!q.success) {
+        return c.json({ success: false, error: 'Invalid query parameters', issues: q.error.issues }, 400);
+    }
+    const { organizationId } = authToContext(auth);
+    const page = await c.var.aphexCMS.databaseAdapter.listChangeSets({
+        organizationId,
+        limit: q.data.limit,
+        offset: q.data.offset
+    });
+    const items = await withCreatedByNames(page.items, c.var.aphexCMS.auth);
+    return c.json({ success: true, data: items, pagination: toPagination(page) });
+})
+    .get('/change-sets/:id', async (c) => {
+    const auth = c.var.auth;
+    if (!auth || auth.type === 'partial_session') {
+        return c.json({ success: false, error: 'Authentication required' }, 401);
+    }
+    if (!hasCapability(auth, 'document.read')) {
+        return c.json({ success: false, error: 'Insufficient permissions' }, 403);
+    }
+    const { organizationId } = authToContext(auth);
+    const changeSet = await c.var.aphexCMS.databaseAdapter.getChangeSet(organizationId, c.req.param('id'));
+    if (!changeSet)
+        return c.json({ success: false, error: 'Not found' }, 404);
+    const [withName] = await withCreatedByNames([changeSet], c.var.aphexCMS.auth);
+    return c.json({ success: true, data: withName });
+})
+    // Undo a whole turn: for every operation that mutated a document and has a
+    // `versionBefore` (create_document operations don't — see agent-change-sets.ts's doc
+    // comment), restore that document to it, in reverse order. Reuses the exact CAS-guarded
+    // primitive DocumentEditor's own version-restore already calls — undo is itself just
+    // another version-tracked draft write, not bespoke revert logic. A conflict (someone
+    // edited the document since the agent touched it) is reported per-operation rather than
+    // aborting the rest of the undo.
+    .post('/change-sets/:id/undo', async (c) => {
+    const auth = c.var.auth;
+    if (!auth || auth.type === 'partial_session') {
+        return c.json({ success: false, error: 'Authentication required' }, 401);
+    }
+    if (!hasCapability(auth, 'document.update')) {
+        return c.json({ success: false, error: 'Insufficient permissions' }, 403);
+    }
+    const context = authToContext(auth);
+    const { databaseAdapter, localAPI } = c.var.aphexCMS;
+    const changeSet = await databaseAdapter.getChangeSet(context.organizationId, c.req.param('id'));
+    if (!changeSet)
+        return c.json({ success: false, error: 'Not found' }, 404);
+    const undoable = changeSet.operations
+        .filter((op) => op.success && op.versionBefore !== null)
+        .reverse();
+    const results = [];
+    for (const op of undoable) {
+        try {
+            const collection = localAPI.getCollection(op.collection);
+            if (!collection) {
+                results.push({
+                    operationId: op.id,
+                    documentId: op.documentId,
+                    success: false,
+                    error: `Unknown collection: ${op.collection}`
+                });
+                continue;
+            }
+            // Fetch the current revision fresh on every iteration — undoing the previous
+            // operation in this same loop changes it, so a value read before the loop
+            // started would be stale by the time we get here.
+            const current = await collection.findByID(context, op.documentId);
+            const restored = await localAPI.versionService.restoreVersion(databaseAdapter, context.organizationId, op.documentId, op.versionBefore, context.user?.id, current?._meta?.revision);
+            results.push({
+                operationId: op.id,
+                documentId: op.documentId,
+                success: restored !== null,
+                error: restored === null ? 'Version not found or restore failed' : undefined
+            });
+        }
+        catch (err) {
+            if (err instanceof RevisionConflictError) {
+                results.push({
+                    operationId: op.id,
+                    documentId: op.documentId,
+                    success: false,
+                    error: `Changed since the agent's edit (conflict): ${err.message}`
+                });
+                continue;
+            }
+            cmsLogger.error('[agent-change-sets] undo failed for operation:', op.id, err);
+            results.push({
+                operationId: op.id,
+                documentId: op.documentId,
+                success: false,
+                error: err instanceof Error ? err.message : 'Unknown error'
+            });
+        }
+    }
+    return c.json({ success: true, data: { results } });
+});
+//# sourceMappingURL=agent-change-sets.js.map

