@aphexcms/cms-core 9.6.0 → 9.8.0

package/dist/lib/types/config.d.ts

@@ -4,6 +4,7 @@ import type { CacheAdapter } from '../cache/index.js';
 import type { DatabaseAdapter } from '../db/index.js';
 import type { StorageAdapter } from '../storage/interfaces/index.js';
 import type { EmailAdapter } from '../email/index.js';
+import type { AIProviderAdapter } from '../ai/index.js';
 import type { GraphQLConfig } from '../graphql/index.js';
 import type { AphexEnv } from '../server/api/index.js';
 import type { SchemaType } from './schemas.js';
@@ -11,6 +12,7 @@ import type { Logger } from '../utils/logger.js';
 import type { CMSPlugin } from '../plugins/types.js';
 import type { Auth } from './auth.js';
 import type { PreviewPerspective } from '../preview/perspective.js';
+import type { JobHandlerMap } from '../jobs/types.js';
 export type { GraphQLConfig };
 export interface CMSConfig {
     schemaTypes: SchemaType[];
@@ -24,6 +26,24 @@ export interface CMSConfig {
     plugins?: CMSPlugin[];
     storage?: StorageAdapter | null;
     email?: EmailAdapter | null;
+    /** Model backend for the in-admin agent. Omit to leave the agent panel disabled. */
+    aiProvider?: AIProviderAdapter | null;
+    /**
+     * Default provider-specific model id used by `/api/agent/chat`, e.g.
+     * `claude-sonnet-4-5` (Anthropic) or `gpt-4.1` (OpenAI/OpenRouter). A request may
+     * override it per-call. Required when `aiProvider` is set — the route 501s without it.
+     */
+    agentModel?: string;
+    /**
+     * System prompt injected ahead of every `/api/agent/chat` turn (fresh per request — never
+     * persisted into the conversation itself, so changing this takes effect immediately for
+     * open conversations too). Overrides the built-in default (`ai/default-system-prompt.ts`),
+     * which only covers behavioral guardrails (draft-first, confirm before broad changes) —
+     * schema/tool knowledge is already self-describing via the `describe_cms` tool, so it
+     * doesn't need to be repeated here. Useful for an agency giving a client's deployment its
+     * own tone or house rules.
+     */
+    agentSystemPrompt?: string;
     customization?: {
         branding?: {
             title?: string;
@@ -77,6 +97,48 @@ export interface CMSConfig {
     versioning?: {
         maxVersions?: number;
     };
+    /**
+     * Background job execution (the DB-backed job queue). Jobs are scheduled via the
+     * database adapter (`scheduleJob`) and driven by `runDueJobs`, which the protected
+     * worker endpoint (`POST /api/internal/workers/run`) and any self-hosted worker loop
+     * both call. Events and scheduling work without this; only *executing* jobs needs it.
+     */
+    jobs?: {
+        /**
+         * Map of job `type` → handler. A claimed job whose type has no handler is
+         * dead-lettered (an unknown type can never become runnable).
+         */
+        handlers?: JobHandlerMap;
+        /**
+         * Shared secret authorizing `POST /api/internal/workers/run`
+         * (`Authorization: Bearer <secret>`). Machine-to-machine — platform cron or a
+         * self-hosted worker loop, NOT the user capability system. When unset the endpoint
+         * is disabled (404), so it's never an unauthenticated surface by default; jobs can
+         * still be scheduled, they just won't run until a secret (and a driver) exist.
+         */
+        workerSecret?: string;
+        /** Max jobs claimed per worker run. Default 10. */
+        batchSize?: number;
+        /** Lease duration (ms) per claimed job before it's reclaimable. Default 30000. */
+        leaseMs?: number;
+        /**
+         * Max outbox rows the relay drains per worker run (events fanned out to consumer
+         * delivery jobs). Runs at the top of the same tick as job execution. Default 100 —
+         * fan-out is cheap (a few inserts), so it can clear more per pass than it executes.
+         */
+        relayBatchSize?: number;
+        /**
+         * Run an in-process job loop inside the app itself — no separate worker process, no
+         * `workerSecret`, no cron. It calls `runJobsBatch` directly on `embeddedIntervalMs`, so
+         * scheduled publishes and event consumers "just work" the moment the app is running. Ideal
+         * for local dev and single-instance self-hosting; for horizontally-scaled prod prefer the
+         * dedicated worker loop / platform cron so N app replicas don't each run a loop. Ticks never
+         * overlap (a slow tick is skipped, not stacked). Default off.
+         */
+        embedded?: boolean;
+        /** Interval (ms) between embedded loop ticks when `embedded` is on. Default 3000. */
+        embeddedIntervalMs?: number;
+    };
     /**
      * Live preview configuration.
      * - `stega`: Enable stega encoding in preview data pushes so field overlays work

