@aphexcms/cms-core 9.6.0 → 9.8.0

package/dist/plugins/resolver.d.ts

@@ -5,8 +5,9 @@
  * `config.plugins` and exposed on the engine so both server and admin consult the
  * same resolved model. Validates duplicate part ids up front — no silent overrides.
  */
-import type { AdminToolPart, CMSPlugin, DocumentActionPart, FieldComponentPart, PartKind, PluginPart, ServerRoutePart, SettingsPart } from './types.js';
+import type { AdminToolPart, AgentToolPart, CMSPlugin, DocumentActionPart, EventConsumerPart, FieldComponentPart, PartKind, PluginPart, ServerRoutePart, SettingsPart } from './types.js';
 import type { SchemaType } from '../types/schemas.js';
+import type { JobHandlerMap } from '../jobs/types.js';
 import { type CapabilityDefinition } from '../types/capabilities.js';
 type PartOf<K extends PartKind> = Extract<PluginPart, {
     implements: K;
@@ -43,6 +44,23 @@ export interface PartResolver {
     settingsDeclarations(): SettingsPart[];
     /** The settings declaration for a given plugin id, if any. */
     settingsDeclaration(pluginId: string): SettingsPart | undefined;
+    /**
+     * All plugin-contributed job handlers, merged into one map (later parts win on a
+     * type collision). The runner layers this between core built-ins and the app's
+     * `config.jobs.handlers`.
+     */
+    jobHandlers(): JobHandlerMap;
+    /** All registered event consumers, in registration order. The runner turns these into delivery job handlers. */
+    eventConsumers(): EventConsumerPart[];
+    /** Event consumers subscribed to a given event type — the relay's fan-out list. */
+    consumersForEvent(eventType: string): EventConsumerPart[];
+    /**
+     * Tools visible to a caller with the given capability set — the advertisement
+     * filter. Execution must separately re-check `requiredCapabilities` against the
+     * actual invoking caller; never trust that a tool was only reachable because it
+     * was listed.
+     */
+    agentToolsForCapabilities(capabilities: string[], overrideAccess?: boolean): AgentToolPart[];
 }
 export declare function createPartResolver(plugins?: CMSPlugin[]): PartResolver;
 export {};

package/dist/plugins/resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/lib/plugins/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EACX,aAAa,EACb,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,eAAe,EACf,YAAY,EACZ,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAGN,KAAK,oBAAoB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,KAAK,MAAM,CAAC,CAAC,SAAS,QAAQ,IAAI,OAAO,CAAC,UAAU,EAAE;IAAE,UAAU,EAAE,CAAC,CAAA;CAAE,CAAC,CAAC;AAEzE,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,CAAC,SAAS,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,yEAAyE;IACzE,WAAW,IAAI,UAAU,EAAE,CAAC;IAC5B,6EAA6E;IAC7E,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CAAC;IAC3D,gDAAgD;IAChD,YAAY,IAAI,eAAe,EAAE,CAAC;IAClC,8DAA8D;IAC9D,YAAY,IAAI,MAAM,EAAE,CAAC;IACzB;oEACgE;IAChE,iBAAiB,IAAI,oBAAoB,EAAE,CAAC;IAC5C,sFAAsF;IACtF,eAAe,CAAC,IAAI,EAAE;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,cAAc,CAAC,EAAE,OAAO,CAAC;KACzB,GAAG,kBAAkB,EAAE,CAAC;IACzB,mDAAmD;IACnD,UAAU,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,aAAa,EAAE,CAAC;IAC1F,sEAAsE;IACtE,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAC9D,+DAA+D;IAC/D,oBAAoB,IAAI,YAAY,EAAE,CAAC;IACvC,8DAA8D;IAC9D,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;CAChE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,SAAS,EAAO,GAAG,YAAY,CAgF1E"}
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/lib/plugins/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EACX,aAAa,EACb,aAAa,EACb,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,eAAe,EACf,YAAY,EACZ,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAGN,KAAK,oBAAoB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,KAAK,MAAM,CAAC,CAAC,SAAS,QAAQ,IAAI,OAAO,CAAC,UAAU,EAAE;IAAE,UAAU,EAAE,CAAC,CAAA;CAAE,CAAC,CAAC;AAEzE,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,CAAC,SAAS,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,yEAAyE;IACzE,WAAW,IAAI,UAAU,EAAE,CAAC;IAC5B,6EAA6E;IAC7E,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CAAC;IAC3D,gDAAgD;IAChD,YAAY,IAAI,eAAe,EAAE,CAAC;IAClC,8DAA8D;IAC9D,YAAY,IAAI,MAAM,EAAE,CAAC;IACzB;oEACgE;IAChE,iBAAiB,IAAI,oBAAoB,EAAE,CAAC;IAC5C,sFAAsF;IACtF,eAAe,CAAC,IAAI,EAAE;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,cAAc,CAAC,EAAE,OAAO,CAAC;KACzB,GAAG,kBAAkB,EAAE,CAAC;IACzB,mDAAmD;IACnD,UAAU,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,aAAa,EAAE,CAAC;IAC1F,sEAAsE;IACtE,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAC9D,+DAA+D;IAC/D,oBAAoB,IAAI,YAAY,EAAE,CAAC;IACvC,8DAA8D;IAC9D,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;IAChE;;;;OAIG;IACH,WAAW,IAAI,aAAa,CAAC;IAC7B,gHAAgH;IAChH,cAAc,IAAI,iBAAiB,EAAE,CAAC;IACtC,mFAAmF;IACnF,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAAC;IAC1D;;;;;OAKG;IACH,yBAAyB,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,cAAc,CAAC,EAAE,OAAO,GAAG,aAAa,EAAE,CAAC;CAC7F;AAED,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,SAAS,EAAO,GAAG,YAAY,CA0G1E"}