package/dist/lib/server/api/routes/agent-change-sets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-change-sets.js","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/agent-change-sets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,sFAAsF;AACtF,SAAS,YAAY,CAAC,IAAsD;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IACjC,OAAO;QACN,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC5C,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC;QACzD,WAAW,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;QAClD,WAAW,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC;KAC5B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAmB,IAAI,IAAI,EAAY;IACxE,oFAAoF;IACpF,gEAAgE;KAC/D,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAChC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,EAC7E,GAAG,CACH,CAAC;IACH,CAAC;IAED,MAAM,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC;QAChE,cAAc;QACd,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK;QACnB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/E,CAAC,CAAC;KACD,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACpC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,YAAY,CAClE,cAAc,EACd,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CACjB,CAAC;IACF,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3E,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,kBAAkB,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAClD,CAAC,CAAC;IACF,2EAA2E;IAC3E,qFAAqF;IACrF,wFAAwF;IACxF,qFAAqF;IACrF,qFAAqF;IACrF,wFAAwF;IACxF,iCAAiC;KAChC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC1C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChG,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAE3E,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU;SACnC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,aAAa,KAAK,IAAI,CAAC;SACvD,OAAO,EAAE,CAAC;IAEZ,MAAM,OAAO,GAKR,EAAE,CAAC;IAER,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;YACzD,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC;oBACZ,WAAW,EAAE,EAAE,CAAC,EAAE;oBAClB,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,uBAAuB,EAAE,CAAC,UAAU,EAAE;iBAC7C,CAAC,CAAC;gBACH,SAAS;YACV,CAAC;YACD,6EAA6E;YAC7E,0EAA0E;YAC1E,kDAAkD;YAClD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,cAAc,CAC5D,eAAe,EACf,OAAO,CAAC,cAAc,EACtB,EAAE,CAAC,UAAU,EACb,EAAE,CAAC,aAAc,EACjB,OAAO,CAAC,IAAI,EAAE,EAAE,EACf,OAAoD,EAAE,KAAK,EAAE,QAAQ,CACtE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC;gBACZ,WAAW,EAAE,EAAE,CAAC,EAAE;gBAClB,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,OAAO,EAAE,QAAQ,KAAK,IAAI;gBAC1B,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,SAAS;aAC5E,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;gBAC1C,OAAO,CAAC,IAAI,CAAC;oBACZ,WAAW,EAAE,EAAE,CAAC,EAAE;oBAClB,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,8CAA8C,GAAG,CAAC,OAAO,EAAE;iBAClE,CAAC,CAAC;gBACH,SAAS;YACV,CAAC;YACD,SAAS,CAAC,KAAK,CAAC,gDAAgD,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9E,OAAO,CAAC,IAAI,CAAC;gBACZ,WAAW,EAAE,EAAE,CAAC,EAAE;gBAClB,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAC3D,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC"}

package/dist/lib/server/api/routes/agent-chat.d.ts

@@ -0,0 +1,14 @@
+import { Hono } from 'hono';
+import type { AphexEnv } from '../index.js';
+import type { CMSInstances } from '../../../hooks.js';
+import type { LocalAPIContext } from '../../../local-api/index.js';
+/**
+ * Best-effort audit record for one mutating tool call — looks up the two most recent
+ * document-version rows to capture `versionBefore`/`versionAfter` (the version an undo would
+ * restore to, and the one this write produced), then records the operation. Never throws: a
+ * failure to record the audit trail must never break the actual tool call or the SSE stream.
+ * Exported for unit testing — not part of the route's own public surface.
+ */
+export declare function recordMutatingOperation(aphexCMS: CMSInstances, context: LocalAPIContext, changeSetId: string, toolName: string, args: Record<string, unknown>, success: boolean, error: string | undefined, data: unknown): Promise<void>;
+export declare const agentChatRouter: Hono<AphexEnv>;
+//# sourceMappingURL=agent-chat.d.ts.map

package/dist/lib/server/api/routes/agent-chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-chat.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/agent-chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAQzC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAsBhE;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC5C,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,IAAI,EAAE,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,eAAO,MAAM,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAwB,CAAC"}