package/dist/lib/types/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/lib/types/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,WAAW,SAAS;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE;YACV,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,KAAK,CAAC,EAAE;YACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC/B,CAAC;KACF,CAAC;IACF;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACxD;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE;QACN,QAAQ,EAAE,YAAY,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,EAAE,IAAI,CAAC;YAAC,GAAG,EAAE,GAAG,CAAA;SAAE,KAAK,kBAAkB,CAAC;KAC7E,CAAC;IACF,QAAQ,CAAC,EAAE;QACV;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B;;;;;;WAMG;QACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;CACpC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/lib/types/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,WAAW,SAAS;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,oFAAoF;IACpF,UAAU,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACtC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE;YACV,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,KAAK,CAAC,EAAE;YACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC/B,CAAC;KACF,CAAC;IACF;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACxD;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE;QACN,QAAQ,EAAE,YAAY,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF;;;;;OAKG;IACH,IAAI,CAAC,EAAE;QACN;;;WAGG;QACH,QAAQ,CAAC,EAAE,aAAa,CAAC;QACzB;;;;;;WAMG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,mDAAmD;QACnD,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,kFAAkF;QAClF,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;WAIG;QACH,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB;;;;;;;WAOG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,qFAAqF;QACrF,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,EAAE,IAAI,CAAC;YAAC,GAAG,EAAE,GAAG,CAAA;SAAE,KAAK,kBAAkB,CAAC;KAC7E,CAAC;IACF,QAAQ,CAAC,EAAE;QACV;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B;;;;;;WAMG;QACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;CACpC"}

package/dist/lib/types/document-workspace.d.ts

@@ -0,0 +1,53 @@
+/** A change to apply to the open document's in-memory draft. Extensible — a future
+ * operation kind (e.g. replaying a multiplayer remote op) is a new variant here, routed
+ * through the same `apply()`/`validate()`/CAS-save pipeline, not a new bridge. */
+export type DocumentWorkspaceOperation = {
+    type: 'patchFields';
+    /** Shallow-merged onto the current draft, same semantics as a manual field edit and as
+     * `CollectionAPI.update`'s own merge — whole-value replacement per top-level field key. */
+    fields: Record<string, unknown>;
+};
+/** Who's driving a batch of operations. `'agent'` is the only real source today; the type
+ * stays an open string so a future source (e.g. a multiplayer sync layer) doesn't require
+ * changing this type — just adding a caller. */
+export type DocumentWorkspaceBatchSource = 'agent' | (string & {});
+export interface DocumentWorkspaceSnapshot {
+    documentId: string | null;
+    collection: string;
+    data: Record<string, unknown>;
+    status: 'new' | 'draft' | 'published' | 'unpublished';
+    revision: number | null;
+}
+export interface DocumentWorkspaceValidationResult {
+    isValid: boolean;
+    errors: {
+        field: string;
+        errors: string[];
+    }[];
+}
+export interface DocumentWorkspaceSaveResult {
+    success: boolean;
+    revision?: number;
+    /** True when the write was rejected by the CAS revision check — the caller should treat
+     * this distinctly from a generic failure (matches the existing 409 handling in
+     * `DocumentEditor.svelte`'s manual save/publish/restore paths). */
+    conflict?: boolean;
+    error?: string;
+}
+export interface DocumentWorkspace {
+    getSnapshot(): DocumentWorkspaceSnapshot;
+    getSelection(): {
+        fieldName: string | null;
+    };
+    /** Mutates the in-memory draft only — never persists. */
+    apply(operation: DocumentWorkspaceOperation): void;
+    validate(): Promise<DocumentWorkspaceValidationResult>;
+    flushSave(expectedRevision: number | undefined): Promise<DocumentWorkspaceSaveResult>;
+    publish(expectedRevision: number | undefined): Promise<DocumentWorkspaceSaveResult>;
+    /** Suppresses the editor's own autosave debounce until `endBatch()` — so a burst of
+     * `apply()` calls (e.g. one agent turn's patches) doesn't produce one CAS write per
+     * patch. Exactly one `flushSave` should follow before/at `endBatch()`. */
+    beginBatch(source: DocumentWorkspaceBatchSource): void;
+    endBatch(): void;
+}
+//# sourceMappingURL=document-workspace.d.ts.map