package/dist/plugins/resolver.js

@@ -27,6 +27,18 @@ export function createPartResolver(plugins = []) {
         }
         settingsIds.add(part.pluginId);
     }
+    // Agent tool parts key on `definition.name` (not a top-level `id`), so guard
+    // their uniqueness separately too — two tools sharing a name would collide in
+    // whatever registry the agent runtime builds from this list.
+    const agentToolNames = new Set();
+    for (const part of allParts) {
+        if (part.implements !== 'aphex/agent/tool')
+            continue;
+        if (agentToolNames.has(part.definition.name)) {
+            throw new Error(`Duplicate agent tool name "${part.definition.name}". Tool names must be unique across all plugins.`);
+        }
+        agentToolNames.add(part.definition.name);
+    }
     const getParts = (kind) => allParts.filter((p) => p.implements === kind);
     const hasCaps = (required, caps, overrideAccess) => overrideAccess || !required || required.length === 0 || required.every((c) => caps.includes(c));
     return {
@@ -60,6 +72,10 @@ export function createPartResolver(plugins = []) {
             .sort((a, b) => (a.order ?? 0) - (b.order ?? 0)),
         fieldComponent: (input) => getParts('aphex/field/component').find((f) => f.input === input),
         settingsDeclarations: () => getParts('aphex/settings'),
-        settingsDeclaration: (pluginId) => getParts('aphex/settings').find((s) => s.pluginId === pluginId)
+        settingsDeclaration: (pluginId) => getParts('aphex/settings').find((s) => s.pluginId === pluginId),
+        jobHandlers: () => getParts('aphex/job/handler').reduce((acc, part) => ({ ...acc, ...part.handlers }), {}),
+        eventConsumers: () => getParts('aphex/event/consumer'),
+        consumersForEvent: (eventType) => getParts('aphex/event/consumer').filter((c) => c.events.includes(eventType)),
+        agentToolsForCapabilities: (capabilities, overrideAccess = false) => getParts('aphex/agent/tool').filter((t) => hasCaps(t.definition.requiredCapabilities, capabilities, overrideAccess))
     };
 }