package/dist/lib/server/api/routes/agent-chat.js

@@ -0,0 +1,224 @@
+import { Hono } from 'hono';
+import { streamSSE } from 'hono/streaming';
+import { z } from 'zod';
+import { agentChatRequest } from '../../../api/schemas/agent-chat.js';
+import { recordWorkspaceOperationRequest } from '../../../api/schemas/agent-operations.js';
+import { authToContext } from '../../../local-api/auth-helpers.js';
+import { resolveAgentTools } from '../../../mcp/tools.js';
+import { runAgentTurn } from '../../../ai/run-agent-turn.js';
+import { DEFAULT_AGENT_SYSTEM_PROMPT } from '../../../ai/default-system-prompt.js';
+import { cmsLogger } from '../../../utils/logger.js';
+const SUMMARY_MAX_LENGTH = 200;
+// A mutating tool's `data` is `unknown` at this boundary (AgentToolResult.data) — every tool
+// returns a different shape (list_collections -> {collections}, upload_asset -> {asset, ...},
+// document tools -> {document, validation}), and this route dispatches by name against
+// whatever's registered, including plugin-contributed tools it's never seen at compile time.
+// There's no static type to give it, so the id is pulled out via a runtime-validated parse
+// (the same idiom `run-agent-turn.ts` already uses for tool arguments) rather than an `as`
+// cast asserting a shape without checking it.
+const toolResultWithDocumentId = z.object({ document: z.object({ id: z.string() }) });
+/** `create_document` has no `id` argument (nothing to reference before it exists) — its new
+ * id only shows up in the result. Falls back to that when the args don't have one, so a
+ * create is still attributable to a document instead of being silently dropped. */
+function resolveDocumentId(args, data) {
+    if (typeof args.id === 'string')
+        return args.id;
+    const parsed = toolResultWithDocumentId.safeParse(data);
+    return parsed.success ? parsed.data.document.id : null;
+}
+/**
+ * Best-effort audit record for one mutating tool call — looks up the two most recent
+ * document-version rows to capture `versionBefore`/`versionAfter` (the version an undo would
+ * restore to, and the one this write produced), then records the operation. Never throws: a
+ * failure to record the audit trail must never break the actual tool call or the SSE stream.
+ * Exported for unit testing — not part of the route's own public surface.
+ */
+export async function recordMutatingOperation(aphexCMS, context, changeSetId, toolName, args, success, error, data) {
+    const collection = typeof args.collection === 'string' ? args.collection : null;
+    // `resolveDocumentId` checks `args.id` first, so a failed update_document/publish_document
+    // (which does have `args.id`) is still attributable — it only falls through to parsing
+    // `data` for the rare case for `create_document`, whose result won't parse on failure anyway.
+    const documentId = resolveDocumentId(args, data);
+    if (!collection || !documentId)
+        return;
+    try {
+        const { databaseAdapter, localAPI } = aphexCMS;
+        const { versions } = await localAPI.versionService.listVersions(databaseAdapter, context.organizationId, documentId, { limit: 2 });
+        const [versionAfter, versionBefore] = versions;
+        await databaseAdapter.recordOperation({
+            changeSetId,
+            organizationId: context.organizationId,
+            collection,
+            documentId,
+            toolName,
+            arguments: args,
+            success,
+            error,
+            versionBefore: versionBefore?.versionNumber ?? null,
+            versionAfter: versionAfter?.versionNumber ?? null
+        });
+    }
+    catch (err) {
+        cmsLogger.error('[agent-chat] failed to record agent operation (continuing):', err);
+    }
+}
+export const agentChatRouter = new Hono();
+/**
+ * POST /api/agent/chat — the in-admin agent's streaming chat endpoint (Milestone 2 item 5
+ * of references/content-copilot-phase-1-plan.md). Stateless per call: the browser sends
+ * the full running conversation each time (conversation persistence is a separate,