package/dist/lib/types/document-workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-workspace.d.ts","sourceRoot":"","sources":["../../../src/lib/types/document-workspace.ts"],"names":[],"mappings":"AAcA;;kFAEkF;AAClF,MAAM,MAAM,0BAA0B,GAAG;IACxC,IAAI,EAAE,aAAa,CAAC;IACpB;+FAC2F;IAC3F,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AAEF;;gDAEgD;AAChD,MAAM,MAAM,4BAA4B,GAAG,OAAO,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEnE,MAAM,WAAW,yBAAyB;IACzC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,KAAK,GAAG,OAAO,GAAG,WAAW,GAAG,aAAa,CAAC;IACtD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,iCAAiC;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,2BAA2B;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;uEAEmE;IACnE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IACjC,WAAW,IAAI,yBAAyB,CAAC;IACzC,YAAY,IAAI;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC7C,yDAAyD;IACzD,KAAK,CAAC,SAAS,EAAE,0BAA0B,GAAG,IAAI,CAAC;IACnD,QAAQ,IAAI,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACvD,SAAS,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACtF,OAAO,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACpF;;8EAE0E;IAC1E,UAAU,CAAC,MAAM,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACvD,QAAQ,IAAI,IAAI,CAAC;CACjB"}

package/dist/lib/types/document-workspace.js

@@ -0,0 +1,15 @@
+// types/document-workspace.ts
+//
+// A live handle onto a document currently open (and possibly unsaved) in an editor tab —
+// not an AI-specific type. The agent's `content_patch_fields`/`content_save_draft` tools
+// (ai/content-workspace-tools.ts) are its first consumer, not its only intended one: a
+// future multiplayer feature would need the exact same primitives (apply an incoming
+// operation to the live draft, batch/suppress autosave while a burst of operations lands,
+// find which document sessions are open in this tab). `apply()`'s operation type and
+// `beginBatch()`'s source are both open unions for that reason — a new consumer is a new
+// union member, not a redesign of this interface.
+//
+// Client-safe: no server imports. Implemented by `DocumentEditor.svelte`, registered into
+// `document-workspace-registry.svelte.ts` while mounted.
+export {};
+//# sourceMappingURL=document-workspace.js.map

package/dist/lib/types/document-workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-workspace.js","sourceRoot":"","sources":["../../../src/lib/types/document-workspace.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,yFAAyF;AACzF,yFAAyF;AACzF,uFAAuF;AACvF,qFAAqF;AACrF,0FAA0F;AAC1F,qFAAqF;AACrF,yFAAyF;AACzF,kDAAkD;AAClD,EAAE;AACF,0FAA0F;AAC1F,yDAAyD"}

package/dist/lib/types/document.d.ts

@@ -10,6 +10,10 @@ export interface Document {
     draftData: any;
     publishedData: any;
     publishedHash: string | null;
+    /** Monotonic draft revision, incremented on every draft write. Used as the
+     *  compare-and-swap guard on `updateDocDraft`/`publishDoc`/`unpublishDoc` —
+     *  callers pass the revision they last read as `expectedRevision`. */
+    revision: number;
     createdBy: string | AuthUser | null;
     updatedBy: string | null;
     publishedAt: Date | null;
@@ -26,6 +30,7 @@ export interface NewDocument {
     draftData?: any;
     publishedData?: any;
     publishedHash?: string | null;
+    revision?: number;
     createdBy?: string | null;
     updatedBy?: string | null;
     publishedAt?: Date | null;