package/dist/plugins/types.d.ts

@@ -18,8 +18,11 @@ import type { AphexEnv } from '../server/api/index.js';
 import type { Field, SettingsField, SchemaType } from '../types/schemas.js';
 import type { AdminArea } from '../admin/types.js';
 import type { CapabilityDefinition } from '../types/capabilities.js';
+import type { JobHandlerMap } from '../jobs/types.js';
+import type { EventConsumerHandler } from '../events/consumer.js';
+import type { AgentToolDefinition, AgentToolExecutor } from '../types/agent-tools.js';
 /** Known extension points. Plugins may also register custom string kinds. */
-export type PartKind = 'aphex/schema' | 'aphex/schema/transform' | 'aphex/server/route' | 'aphex/capabilities' | 'aphex/settings' | 'aphex/document/action' | 'aphex/admin/tool' | 'aphex/field/component';
+export type PartKind = 'aphex/schema' | 'aphex/schema/transform' | 'aphex/server/route' | 'aphex/capabilities' | 'aphex/settings' | 'aphex/job/handler' | 'aphex/event/consumer' | 'aphex/agent/tool' | 'aphex/document/action' | 'aphex/admin/tool' | 'aphex/field/component';
 /** Contributes content schemas, merged into the app's `schemaTypes`. */
 export interface SchemaPart {
     implements: 'aphex/schema';
@@ -118,6 +121,69 @@ export interface SettingsPart {
      */
     requiredCapabilities?: string[];
 }
+/**
+ * Registers job handlers on the durable queue — the *execution* half of the spine
+ * (a `aphex/server/route` webhook receiver, or any code, does the *enqueue* half via
+ * `c.var.aphexCMS.databaseAdapter.scheduleJob`). A plugin that both enqueues and
+ * handles a job type (e.g. a Shopify sync) is thus fully self-contained: no handler
+ * wiring in the app's `aphex.config.ts`.
+ *
+ * The runner assembles its map as: core built-ins → plugin handlers → the app's
+ * `config.jobs.handlers` — so the app always wins and can override a plugin's handler,
+ * and a plugin can override a core built-in. Two plugins claiming the same job `type`
+ * is last-wins by registration order; keep type strings package-namespaced
+ * (`shopify.product.sync`) to avoid collisions.
+ */
+export interface JobHandlerPart {
+    implements: 'aphex/job/handler';
+    handlers: JobHandlerMap;
+}
+/**
+ * Subscribes to domain events — the *react* half of the spine (`hooks` transform, events
+ * react; a consumer is where "react" lives). When any of `events` fires, the relay enqueues
+ * a durable delivery job and the runner invokes `handler`. So a consumer is decoupled from
+ * the emit site (a failing email never fails the publish) and inherits retries/backoff/
+ * dead-lettering from the job queue.
+ *
+ * A plugin that emits an event (e.g. a webhook receiver `appendEvent`) and consumes it here
+ * is fully self-contained — no wiring in the app's `aphex.config.ts`. This is the primitive
+ * behind webhook-on-publish, cache invalidation, notifications, and automation.
+ */
+export interface EventConsumerPart {
+    implements: 'aphex/event/consumer';
+    /**
+     * Unique across all plugins — it names the delivery job type (`aphex/consumer:<id>`) and
+     * scopes the per-event idempotency key, so two consumers never share a delivery. Namespace
+     * it by package (`shopify.publish-sync`) to avoid collisions.
+     */
+    id: string;
+    /** Event types this reacts to, matched exactly (e.g. `['document.published']`). */
+    events: string[];
+    /** Runs when a subscribed event fires. Must be idempotent (at-least-once); throw to retry. */
+    handler: EventConsumerHandler;
+    /** Retry budget for this consumer's delivery jobs before dead-lettering. Defaults to the queue default (5). */
+    maxAttempts?: number;
+}
+/**
+ * Contributes a tool an AI agent can call (MCP today; a future in-admin agent
+ * panel is meant to sit on the same contract — see Milestone 2 of
+ * references/content-copilot-phase-1-plan.md). `definition` is the
+ * serializable part (name/description/capabilities/zod schema) an LLM/UI
+ * needs to know the tool exists; `execute` is the function that actually runs
+ * it, receiving `LocalAPIContext`/`CMSInstances` as call-time arguments
+ * rather than a static import — the same shape `aphex/event/consumer` already
+ * uses to stay barrel-weight-safe in a part that may sit alongside
+ * client-shared code.
+ *
+ * `requiredCapabilities` on the definition is enforced at both advertisement
+ * and execution — a tool hidden from an unauthorized caller must also reject
+ * direct invocation, never rely on the advertisement filter alone.
+ */
+export interface AgentToolPart {
+    implements: 'aphex/agent/tool';
+    definition: AgentToolDefinition;
+    execute: AgentToolExecutor;
+}
 /**
  * A minimal, stable context handed to a document-action component. Deliberately
  * decoupled from editor internals — actions get exactly this and nothing more, so
@@ -214,7 +280,7 @@ export interface FieldComponentPart {
     input: string;
     component: Component<FieldComponentProps>;
 }
-export type PluginPart = SchemaPart | SchemaTransformPart | ServerRoutePart | CapabilitiesPart | SettingsPart | DocumentActionPart | AdminToolPart | FieldComponentPart;
+export type PluginPart = SchemaPart | SchemaTransformPart | ServerRoutePart | CapabilitiesPart | SettingsPart | JobHandlerPart | EventConsumerPart | AgentToolPart | DocumentActionPart | AdminToolPart | FieldComponentPart;
 /** A plugin manifest. Returned by `definePlugin`. */
 export interface CMSPlugin {
     /** Package-style name, e.g. `@acme/aphex-plugin-seo`. Used in error messages. */