+ * not-yet-built piece — see the plan). Requires an authenticated session; individual tool
+ * calls are separately capability-gated by `resolveAgentTools`/each tool's own checks —
+ * this endpoint is a dumb transport over the same tool-execution service MCP uses, not an
+ * additional authorization layer.
+ *
+ * 404s (rather than 401) when no `aiProvider` is configured, so the route doesn't exist as
+ * a surface at all on an instance that hasn't opted in — same "don't advertise an unset
+ * feature" posture as `workers-run.ts`'s worker secret gate.
+ *
+ * Also records an audit/undo trail (`cms_agent_change_sets`/`cms_agent_operations`): a
+ * change-set row is created eagerly for every turn (so token usage is captured even for a
+ * pure Q&A turn with no mutations), and every mutating tool call gets an operation row. All
+ * of this recording is best-effort — see `recordMutatingOperation` above and the try/catch
+ * around change-set creation/completion below — a failure here must never break the chat.
+ */
+agentChatRouter.post('/chat', async (c) => {
+    const { aphexCMS, auth } = c.var;
+    const { aiProvider, agentModel } = aphexCMS.config;
+    const { databaseAdapter } = aphexCMS;
+    if (!aiProvider)
+        return c.json({ success: false, error: 'Not found' }, 404);
+    if (!auth)
+        return c.json({ success: false, error: 'Unauthorized' }, 401);
+    if (!agentModel) {
+        return c.json({ success: false, error: 'Server misconfigured: no agentModel configured for aiProvider' }, 501);
+    }
+    const body = await c.req.json().catch(() => null);
+    const parsed = agentChatRequest.safeParse(body);
+    if (!parsed.success) {
+        return c.json({ success: false, error: 'Invalid request', issues: parsed.error.issues }, 400);
+    }
+    const context = authToContext(auth);
+    const tools = resolveAgentTools({ aphexCMS, context }, { documentContext: parsed.data.documentContext });
+    const toolsByName = new Map(tools.map((t) => [t.definition.name, t]));
+    const model = parsed.data.model ?? agentModel;
+    const abortController = new AbortController();
+    // A turn paused for a workspace tool resumes as a brand-new HTTP request (see
+    // `types/agent-stream.ts`) — the client echoes back the change-set id from the leg that
+    // paused so every leg of one logical turn records against the same row, instead of a
+    // fresh `cms_agent_change_sets` row per leg.
+    let changeSetId = parsed.data.changeSetId ?? null;
+    if (!changeSetId) {
+        try {
+            const firstUserMessage = parsed.data.messages.find((m) => m.role === 'user')?.content ?? '';
+            const changeSet = await databaseAdapter.createChangeSet({
+                organizationId: context.organizationId,
+                createdBy: context.user?.id ?? null,
+                summary: firstUserMessage.slice(0, SUMMARY_MAX_LENGTH) || null,
+                provider: aiProvider.name,
+                model
+            });
+            changeSetId = changeSet.id;
+        }
+        catch (err) {
+            cmsLogger.error('[agent-chat] failed to create change-set (continuing without one):', err);
+        }
+    }
+    return streamSSE(c, async (stream) => {
+        c.req.raw.signal.addEventListener('abort', () => abortController.abort());
+        let promptTokens = parsed.data.priorUsage?.promptTokens ?? 0;
+        let completionTokens = parsed.data.priorUsage?.completionTokens ?? 0;
+        let turnFailed = false;
+        let turnPaused = false;
+        // toolCall args aren't repeated on the matching toolResult event, so stash them here
+        // to correlate the two when it's time to record a mutating operation.
+        const argsByToolCallId = new Map();
+        try {
+            for await (const event of runAgentTurn({
+                aiProvider,
+                model,
+                messages: parsed.data.messages,
+                tools,
+                toolContext: { aphexCMS, context },
+                systemPrompt: aphexCMS.config.agentSystemPrompt ?? DEFAULT_AGENT_SYSTEM_PROMPT,