package/dist/lib/types/document.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../../src/lib/types/document.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C;;GAEG;AACH,MAAM,WAAW,QAAQ;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,WAAW,GAAG,aAAa,GAAG,IAAI,CAAC;IACrD,SAAS,EAAE,GAAG,CAAC;IACf,aAAa,EAAE,GAAG,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,aAAa,GAAG,IAAI,CAAC;IACtD,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB"}
+{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../../src/lib/types/document.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C;;GAEG;AACH,MAAM,WAAW,QAAQ;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,WAAW,GAAG,aAAa,GAAG,IAAI,CAAC;IACrD,SAAS,EAAE,GAAG,CAAC;IACf,aAAa,EAAE,GAAG,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;0EAEsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,aAAa,GAAG,IAAI,CAAC;IACtD,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB"}

package/dist/lib/types/events.d.ts

@@ -0,0 +1,134 @@
+/**
+ * A durable business fact. Append-only: written once (typically inside the same
+ * transaction as the state change that caused it) and never mutated. Payload carries
+ * identifiers + intentional metadata only — never secrets or full document copies.
+ */
+export interface DomainEvent {
+    id: string;
+    organizationId: string;
+    type: string;
+    payload: Record<string, unknown>;
+    correlationId: string | null;
+    causationId: string | null;
+    createdBy: string | null;
+    createdAt: Date;
+}
+/** Input to append a domain event. */
+export interface AppendEventInput {
+    organizationId: string;
+    type: string;
+    payload?: Record<string, unknown>;
+    correlationId?: string | null;
+    causationId?: string | null;
+    createdBy?: string | null;
+}
+export type JobStatus = 'pending' | 'leased' | 'completed' | 'failed' | 'cancelled';
+/** A command to run now or later. Lifecycle: pending → leased → completed/failed/cancelled. */
+export interface Job {
+    id: string;
+    organizationId: string;
+    type: string;
+    payload: Record<string, unknown>;
+    status: JobStatus;
+    runAt: Date;
+    attempts: number;
+    maxAttempts: number;
+    leaseOwner: string | null;
+    leaseExpiresAt: Date | null;
+    lastError: string | null;
+    idempotencyKey: string | null;
+    correlationId: string | null;
+    causationId: string | null;
+    createdBy: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+    completedAt: Date | null;
+}
+/** Input to schedule a job. `idempotencyKey` (unique per org) makes enqueue safe to retry. */
+export interface ScheduleJobInput {
+    organizationId: string;
+    type: string;
+    payload?: Record<string, unknown>;
+    runAt?: Date;
+    maxAttempts?: number;
+    idempotencyKey?: string | null;
+    correlationId?: string | null;
+    causationId?: string | null;
+    createdBy?: string | null;
+}
+/**
+ * Options for claiming due jobs with a lease. Omit `organizationId` to claim across all
+ * orgs (worker context — runs with override access); provide it to scope to one tenant.
+ */
+export interface ClaimJobsOptions {
+    organizationId?: string;
+    limit: number;
+    workerId: string;
+    leaseMs: number;
+    now?: Date;
+}
+/**
+ * An outbox worklist row — the relay's unit of work. Written in the SAME transaction as
+ * the `domain_events` row it mirrors (so it can never exist without its event, nor be
+ * missed if the event committed), then drained by the relay: for each subscribed consumer
+ * it enqueues one delivery job, then stamps `processedAt`.
+ *
+ * Kept SEPARATE from `cms_domain_events` on purpose. The event log is an immutable ledger;
+ * this is a mutable, prunable worklist. And the relay claims rows by `processedAt IS NULL`
+ * (status), never by log position — so an event whose transaction commits late (with an
+ * early timestamp) is still picked up, which a cursor-scan over the append-only log would
+ * silently skip. `eventType`/`payload` are denormalized here so the relay fans out from a
+ * single-table read with no join back to the event log.
+ */
+export interface OutboxRow {
+    id: string;
+    organizationId: string;
+    /** The `cms_domain_events` row this mirrors (FK; the canonical, immutable copy). */
+    eventId: string;
+    eventType: string;
+    payload: Record<string, unknown>;
+    correlationId: string | null;
+    causationId: string | null;
+    createdBy: string | null;
+    createdAt: Date;
+    /** Null until the relay has fanned this event out to every subscriber. */
+    processedAt: Date | null;
+}
+/**
+ * Options for reading the relay's pending work. Omit `organizationId` to read across all
+ * orgs (worker context — runs with override access), mirroring `claimDueJobs`. No lease:
+ * the relay's only side effect is idempotent job enqueue (keyed per event×consumer), so two
+ * workers processing the same row can't double-deliver — the job's unique idempotency key
+ * absorbs the duplicate. Oldest-first, so events relay in roughly causal order.
+ */
+export interface ListUnprocessedOutboxOptions {
+    organizationId?: string;
+    /** Max rows returned per relay pass. */
+    limit: number;
+}
+/** A page of rows plus the unfiltered total, for offset pagination in the admin history views. */
+export interface Page<T> {
+    items: T[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+/** Query for the read-only event history. Newest first. */
+export interface ListEventsOptions {
+    organizationId: string;
+    /** Filter by exact event type (e.g. `document.published`). */
+    type?: string;
+    limit?: number;
+    offset?: number;
+}
+/** Query for the read-only job history. Newest first. */
+export interface ListJobsOptions {
+    organizationId: string;
+    /** Filter by one status or several (e.g. only `failed`). */
+    status?: JobStatus | JobStatus[];
+    /** Filter by exact job type. */
+    type?: string;
+    limit?: number;
+    offset?: number;
+}
+//# sourceMappingURL=events.d.ts.map