package/dist/plugins/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/plugins/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAElE,6EAA6E;AAC7E,MAAM,MAAM,QAAQ,GACjB,cAAc,GACd,wBAAwB,GACxB,oBAAoB,GACpB,oBAAoB,GACpB,gBAAgB,GAChB,uBAAuB,GACvB,kBAAkB,GAClB,uBAAuB,CAAC;AAI3B,wEAAwE;AACxE,MAAM,WAAW,UAAU;IAC1B,UAAU,EAAE,cAAc,CAAC;IAC3B,OAAO,EAAE,UAAU,EAAE,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IACnC,UAAU,EAAE,wBAAwB,CAAC;IACrC,SAAS,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,CAAC;CACnD;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE,oBAAoB,CAAC;IACjC,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChE;;;;;;;;;;;;;;OAcG;IACH,oBAAoB,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;CAC1C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,oBAAoB,CAAC;IACjC,YAAY,EAAE,CAAC,MAAM,GAAG,oBAAoB,CAAC,EAAE,CAAC;CAChD;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,YAAY;IAC5B,UAAU,EAAE,gBAAgB,CAAC;IAC7B;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAID;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IACnC,kDAAkD;IAClD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,UAAU,CAAC;IACnB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,KAAK,GAAG,OAAO,GAAG,WAAW,GAAG,aAAa,CAAC;IACtD,sDAAsD;IACtD,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACrD,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IAClC,UAAU,EAAE,uBAAuB,CAAC;IACpC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,SAAS,CAAC;QAAE,MAAM,EAAE,mBAAmB,CAAA;KAAE,CAAC,CAAC;IACtD,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,wEAAwE;IACxE,GAAG,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IACrC,uEAAuE;IACvE,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,qEAAqE;IACrE,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC;IACpC,qCAAqC;IACrC,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;CACjE;AAED,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC7B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,4DAA4D;IAC5D,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,SAAS,CAAC;QAAE,IAAI,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IAC/C,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,SAAS,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,KAAK,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,8FAA8F;IAC9F,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,UAAU,EAAE,uBAAuB,CAAC;IACpC,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,SAAS,CAAC,mBAAmB,CAAC,CAAC;CAC1C;AAED,MAAM,MAAM,UAAU,GACnB,UAAU,GACV,mBAAmB,GACnB,eAAe,GACf,gBAAgB,GAChB,YAAY,GACZ,kBAAkB,GAClB,aAAa,GACb,kBAAkB,CAAC;AAEtB,qDAAqD;AACrD,MAAM,WAAW,SAAS;IACzB,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,uFAAuF;AACvF,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAEzD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/plugins/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEnF,6EAA6E;AAC7E,MAAM,MAAM,QAAQ,GACjB,cAAc,GACd,wBAAwB,GACxB,oBAAoB,GACpB,oBAAoB,GACpB,gBAAgB,GAChB,mBAAmB,GACnB,sBAAsB,GACtB,kBAAkB,GAClB,uBAAuB,GACvB,kBAAkB,GAClB,uBAAuB,CAAC;AAI3B,wEAAwE;AACxE,MAAM,WAAW,UAAU;IAC1B,UAAU,EAAE,cAAc,CAAC;IAC3B,OAAO,EAAE,UAAU,EAAE,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IACnC,UAAU,EAAE,wBAAwB,CAAC;IACrC,SAAS,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,CAAC;CACnD;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE,oBAAoB,CAAC;IACjC,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChE;;;;;;;;;;;;;;OAcG;IACH,oBAAoB,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;CAC1C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,oBAAoB,CAAC;IACjC,YAAY,EAAE,CAAC,MAAM,GAAG,oBAAoB,CAAC,EAAE,CAAC;CAChD;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,YAAY;IAC5B,UAAU,EAAE,gBAAgB,CAAC;IAC7B;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,cAAc;IAC9B,UAAU,EAAE,mBAAmB,CAAC;IAChC,QAAQ,EAAE,aAAa,CAAC;CACxB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IACjC,UAAU,EAAE,sBAAsB,CAAC;IACnC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX,mFAAmF;IACnF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,8FAA8F;IAC9F,OAAO,EAAE,oBAAoB,CAAC;IAC9B,+GAA+G;IAC/G,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,aAAa;IAC7B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,UAAU,EAAE,mBAAmB,CAAC;IAChC,OAAO,EAAE,iBAAiB,CAAC;CAC3B;AAID;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IACnC,kDAAkD;IAClD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,UAAU,CAAC;IACnB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,KAAK,GAAG,OAAO,GAAG,WAAW,GAAG,aAAa,CAAC;IACtD,sDAAsD;IACtD,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACrD,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IAClC,UAAU,EAAE,uBAAuB,CAAC;IACpC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,SAAS,CAAC;QAAE,MAAM,EAAE,mBAAmB,CAAA;KAAE,CAAC,CAAC;IACtD,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,wEAAwE;IACxE,GAAG,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IACrC,uEAAuE;IACvE,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,qEAAqE;IACrE,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC;IACpC,qCAAqC;IACrC,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;CACjE;AAED,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC7B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,4DAA4D;IAC5D,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,SAAS,CAAC;QAAE,IAAI,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IAC/C,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,SAAS,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,KAAK,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,8FAA8F;IAC9F,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,UAAU,EAAE,uBAAuB,CAAC;IACpC,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,SAAS,CAAC,mBAAmB,CAAC,CAAC;CAC1C;AAED,MAAM,MAAM,UAAU,GACnB,UAAU,GACV,mBAAmB,GACnB,eAAe,GACf,gBAAgB,GAChB,YAAY,GACZ,cAAc,GACd,iBAAiB,GACjB,aAAa,GACb,kBAAkB,GAClB,aAAa,GACb,kBAAkB,CAAC;AAEtB,qDAAqD;AACrD,MAAM,WAAW,SAAS;IACzB,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,uFAAuF;AACvF,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAEzD"}

package/dist/preview/stega.d.ts

@@ -1,4 +1,4 @@
-import type { Field } from '../types/schemas.js';
+import type { Field, SchemaType } from '../types/schemas.js';
 /**
  * Remove all stega-encoded data from a string or deep JSON structure.
  * Use in <svelte:head> (title, meta), alt text, aria-labels — anywhere the raw
@@ -21,5 +21,5 @@ export declare function stegaDecode(value: string): {
  * Every nested string always encodes the *top-level* field name so that clicking
  * in the preview navigates to the correct editor field.
  */
-export declare function stegaEncodeDocument(data: Record<string, unknown>, fields: Field[]): Record<string, unknown>;
+export declare function stegaEncodeDocument(data: Record<string, unknown>, fields: Field[], schemas?: SchemaType[]): Record<string, unknown>;
 //# sourceMappingURL=stega.d.ts.map