+                signal: abortController.signal
+            })) {
+                if (event.type === 'usage') {
+                    promptTokens += event.promptTokens;
+                    completionTokens += event.completionTokens;
+                }
+                else if (event.type === 'toolCall') {
+                    argsByToolCallId.set(event.toolCallId, event.arguments);
+                }
+                else if (event.type === 'toolResult' && changeSetId) {
+                    const tool = toolsByName.get(event.name);
+                    const args = argsByToolCallId.get(event.toolCallId);
+                    if (tool?.definition.mutates && args) {
+                        await recordMutatingOperation(aphexCMS, context, changeSetId, event.name, args, event.success, event.error, event.data);
+                    }
+                }
+                else if (event.type === 'error') {
+                    turnFailed = true;
+                }
+                if (event.type === 'done') {
+                    event.changeSetId = changeSetId;
+                    if (event.finishReason === 'awaiting_workspace_tool')
+                        turnPaused = true;
+                }
+                await stream.writeSSE({ data: JSON.stringify(event) });
+            }
+        }
+        catch (err) {
+            turnFailed = true;
+            cmsLogger.error('[agent-chat] turn failed:', err);
+            await stream.writeSSE({
+                data: JSON.stringify({
+                    type: 'error',
+                    message: err instanceof Error ? err.message : 'Unknown error'
+                })
+            });
+        }
+        finally {
+            // A paused leg isn't the end of the turn — the client resumes with the same
+            // changeSetId, and only the truly-terminal leg should mark the change-set complete.
+            if (changeSetId && !turnPaused) {
+                try {
+                    await databaseAdapter.completeChangeSet(context.organizationId, changeSetId, {
+                        status: turnFailed ? 'failed' : 'completed',
+                        promptTokens,
+                        completionTokens
+                    });
+                }
+                catch (err) {
+                    cmsLogger.error('[agent-chat] failed to complete change-set (continuing):', err);
+                }
+            }
+        }
+    });
+});
+/**
+ * POST /api/agent/operations — records an audit/undo row for a tool the *client* executed
+ * against a live `DocumentWorkspace` (the `content_patch_fields`/`content_save_draft` bridge
+ * tools — see `ai/content-workspace-tools.ts`). `agent-chat.ts`'s own `recordMutatingOperation`
+ * call above only sees tool results resolved server-side inside `runAgentTurn`'s loop, so a
+ * workspace tool's result — resolved client-side after a paused turn — needs this separate
+ * path to reach the same `cms_agent_change_sets`/`cms_agent_operations` tables. Same
+ * session-authenticated posture as `/chat`; not itself a mutation of document data (the
+ * client already made that call directly via the normal document API), purely bookkeeping.
+ */
+agentChatRouter.post('/operations', async (c) => {
+    const { aphexCMS, auth } = c.var;
+    if (!aphexCMS.config.aiProvider)
+        return c.json({ success: false, error: 'Not found' }, 404);
+    if (!auth)
+        return c.json({ success: false, error: 'Unauthorized' }, 401);
+    const body = await c.req.json().catch(() => null);
+    const parsed = recordWorkspaceOperationRequest.safeParse(body);
+    if (!parsed.success) {
+        return c.json({ success: false, error: 'Invalid request', issues: parsed.error.issues }, 400);
+    }
+    const context = authToContext(auth);
+    await recordMutatingOperation(aphexCMS, context, parsed.data.changeSetId, parsed.data.toolName, { collection: parsed.data.collection, id: parsed.data.id, ...parsed.data.arguments }, parsed.data.success, parsed.data.error, parsed.data.data);
+    return c.json({ success: true });
+});
+//# sourceMappingURL=agent-chat.js.map