package/dist/lib/types/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/lib/types/events.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;CAChB;AAED,sCAAsC;AACtC,MAAM,WAAW,gBAAgB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEpF,+FAA+F;AAC/F,MAAM,WAAW,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,IAAI,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED,8FAA8F;AAC9F,MAAM,WAAW,gBAAgB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,IAAI,CAAC;CACX;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,0EAA0E;IAC1E,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,4BAA4B;IAC5C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;CACd;AAED,kGAAkG;AAClG,MAAM,WAAW,IAAI,CAAC,CAAC;IACtB,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CACf;AAED,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,EAAE,CAAC;IACjC,gCAAgC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/lib/types/events.js

@@ -0,0 +1,4 @@
+// Universal event + job types — dialect-agnostic shapes the adapters map their rows to.
+// These mirror the `cms_domain_events` and `cms_jobs` tables but never depend on Drizzle.
+export {};
+//# sourceMappingURL=events.js.map

package/dist/lib/types/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/lib/types/events.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,0FAA0F"}

package/dist/lib/types/index.d.ts

@@ -7,7 +7,10 @@ export * from './user.js';
 export * from './sidebar.js';
 export * from './organization.js';
 export * from './capabilities.js';
+export * from './agent-tools.js';
 export * from './filters.js';
 export * from './instance.js';
 export * from './version.js';
+export * from './events.js';
+export * from './agent-change-sets.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,qBAAqB,CAAC"}

package/dist/lib/types/index.js

@@ -7,7 +7,10 @@ export * from './user.js';
 export * from './sidebar.js';
 export * from './organization.js';
 export * from './capabilities.js';
+export * from './agent-tools.js';
 export * from './filters.js';
 export * from './instance.js';
 export * from './version.js';
+export * from './events.js';
+export * from './agent-change-sets.js';
 //# sourceMappingURL=index.js.map

package/dist/lib/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,qBAAqB,CAAC"}

package/dist/lib/types/schemas.js

@@ -1,4 +1,4 @@
 export function isBlockArray(field) {
-    return field.of.some((ref) => ref.type === 'block');
+    return (field.of ?? []).some((ref) => ref.type === 'block');
 }
 //# sourceMappingURL=schemas.js.map

package/dist/lib/types/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../src/lib/types/schemas.ts"],"names":[],"mappings":"AA2QA,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC7C,OAAO,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../src/lib/types/schemas.ts"],"names":[],"mappings":"AA2QA,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC7C,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;AAC7D,CAAC"}