package/dist/preview/stega.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stega.d.ts","sourceRoot":"","sources":["../../src/lib/preview/stega.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAiB,MAAM,qBAAqB,CAAC;AAEhE;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAEzC;AAED,2EAA2E;AAC3E,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CAUP;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,KAAK,EAAE,GACb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASzB"}
+{"version":3,"file":"stega.d.ts","sourceRoot":"","sources":["../../src/lib/preview/stega.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAiB,MAAM,qBAAqB,CAAC;AAsB5E;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAEzC;AAED,2EAA2E;AAC3E,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CAUP;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,KAAK,EAAE,EACf,OAAO,GAAE,UAAU,EAAO,GACxB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASzB"}

package/dist/preview/stega.js

@@ -1,4 +1,21 @@
 import { vercelStegaCombine, vercelStegaClean, vercelStegaDecode } from '@vercel/stega';
+import { getSchemaByName } from '../schema-utils/utils.js';
+/**
+ * Resolve the `fields` for an array member / block. Members are usually named type
+ * references (`{ type: 'doctorGridBlock' }`) with no inline `fields`, so without the
+ * schema registry the encoder can't reach into them and the item's text is never
+ * stega-encoded (invisible to click-to-edit). Prefer an inline `fields`, otherwise
+ * look the type up in the registry.
+ */
+function resolveFields(typeRef, itemType, schemas) {
+    if (typeRef?.fields)
+        return typeRef.fields;
+    const name = itemType ?? typeRef?.type;
+    if (!name)
+        return undefined;
+    const schema = getSchemaByName(schemas, name);
+    return schema && 'fields' in schema ? schema.fields : undefined;
+}
 /**
  * Remove all stega-encoded data from a string or deep JSON structure.
  * Use in <svelte:head> (title, meta), alt text, aria-labels — anywhere the raw
@@ -19,14 +36,14 @@ export function stegaDecode(value) {
  * Every nested string always encodes the *top-level* field name so that clicking
  * in the preview navigates to the correct editor field.
  */
-export function stegaEncodeDocument(data, fields) {
+export function stegaEncodeDocument(data, fields, schemas = []) {
     const result = { ...data };
     for (const field of fields) {
         const val = result[field.name];
         if (val == null)
             continue;
         // objectPath is undefined at root — each field IS the top-level, no sub-path needed
-        result[field.name] = encodeFieldValue(val, field, field.name, undefined);
+        result[field.name] = encodeFieldValue(val, field, field.name, undefined, schemas);
     }
     return result;
 }
@@ -35,7 +52,7 @@ export function stegaEncodeDocument(data, fields) {
 // editor knows which field to scroll to; objectPath carries the dotted sub-path
 // so the editor can drill into nested inputs.
 // ---------------------------------------------------------------------------
-function encodeFieldValue(val, field, topLevel, objectPath) {
+function encodeFieldValue(val, field, topLevel, objectPath, schemas) {
     if (val == null)
         return val;
     const path = objectPath ? `${objectPath}.${field.name}` : field.name;
@@ -56,11 +73,14 @@ function encodeFieldValue(val, field, topLevel, objectPath) {
                 return val;
             // Only forward objectPath when truly nested (inside an object); top-level
             // arrays must NOT get an objectPath or the arrayIndex navigation branch is skipped.
-            return encodeArray(val, field.of, topLevel, objectPath ? path : undefined);
-        case 'object':
-            if (typeof val !== 'object' || !field.fields)
+            return encodeArray(val, field.of, topLevel, objectPath ? path : undefined, schemas);
+        case 'object': {
+            // Inline `fields`, or a named object type resolved from the registry.
+            const objFields = field.fields ?? resolveFields(field, field.type, schemas);
+            if (typeof val !== 'object' || !objFields)
                 return val;
-            return encodeObject(val, field.fields, topLevel, path);
+            return encodeObject(val, objFields, topLevel, path, schemas);
+        }
         // image, file, reference, slug, number, boolean, date, datetime — not text, skip.
         // Image click-to-edit is handled at render time (the frontend stega-encodes the
         // *effective* alt — override or asset default — so every image is clickable, not
@@ -69,12 +89,12 @@ function encodeFieldValue(val, field, topLevel, objectPath) {
             return val;
     }
 }
-function encodeArray(items, of, topLevel, objectPath) {
+function encodeArray(items, of, topLevel, objectPath, schemas) {
     const hasBlock = of.some((t) => t.type === 'block');
     const firstType = of[0]?.type;
     if (hasBlock) {
         // Portable text — encode spans within blocks and string fields in custom block types
-        return encodePortableText(items, of, topLevel);
+        return encodePortableText(items, of, topLevel, schemas);
     }
     if (firstType === 'string' || firstType === 'text') {
         // Primitive string array (e.g. tags) — include the item's array index
@@ -87,33 +107,34 @@ function encodeArray(items, of, topLevel, objectPath) {
             return vercelStegaCombine(item, payload);
         });
     }
-    // Array of inline objects — encode each item's string fields
-    if (of[0]?.fields) {
-        return items.map((item, arrayIndex) => {
-            if (!item || typeof item !== 'object')
-                return item;
-            const obj = item;
-            const typeRef = of.find((t) => t.name === obj._type || t.type === obj._type) ?? of[0];
-            if (!typeRef?.fields)
-                return item;
-            const itemPath = objectPath ? `${objectPath}[${arrayIndex}]` : `[${arrayIndex}]`;
-            return encodeObject(obj, typeRef.fields, topLevel, itemPath);
-        });
-    }
-    return items;
+    // Array of objects — either inline `fields` or named object-type references
+    // (`{ type: 'doctorGridBlock' }`) resolved from the schema registry. The latter is
+    // the common page-builder case, so resolving is what makes those blocks clickable.
+    return items.map((item, arrayIndex) => {
+        if (!item || typeof item !== 'object')
+            return item;
+        const obj = item;
+        const itemType = typeof obj._type === 'string' ? obj._type : undefined;
+        const typeRef = of.find((t) => t.name === obj._type || t.type === obj._type) ?? of[0];
+        const fields = resolveFields(typeRef, itemType, schemas);
+        if (!fields)
+            return item;
+        const itemPath = objectPath ? `${objectPath}[${arrayIndex}]` : `[${arrayIndex}]`;
+        return encodeObject(obj, fields, topLevel, itemPath, schemas);
+    });
 }
-function encodeObject(obj, fields, topLevel, objectPath) {
+function encodeObject(obj, fields, topLevel, objectPath, schemas) {
     const result = { ...obj };
     for (const field of fields) {
         const val = result[field.name];
         if (val == null)
             continue;
-        result[field.name] = encodeFieldValue(val, field, topLevel, objectPath);
+        result[field.name] = encodeFieldValue(val, field, topLevel, objectPath, schemas);
     }
     return result;
 }
 /** Encode portable text: spans in standard blocks + string fields in custom block types. */
-function encodePortableText(blocks, of, topLevel) {
+function encodePortableText(blocks, of, topLevel, schemas) {
     return blocks.map((block, blockIndex) => {
         if (!block || typeof block !== 'object')
             return block;
@@ -142,10 +163,12 @@ function encodePortableText(blocks, of, topLevel) {
         if (b._type === 'image')
             return block;
         // Custom block type (callout, codeBlock, etc.) — encode string fields, carrying
-        // blockIndex so clicking them opens the block's edit modal in the editor.
+        // blockIndex so clicking them opens the block's edit modal in the editor. Fields
+        // come from an inline definition or a named object type in the registry.
         const typeRef = of.find((t) => t.name === b._type || t.type === b._type);
-        if (typeRef?.fields) {
-            return encodeCustomBlock(b, typeRef.fields, topLevel, blockIndex);
+        const fields = resolveFields(typeRef, typeof b._type === 'string' ? b._type : undefined, schemas);
+        if (fields) {
+            return encodeCustomBlock(b, fields, topLevel, blockIndex);
         }
         return block;
     });