package/dist/lib/server/api/routes/agent-chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-chat.js","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/agent-chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,+BAA+B,EAAE,MAAM,uCAAuC,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAyB,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIlD,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,6FAA6F;AAC7F,8FAA8F;AAC9F,uFAAuF;AACvF,6FAA6F;AAC7F,2FAA2F;AAC3F,2FAA2F;AAC3F,8CAA8C;AAC9C,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AAEtF;;mFAEmF;AACnF,SAAS,iBAAiB,CAAC,IAA6B,EAAE,IAAa;IACtE,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,QAAsB,EACtB,OAAwB,EACxB,WAAmB,EACnB,QAAgB,EAChB,IAA6B,EAC7B,OAAgB,EAChB,KAAyB,EACzB,IAAa;IAEb,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,2FAA2F;IAC3F,uFAAuF;IACvF,8FAA8F;IAC9F,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU;QAAE,OAAO;IAEvC,IAAI,CAAC;QACJ,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;QAC/C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,YAAY,CAC9D,eAAe,EACf,OAAO,CAAC,cAAc,EACtB,UAAU,EACV,EAAE,KAAK,EAAE,CAAC,EAAE,CACZ,CAAC;QACF,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC;QAE/C,MAAM,eAAe,CAAC,eAAe,CAAC;YACrC,WAAW;YACX,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,UAAU;YACV,UAAU;YACV,QAAQ;YACR,SAAS,EAAE,IAAI;YACf,OAAO;YACP,KAAK;YACL,aAAa,EAAE,aAAa,EAAE,aAAa,IAAI,IAAI;YACnD,YAAY,EAAE,YAAY,EAAE,aAAa,IAAI,IAAI;SACjD,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,SAAS,CAAC,KAAK,CAAC,6DAA6D,EAAE,GAAG,CAAC,CAAC;IACrF,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAmB,IAAI,IAAI,EAAY,CAAC;AAEpE;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACzC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC;IACjC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC;IACnD,MAAM,EAAE,eAAe,EAAE,GAAG,QAAQ,CAAC;IAErC,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+DAA+D,EAAE,EAC1F,GAAG,CACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,iBAAiB,CAC9B,EAAE,QAAQ,EAAE,OAAO,EAAE,EACrB,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAChD,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAA2B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC;IAC9C,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAE9C,8EAA8E;IAC9E,wFAAwF;IACxF,qFAAqF;IACrF,6CAA6C;IAC7C,IAAI,WAAW,GAAkB,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;IACjE,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,IAAI,CAAC;YACJ,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;YAC5F,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC;gBACvD,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI;gBACnC,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,IAAI,IAAI;gBAC9D,QAAQ,EAAE,UAAU,CAAC,IAAI;gBACzB,KAAK;aACL,CAAC,CAAC;YACH,WAAW,GAAG,SAAS,CAAC,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,SAAS,CAAC,KAAK,CAAC,oEAAoE,EAAE,GAAG,CAAC,CAAC;QAC5F,CAAC;IACF,CAAC;IAED,OAAO,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACpC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,IAAI,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,IAAI,CAAC,CAAC;QAC7D,IAAI,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,IAAI,CAAC,CAAC;QACrE,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,qFAAqF;QACrF,sEAAsE;QACtE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAmC,CAAC;QAEpE,IAAI,CAAC;YACJ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,YAAY,CAAC;gBACtC,UAAU;gBACV,KAAK;gBACL,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;gBAC9B,KAAK;gBACL,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;gBAClC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,IAAI,2BAA2B;gBAC9E,MAAM,EAAE,eAAe,CAAC,MAAM;aAC9B,CAAC,EAAE,CAAC;gBACJ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC5B,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC;oBACnC,gBAAgB,IAAI,KAAK,CAAC,gBAAgB,CAAC;gBAC5C,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACtC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;gBACzD,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,WAAW,EAAE,CAAC;oBACvD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACzC,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBACpD,IAAI,IAAI,EAAE,UAAU,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;wBACtC,MAAM,uBAAuB,CAC5B,QAAQ,EACR,OAAO,EACP,WAAW,EACX,KAAK,CAAC,IAAI,EACV,IAAI,EACJ,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,IAAI,CACV,CAAC;oBACH,CAAC;gBACF,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACnC,UAAU,GAAG,IAAI,CAAC;gBACnB,CAAC;gBAED,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC3B,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;oBAChC,IAAI,KAAK,CAAC,YAAY,KAAK,yBAAyB;wBAAE,UAAU,GAAG,IAAI,CAAC;gBACzE,CAAC;gBAED,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxD,CAAC;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;YAClD,MAAM,MAAM,CAAC,QAAQ,CAAC;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACpB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAC7D,CAAC;aACF,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACV,4EAA4E;YAC5E,oFAAoF;YACpF,IAAI,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACJ,MAAM,eAAe,CAAC,iBAAiB,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE;wBAC5E,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW;wBAC3C,YAAY;wBACZ,gBAAgB;qBAChB,CAAC,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,SAAS,CAAC,KAAK,CAAC,0DAA0D,EAAE,GAAG,CAAC,CAAC;gBAClF,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC/C,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC;IACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5F,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAEzE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,uBAAuB,CAC5B,QAAQ,EACR,OAAO,EACP,MAAM,CAAC,IAAI,CAAC,WAAW,EACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,EACpB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EACpF,MAAM,CAAC,IAAI,CAAC,OAAO,EACnB,MAAM,CAAC,IAAI,CAAC,KAAK,EACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAChB,CAAC;IAEF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC"}