package/dist/lib/utils/fetch-remote-file.d.ts

@@ -0,0 +1,11 @@
+export declare const MAX_REMOTE_FILE_BYTES: number;
+export interface RemoteFile {
+    buffer: Buffer;
+    contentType: string | null;
+}
+/** Fetch a URL with SSRF guards: http(s)-only, private/link-local/multicast IPs blocked and the
+ * validated address pinned for the actual connection (re-checked and re-pinned on every redirect
+ * hop), a request timeout, and a streamed size cap (not just a Content-Length check, since that
+ * header can lie). */
+export declare function fetchRemoteFile(url: string): Promise<RemoteFile>;
+//# sourceMappingURL=fetch-remote-file.d.ts.map

package/dist/lib/utils/fetch-remote-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-remote-file.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/fetch-remote-file.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,qBAAqB,QAAmB,CAAC;AA6EtD,MAAM,WAAW,UAAU;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;sBAGsB;AACtB,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAuEtE"}

package/dist/lib/utils/fetch-remote-file.js

@@ -0,0 +1,169 @@
+// Fetches a remote file for the `upload_asset` agent tool's `url` input. The caller (an LLM)
+// can be steered by content it merely *read* (a document field, a scraped page) — an indirect
+// prompt-injection vector — so this is a genuine SSRF surface, not just a convenience fetch.
+//
+// Every redirect hop re-resolves and re-checks the hostname; a naive "check the input URL once"
+// implementation is bypassable by redirecting to a private address only after the first check
+// passes. More importantly, the resolved IP is *pinned* for the actual connection via a custom
+// `undici` dispatcher — resolving with `dns.lookup()` to validate, then handing the plain
+// hostname to `fetch()` and letting it resolve again to connect, reopens the same hole via DNS
+// rebinding (a short-TTL record that answers differently a few hundred ms apart): the address
+// that gets validated and the address that gets connected to must be the exact same one.
+import { lookup } from 'node:dns/promises';
+import net from 'node:net';
+import { Agent, fetch as undiciFetch } from 'undici';
+export const MAX_REMOTE_FILE_BYTES = 10 * 1024 * 1024; // matches the API's global JSON body cap
+const FETCH_TIMEOUT_MS = 10_000;
+const MAX_REDIRECTS = 5;
+const TRANSIENT_RETRY_DELAY_MS = 300;
+const TRANSIENT_STATUSES = new Set([502, 503, 504]);
+// A bare request with no headers reads as bot traffic to a lot of image CDNs (including
+// Unsplash's), which will deprioritize or outright reject it — sending a normal-looking
+// User-Agent/Accept pair alone clears up a meaningful share of otherwise-transient failures.
+const REQUEST_HEADERS = {
+    'User-Agent': 'AphexCMS-Agent-Fetch/1.0 (+asset upload tool)',
+    Accept: 'image/*,*/*;q=0.8'
+};
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function isPrivateOrReservedIp(ip) {
+    if (net.isIPv4(ip)) {
+        const octets = ip.split('.').map(Number);
+        const a = octets[0] ?? -1;
+        const b = octets[1] ?? -1;
+        if (a === 10 || a === 127 || a === 0)
+            return true;
+        if (a === 169 && b === 254)
+            return true; // link-local — includes cloud metadata endpoints
+        if (a === 172 && b >= 16 && b <= 31)
+            return true;
+        if (a === 192 && b === 168)
+            return true;
+        if (a === 100 && b >= 64 && b <= 127)
+            return true; // CGNAT
+        if (a >= 224)
+            return true; // multicast (224-239) + reserved/broadcast (240-255)
+        return false;
+    }
+    if (net.isIPv6(ip)) {
+        const lower = ip.toLowerCase();
+        if (lower === '::1' || lower === '::')
+            return true;
+        if (lower.startsWith('fe80:') || lower.startsWith('fc') || lower.startsWith('fd'))
+            return true;
+        if (lower.startsWith('ff'))
+            return true; // multicast
+        if (lower.startsWith('::ffff:'))
+            return isPrivateOrReservedIp(lower.slice(7));
+        return false;
+    }
+    return true; // unrecognized address shape — fail closed
+}
+async function resolvePinnedHost(hostname) {
+    if (hostname.toLowerCase() === 'localhost') {
+        throw new Error('URL host is not allowed.');
+    }
+    const records = await lookup(hostname, { all: true });
+    if (records.length === 0)
+        throw new Error('Could not resolve host.');
+    for (const { address } of records) {