package/dist/schema-utils/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/lib/schema-utils/validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAS,MAAM,kBAAkB,CAAC;AAmB1D;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,sFAAsF;AACtF,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAAyB,CAAC;AAEvE,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,EAAE,MAAM,EAYzC,CAAC;AAEF,uDAAuD;AACvD,eAAO,MAAM,iBAAiB,EAAE,MAAM,EAAkD,CAAC;AAEzF;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAmOpE"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/lib/schema-utils/validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAS,MAAM,kBAAkB,CAAC;AAmB1D;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,sFAAsF;AACtF,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAAyB,CAAC;AAEvE,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,EAAE,MAAM,EAYzC,CAAC;AAEF,uDAAuD;AACvD,eAAO,MAAM,iBAAiB,EAAE,MAAM,EAAkD,CAAC;AAEzF;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAwOpE"}

package/dist/schema-utils/validator.js

@@ -72,8 +72,11 @@ export function validateSchemaReferences(schemas) {
             errors.push(`Schema "${parentSchema}" uses reserved field name "${field.name}". Reserved names: ${RESERVED_FIELD_NAMES.join(', ')}`);
         }
         // Check array field references
-        if (field.type === 'array' && field.of) {
-            for (const arrayType of field.of) {
+        if (field.type === 'array') {
+            if (!field.of || field.of.length === 0) {
+                errors.push(`Schema "${parentSchema}" field "${field.name}" is an array with no "of" — declare at least one item type`);
+            }
+            for (const arrayType of field.of ?? []) {
                 // Reference items inside an array must declare `to` and target known schemas
                 if (arrayType.type === 'reference') {
                     const to = arrayType.to;