package/dist/lib/server/api/routes/document-versions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document-versions.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/document-versions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAM5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC,eAAO,MAAM,sBAAsB,EAAE,IAAI,CAAC,QAAQ,CAiK/C,CAAC"}
+{"version":3,"file":"document-versions.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/document-versions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAO5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC,eAAO,MAAM,sBAAsB,EAAE,IAAI,CAAC,QAAQ,CAsL/C,CAAC"}

package/dist/lib/server/api/routes/document-versions.js

@@ -3,7 +3,8 @@ import { zValidator } from '@hono/zod-validator';
 import { authToContext } from '../../../local-api/auth-helpers.js';
 import { cmsLogger } from '../../../utils/logger.js';
 import { hasCapability } from '../../../types/capabilities.js';
-import { listVersionsQuery } from '../../../api/schemas/documents.js';
+import { RevisionConflictError } from '../../../db/interfaces.js';
+import { listVersionsQuery, restoreVersionRequest } from '../../../api/schemas/documents.js';
 export const documentVersionsRouter = new Hono()
     .get('/:id/versions', zValidator('query', listVersionsQuery, (result, c) => {
     if (!result.success) {
@@ -103,7 +104,12 @@ export const documentVersionsRouter = new Hono()
         if (isNaN(versionNumber)) {
             return c.json({ success: false, error: 'Version must be a number' }, 400);
         }
-        const document = await localAPI.versionService.restoreVersion(databaseAdapter, context.organizationId, id, versionNumber, context.user?.id);
+        const body = await c.req.json().catch(() => ({}));
+        const parsed = restoreVersionRequest.safeParse(body);
+        if (!parsed.success) {
+            return c.json({ success: false, error: 'Invalid request', issues: parsed.error.issues }, 400);
+        }
+        const document = await localAPI.versionService.restoreVersion(databaseAdapter, context.organizationId, id, versionNumber, context.user?.id, parsed.data.expectedRevision);
         if (!document) {
             return c.json({ success: false, error: 'Version not found or restore failed' }, 404);
         }
@@ -115,6 +121,14 @@ export const documentVersionsRouter = new Hono()
     }
     catch (error) {
         cmsLogger.error('Failed to restore document version:', error);
+        if (error instanceof RevisionConflictError) {
+            return c.json({
+                success: false,
+                error: 'Conflict',
+                message: error.message,
+                currentRevision: error.currentRevision
+            }, 409);
+        }
         return c.json({ success: false, error: 'Failed to restore version' }, 500);
     }
 });