+        if (isPrivateOrReservedIp(address)) {
+            throw new Error('URL resolves to a private/internal address, which is not allowed.');
+        }
+    }
+    const chosen = records[0];
+    return { address: chosen.address, family: chosen.family === 6 ? 6 : 4 };
+}
+/** A dispatcher whose DNS step is short-circuited to the one address we already validated —
+ * whatever hostname undici asks it to resolve, it hands back this exact IP, so the socket that
+ * actually opens is guaranteed to be the one that passed `isPrivateOrReservedIp`. The hostname
+ * itself still flows through normally for the Host header and TLS SNI/cert validation. */
+function pinnedDispatcher(host) {
+    return new Agent({
+        connect: {
+            lookup: (_hostname, options, callback) => {
+                const result = { address: host.address, family: host.family };
+                callback(null, options.all ? [result] : result.address);
+            }
+        }
+    });
+}
+/** Fetch a URL with SSRF guards: http(s)-only, private/link-local/multicast IPs blocked and the
+ * validated address pinned for the actual connection (re-checked and re-pinned on every redirect
+ * hop), a request timeout, and a streamed size cap (not just a Content-Length check, since that
+ * header can lie). */
+export async function fetchRemoteFile(url) {
+    let current = url;
+    for (let hop = 0; hop <= MAX_REDIRECTS; hop++) {
+        const parsed = new URL(current);
+        if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+            throw new Error('Only http/https URLs are allowed.');
+        }
+        const pinnedHost = await resolvePinnedHost(parsed.hostname);
+        let res;
+        // One retry, only for a transient upstream 5xx (502/503/504) — not for 4xx (a bad URL
+        // won't fix itself) and not for a network-level exception (already a distinct failure
+        // mode, handled by the catch below without a retry).
+        for (let attempt = 0; attempt < 2; attempt++) {
+            const controller = new AbortController();
+            const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+            try {
+                res = await undiciFetch(current, {
+                    redirect: 'manual',
+                    signal: controller.signal,
+                    dispatcher: pinnedDispatcher(pinnedHost),
+                    headers: REQUEST_HEADERS
+                });
+            }
+            catch (err) {
+                throw new Error(`Fetch failed: ${err instanceof Error ? err.message : 'network error'}`);
+            }
+            finally {
+                clearTimeout(timeout);
+            }
+            if (attempt === 0 && TRANSIENT_STATUSES.has(res.status)) {
+                await sleep(TRANSIENT_RETRY_DELAY_MS);
+                continue;
+            }
+            break;
+        }
+        res = res;
+        if (res.status >= 300 && res.status < 400) {
+            const location = res.headers.get('location');
+            if (!location)
+                throw new Error('Redirect response missing a Location header.');
+            current = new URL(location, current).toString();
+            continue;
+        }
+        if (!res.ok) {
+            const transientNote = TRANSIENT_STATUSES.has(res.status)
+                ? ' (upstream temporarily unavailable, retried once)'
+                : '';
+            throw new Error(`Fetch failed with status ${res.status}.${transientNote}`);
+        }
+        const contentLength = res.headers.get('content-length');
+        if (contentLength && Number(contentLength) > MAX_REMOTE_FILE_BYTES) {
+            throw new Error(`File too large (max ${MAX_REMOTE_FILE_BYTES / (1024 * 1024)}MB).`);
+        }
+        if (!res.body)
+            throw new Error('Response had no body.');
+        const reader = res.body.getReader();
+        const chunks = [];
+        let total = 0;
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            total += value.byteLength;
+            if (total > MAX_REMOTE_FILE_BYTES) {
+                await reader.cancel();
+                throw new Error(`File too large (max ${MAX_REMOTE_FILE_BYTES / (1024 * 1024)}MB).`);
+            }
+            chunks.push(value);
+        }
+        return { buffer: Buffer.concat(chunks), contentType: res.headers.get('content-type') };
+    }
+    throw new Error('Too many redirects.');
+}
+//# sourceMappingURL=fetch-remote-file.js.map