package/dist/server/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/server/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAqB7C;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,GAAG;IACtB,SAAS,EAAE;QACV,QAAQ,EAAE,YAAY,CAAC;QACvB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;KAClB,CAAC;IACF,QAAQ,EAAE;QACT,QAAQ,EAAE,YAAY,CAAC;QACvB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;KAClB,CAAC;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,cAAc,kGAqB7B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,QAqDrD;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,IACtE,GAAG,OAAO,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,uBAejD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/server/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAyB7C;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,GAAG;IACtB,SAAS,EAAE;QACV,QAAQ,EAAE,YAAY,CAAC;QACvB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;KAClB,CAAC;IACF,QAAQ,EAAE;QACT,QAAQ,EAAE,YAAY,CAAC;QACvB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;KAClB,CAAC;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,cAAc,kGAqB7B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,QAqErD;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,IACtE,GAAG,OAAO,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,uBAejD"}

package/dist/server/api/index.js

@@ -19,6 +19,10 @@ import { rolesRouter } from './routes/roles.js';
 import { pluginSettingsRouter } from './routes/plugin-settings.js';
 import { userPreferencesRouter } from './routes/user-preferences.js';
 import { userRouter } from './routes/user.js';
+import { workersRunRouter } from './routes/workers-run.js';
+import { jobsRouter } from './routes/jobs.js';
+import { agentChatRouter } from './routes/agent-chat.js';
+import { agentChangeSetsRouter } from './routes/agent-change-sets.js';
 /**
  * Build the Aphex API Hono app shell.
  *
@@ -86,6 +90,18 @@ export function mountAphexBuiltins(app) {
     // Hono would try to match them under the wrong handler chain.
     app.route('/user', userPreferencesRouter);
     app.route('/user', userRouter);
+    // Internal worker endpoint — machine-to-machine, secret-gated (404 unless
+    // jobs.workerSecret is set). Under /internal so it reads as clearly non-public.
+    // → POST /api/internal/workers/run
+    app.route('/internal/workers', workersRunRouter);
+    // Read-only job/event history (observability). → GET /api/jobs, GET /api/events
+    app.route('/', jobsRouter);
+    // In-admin agent streaming chat — 404s unless `aiProvider` is configured.
+    // → POST /api/agent/chat
+    app.route('/agent', agentChatRouter);
+    // Agent audit/undo trail. → GET /api/agent/change-sets, GET /api/agent/change-sets/:id,
+    // POST /api/agent/change-sets/:id/undo
+    app.route('/agent', agentChangeSetsRouter);
     // Health check — unauthenticated, used by load balancers and uptime monitors.
     app.get('/aphex-health', async (c) => {
         try {

package/dist/server/api/routes/agent-change-sets.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from 'hono';
+import type { AphexEnv } from '../index.js';
+export declare const agentChangeSetsRouter: Hono<AphexEnv>;
+//# sourceMappingURL=agent-change-sets.d.ts.map

package/dist/server/api/routes/agent-change-sets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-change-sets.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/api/routes/agent-change-sets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAM5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAqBzC,eAAO,MAAM,qBAAqB,EAAE,IAAI,CAAC,QAAQ,CAiI9C,CAAC"}