package/dist/lib/server/api/routes/document-versions.js.map

@@ -1 +1 @@
-{"version":3,"file":"document-versions.js","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/document-versions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAGnE,MAAM,CAAC,MAAM,sBAAsB,GAAmB,IAAI,IAAI,EAAY;KACxE,GAAG,CACH,eAAe,EACf,UAAU,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,0BAA0B;YACjC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC3B,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;IACX,IAAI,CAAC;QACJ,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrD,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE7B,IAAI,CAAC,EAAE,EAAE,CAAC;YACT,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,YAAY,CACxD,eAAe,EACf,OAAO,CAAC,cAAc,EACtB,EAAE,EACF,EAAE,KAAK,EAAE,MAAM,EAAE,CACjB,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE1C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/C,MAAM,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;gBACpC,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAClC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBAC/B,OAAO;gBACR,CAAC;gBACD,IAAI,CAAC;oBACJ,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;oBAC5D,IAAI,IAAI,EAAE,CAAC;wBACV,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC9C,CAAC;gBACF,CAAC;gBAAC,MAAM,CAAC;oBACR,wBAAwB;gBACzB,CAAC;YACF,CAAC,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAC1D,GAAG,CAAC;YACJ,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;SACpE,CAAC,CAAC,CAAC;QAEJ,OAAO,CAAC,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;SACnB,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;AACF,CAAC,CACD;KACA,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC1C,IAAI,CAAC;QACJ,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrD,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAEvC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,6CAA6C,EAAE,EACxE,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,UAAU,CACtD,eAAe,EACf,OAAO,CAAC,cAAc,EACtB,EAAE,EACF,aAAa,CACb,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC;AACF,CAAC,CAAC;KACD,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACnD,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3E,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrD,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAEvC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,6CAA6C,EAAE,EACxE,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,cAAc,CAC5D,eAAe,EACf,OAAO,CAAC,cAAc,EACtB,EAAE,EACF,aAAa,EACb,OAAO,CAAC,IAAI,EAAE,EAAE,CAChB,CAAC;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uBAAuB,aAAa,EAAE;SAC/C,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5E,CAAC;AACF,CAAC,CAAC,CAAC"}
+{"version":3,"file":"document-versions.js","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/document-versions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAG1F,MAAM,CAAC,MAAM,sBAAsB,GAAmB,IAAI,IAAI,EAAY;KACxE,GAAG,CACH,eAAe,EACf,UAAU,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,0BAA0B;YACjC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC3B,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;IACX,IAAI,CAAC;QACJ,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrD,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE7B,IAAI,CAAC,EAAE,EAAE,CAAC;YACT,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,YAAY,CACxD,eAAe,EACf,OAAO,CAAC,cAAc,EACtB,EAAE,EACF,EAAE,KAAK,EAAE,MAAM,EAAE,CACjB,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE1C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/C,MAAM,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;gBACpC,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAClC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBAC/B,OAAO;gBACR,CAAC;gBACD,IAAI,CAAC;oBACJ,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;oBAC5D,IAAI,IAAI,EAAE,CAAC;wBACV,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC9C,CAAC;gBACF,CAAC;gBAAC,MAAM,CAAC;oBACR,wBAAwB;gBACzB,CAAC;YACF,CAAC,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAC1D,GAAG,CAAC;YACJ,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;SACpE,CAAC,CAAC,CAAC;QAEJ,OAAO,CAAC,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;SACnB,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;AACF,CAAC,CACD;KACA,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC1C,IAAI,CAAC;QACJ,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrD,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAEvC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,6CAA6C,EAAE,EACxE,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,UAAU,CACtD,eAAe,EACf,OAAO,CAAC,cAAc,EACtB,EAAE,EACF,aAAa,CACb,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC;AACF,CAAC,CAAC;KACD,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACnD,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3E,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrD,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAEvC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,6CAA6C,EAAE,EACxE,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EACzE,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,cAAc,CAC5D,eAAe,EACf,OAAO,CAAC,cAAc,EACtB,EAAE,EACF,aAAa,EACb,OAAO,CAAC,IAAI,EAAE,EAAE,EAChB,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAC5B,CAAC;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uBAAuB,aAAa,EAAE;SAC/C,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC5C,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,UAAU;gBACjB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,eAAe,EAAE,KAAK,CAAC,eAAe;aACtC,EACD,GAAG,CACH,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5E,CAAC;AACF,CAAC,CAAC,CAAC"}

package/dist/lib/server/api/routes/documents-by-id.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"documents-by-id.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/documents-by-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAO5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC,eAAO,MAAM,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAqN5C,CAAC"}
+{"version":3,"file":"documents-by-id.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/documents-by-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQ5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC,eAAO,MAAM,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAiO5C,CAAC"}

package/dist/lib/server/api/routes/documents-by-id.js

@@ -3,6 +3,7 @@ import { zValidator } from '@hono/zod-validator';
 import { authToContext } from '../../../local-api/auth-helpers.js';
 import { PermissionError } from '../../../local-api/permissions.js';
 import { SingletonOperationError } from '../../../local-api/collection-api.js';
+import { RevisionConflictError } from '../../../db/interfaces.js';
 import { cmsLogger } from '../../../utils/logger.js';
 import { updateDocumentRequest } from '../../../api/schemas/documents.js';
 export const documentsByIdRouter = new Hono()
@@ -82,7 +83,8 @@ export const documentsByIdRouter = new Hono()
             }, 400);
         }
         const result = await collection.update(context, id, documentData, {
-            publish: shouldPublish
+            publish: shouldPublish,
+            expectedRevision: parsed.expectedRevision
         });
         if (!result) {
             return c.json({ success: false, error: 'Document not found' }, 404);
@@ -98,6 +100,14 @@ export const documentsByIdRouter = new Hono()
         if (error instanceof PermissionError) {
             return c.json({ success: false, error: 'Forbidden', message: error.message }, 403);
         }
+        if (error instanceof RevisionConflictError) {
+            return c.json({
+                success: false,
+                error: 'Conflict',
+                message: error.message,
+                currentRevision: error.currentRevision
+            }, 409);
+        }
         if (error instanceof Error && error.message.includes('validation errors')) {
             return c.json({ success: false, error: 'Validation failed', message: error.message }, 400);
         }