package/dist/lib/utils/fetch-remote-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-remote-file.js","sourceRoot":"","sources":["../../../src/lib/utils/fetch-remote-file.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,8FAA8F;AAC9F,6FAA6F;AAC7F,EAAE;AACF,gGAAgG;AAChG,8FAA8F;AAC9F,+FAA+F;AAC/F,0FAA0F;AAC1F,+FAA+F;AAC/F,8FAA8F;AAC9F,yFAAyF;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,WAAW,EAAmB,MAAM,QAAQ,CAAC;AAEtE,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,yCAAyC;AAChG,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEpD,wFAAwF;AACxF,wFAAwF;AACxF,6FAA6F;AAC7F,MAAM,eAAe,GAAG;IACvB,YAAY,EAAE,+CAA+C;IAC7D,MAAM,EAAE,mBAAmB;CAC3B,CAAC;AAEF,SAAS,KAAK,CAAC,EAAU;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,qBAAqB,CAAC,EAAU;IACxC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,iDAAiD;QAC1F,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACjD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,QAAQ;QAC3D,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,qDAAqD;QAChF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/B,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/F,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,YAAY;QACrD,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,2CAA2C;AACzD,CAAC;AAOD,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IAChD,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACrE,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACtF,CAAC;IACF,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACzE,CAAC;AAED;;;0FAG0F;AAC1F,SAAS,gBAAgB,CAAC,IAAgB;IACzC,OAAO,IAAI,KAAK,CAAC;QAChB,OAAO,EAAE;YACR,MAAM,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;gBACxC,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC9D,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,OAAiB,CAAC,CAAC;YACpE,CAAC;SACD;KACD,CAAC,CAAC;AACJ,CAAC;AAOD;;;sBAGsB;AACtB,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW;IAChD,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,GAAwD,CAAC;QAC7D,sFAAsF;QACtF,sFAAsF;QACtF,qDAAqD;QACrD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;YACvE,IAAI,CAAC;gBACJ,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE;oBAChC,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,UAAU,EAAE,gBAAgB,CAAC,UAAU,CAAC;oBACxC,OAAO,EAAE,eAAe;iBACxB,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YAC1F,CAAC;oBAAS,CAAC;gBACV,YAAY,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBACtC,SAAS;YACV,CAAC;YACD,MAAM;QACP,CAAC;QACD,GAAG,GAAG,GAAI,CAAC;QAEX,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC/E,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChD,SAAS;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;gBACvD,CAAC,CAAC,mDAAmD;gBACrD,CAAC,CAAC,EAAE,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACxD,IAAI,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,qBAAqB,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,uBAAuB,qBAAqB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,SAAS,CAAC;YACT,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,qBAAqB,EAAE,CAAC;gBACnC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,uBAAuB,qBAAqB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACxC,CAAC"}

package/dist/lib/utils/index.d.ts

@@ -1,4 +1,4 @@
-export { cmsLogger, setLogLevel, type LogLevel } from './logger.js';
+export { cmsLogger, setLogLevel, type LogLevel, type Logger } from './logger.js';
 export * from '../schema-utils/index.js';
 export * from '../field-validation/utils.js';
 export * from './content-hash.js';

package/dist/lib/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGjE,cAAc,uBAAuB,CAAC;AAGtC,cAAc,2BAA2B,CAAC;AAG1C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AAG9E,cAAc,uBAAuB,CAAC;AAGtC,cAAc,2BAA2B,CAAC;AAG1C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC"}

package/dist/lib/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/utils/index.ts"],"names":[],"mappings":"AAAA,sBAAsB;AAEtB,SAAS;AACT,OAAO,EAAE,SAAS,EAAE,WAAW,EAAiB,MAAM,UAAU,CAAC;AAEjE,mBAAmB;AACnB,cAAc,uBAAuB,CAAC;AAEtC,uBAAuB;AACvB,cAAc,2BAA2B,CAAC;AAE1C,kBAAkB;AAClB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/utils/index.ts"],"names":[],"mappings":"AAAA,sBAAsB;AAEtB,SAAS;AACT,OAAO,EAAE,SAAS,EAAE,WAAW,EAA8B,MAAM,UAAU,CAAC;AAE9E,mBAAmB;AACnB,cAAc,uBAAuB,CAAC;AAEtC,uBAAuB;AACvB,cAAc,2BAA2B,CAAC;AAE1C,kBAAkB;AAClB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC"}