package/dist/server/api/routes/agent-change-sets.js

@@ -0,0 +1,131 @@
+import { Hono } from 'hono';
+import { z } from 'zod';
+import { authToContext } from '../../../local-api/auth-helpers.js';
+import { hasCapability } from '../../../types/capabilities.js';
+import { RevisionConflictError } from '../../../db/interfaces.js';
+import { cmsLogger } from '../../../utils/logger.js';
+import { withCreatedByNames } from './resolve-created-by.js';
+const listChangeSetsQuery = z.object({
+    limit: z.coerce.number().int().min(1).max(200).optional(),
+    offset: z.coerce.number().int().min(0).optional()
+});
+/** Map an adapter Page into the ApiResponse `pagination` shape the client expects. */
+function toPagination(page) {
+    const pageSize = page.limit || 1;
+    return {
+        total: page.total,
+        page: Math.floor(page.offset / pageSize) + 1,
+        pageSize,
+        totalPages: Math.max(1, Math.ceil(page.total / pageSize)),
+        hasNextPage: page.offset + page.limit < page.total,
+        hasPrevPage: page.offset > 0
+    };
+}
+export const agentChangeSetsRouter = new Hono()
+    // Read-only audit history — visible to anyone who can read content, same posture as
+    // GET /api/jobs · /api/events (jobs.ts's requireHistoryAccess).
+    .get('/change-sets', async (c) => {
+    const auth = c.var.auth;
+    if (!auth || auth.type === 'partial_session') {
+        return c.json({ success: false, error: 'Authentication required' }, 401);
+    }
+    if (!hasCapability(auth, 'document.read')) {
+        return c.json({ success: false, error: 'Insufficient permissions' }, 403);
+    }
+    const q = listChangeSetsQuery.safeParse(c.req.query());
+    if (!q.success) {
+        return c.json({ success: false, error: 'Invalid query parameters', issues: q.error.issues }, 400);
+    }
+    const { organizationId } = authToContext(auth);
+    const page = await c.var.aphexCMS.databaseAdapter.listChangeSets({
+        organizationId,
+        limit: q.data.limit,
+        offset: q.data.offset
+    });
+    const items = await withCreatedByNames(page.items, c.var.aphexCMS.auth);
+    return c.json({ success: true, data: items, pagination: toPagination(page) });
+})
+    .get('/change-sets/:id', async (c) => {
+    const auth = c.var.auth;
+    if (!auth || auth.type === 'partial_session') {
+        return c.json({ success: false, error: 'Authentication required' }, 401);
+    }
+    if (!hasCapability(auth, 'document.read')) {
+        return c.json({ success: false, error: 'Insufficient permissions' }, 403);
+    }
+    const { organizationId } = authToContext(auth);
+    const changeSet = await c.var.aphexCMS.databaseAdapter.getChangeSet(organizationId, c.req.param('id'));
+    if (!changeSet)
+        return c.json({ success: false, error: 'Not found' }, 404);
+    const [withName] = await withCreatedByNames([changeSet], c.var.aphexCMS.auth);
+    return c.json({ success: true, data: withName });
+})
+    // Undo a whole turn: for every operation that mutated a document and has a
+    // `versionBefore` (create_document operations don't — see agent-change-sets.ts's doc
+    // comment), restore that document to it, in reverse order. Reuses the exact CAS-guarded
+    // primitive DocumentEditor's own version-restore already calls — undo is itself just
+    // another version-tracked draft write, not bespoke revert logic. A conflict (someone
+    // edited the document since the agent touched it) is reported per-operation rather than
+    // aborting the rest of the undo.
+    .post('/change-sets/:id/undo', async (c) => {
+    const auth = c.var.auth;
+    if (!auth || auth.type === 'partial_session') {
+        return c.json({ success: false, error: 'Authentication required' }, 401);
+    }
+    if (!hasCapability(auth, 'document.update')) {
+        return c.json({ success: false, error: 'Insufficient permissions' }, 403);
+    }
+    const context = authToContext(auth);
+    const { databaseAdapter, localAPI } = c.var.aphexCMS;
+    const changeSet = await databaseAdapter.getChangeSet(context.organizationId, c.req.param('id'));
+    if (!changeSet)
+        return c.json({ success: false, error: 'Not found' }, 404);
+    const undoable = changeSet.operations
+        .filter((op) => op.success && op.versionBefore !== null)
+        .reverse();
+    const results = [];
+    for (const op of undoable) {
+        try {
+            const collection = localAPI.getCollection(op.collection);
+            if (!collection) {
+                results.push({
+                    operationId: op.id,
+                    documentId: op.documentId,
+                    success: false,
+                    error: `Unknown collection: ${op.collection}`
+                });
+                continue;
+            }
+            // Fetch the current revision fresh on every iteration — undoing the previous
+            // operation in this same loop changes it, so a value read before the loop
+            // started would be stale by the time we get here.
+            const current = await collection.findByID(context, op.documentId);
+            const restored = await localAPI.versionService.restoreVersion(databaseAdapter, context.organizationId, op.documentId, op.versionBefore, context.user?.id, current?._meta?.revision);
+            results.push({
+                operationId: op.id,
+                documentId: op.documentId,
+                success: restored !== null,
+                error: restored === null ? 'Version not found or restore failed' : undefined
+            });
+        }
+        catch (err) {
+            if (err instanceof RevisionConflictError) {
+                results.push({
+                    operationId: op.id,
+                    documentId: op.documentId,
+                    success: false,
+                    error: `Changed since the agent's edit (conflict): ${err.message}`
+                });
+                continue;
+            }
+            cmsLogger.error('[agent-change-sets] undo failed for operation:', op.id, err);
+            results.push({
+                operationId: op.id,
+                documentId: op.documentId,
+                success: false,
+                error: err instanceof Error ? err.message : 'Unknown error'
+            });
+        }
+    }
+    return c.json({ success: true, data: { results } });
+});

package/dist/server/api/routes/agent-chat.d.ts

@@ -0,0 +1,14 @@
+import { Hono } from 'hono';
+import type { AphexEnv } from '../index.js';
+import type { CMSInstances } from '../../../hooks.js';
+import type { LocalAPIContext } from '../../../local-api/index.js';
+/**
+ * Best-effort audit record for one mutating tool call — looks up the two most recent
+ * document-version rows to capture `versionBefore`/`versionAfter` (the version an undo would
+ * restore to, and the one this write produced), then records the operation. Never throws: a
+ * failure to record the audit trail must never break the actual tool call or the SSE stream.
+ * Exported for unit testing — not part of the route's own public surface.
+ */
+export declare function recordMutatingOperation(aphexCMS: CMSInstances, context: LocalAPIContext, changeSetId: string, toolName: string, args: Record<string, unknown>, success: boolean, error: string | undefined, data: unknown): Promise<void>;
+export declare const agentChatRouter: Hono<AphexEnv>;
+//# sourceMappingURL=agent-chat.d.ts.map

package/dist/server/api/routes/agent-chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-chat.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/api/routes/agent-chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAQzC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAsBhE;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC5C,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,IAAI,EAAE,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,eAAO,MAAM,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAwB,CAAC"}