@avocadostudio-ai/orchestrator-core 0.11.5 → 0.11.6

package/dist/handler/create-orchestrator.js

@@ -21,7 +21,7 @@ import { mkdir, writeFile, readFile } from "node:fs/promises";
 import { resolve, basename } from "node:path";
 import { randomUUID } from "node:crypto";
 import { z } from "zod";
-import { operationSchema, blockManifestSchema, siteConfigSchema, declareBlockCatalogue, undeclaredBlockTypes, EDITOR_PROTOCOL_VERSION, withLoopbackSpellings } from "@avocadostudio-ai/shared";
+import { operationSchema, blockManifestSchema, siteConfigSchema, declareBlockCatalogue, undeclaredBlockTypes, EDITOR_PROTOCOL_VERSION, withLoopbackSpellings, editorAllowHeaders } from "@avocadostudio-ai/shared";
 import { keyFileHint } from "../env-file-location.js";
 import { chatRequestBodySchema } from "../nlp/intent-detection.js";
 import { applyOpsAtomically, pickFocusBlockId, pickUpdatedSlug, toErrorDetail, classifyGuardrailError } from "../ops/ops-engine.js";
@@ -536,7 +536,7 @@ export function createOrchestrator(config = {}) {
                      * would have been unreachable from the very client it is for.
                      */
                     "access-control-allow-methods": "GET, POST, PUT, PATCH, DELETE, OPTIONS",
-                    "access-control-allow-headers": "content-type, x-access-token, authorization",
+                    "access-control-allow-headers": editorAllowHeaders(),
                     "access-control-max-age": "600"
                 }
             });
@@ -1158,6 +1158,23 @@ export function createOrchestrator(config = {}) {
                      * editor offers the picker's CMS tab on it, so silence hides the
                      * tab rather than opening one onto a method nobody implemented. */
                     cmsMedia: runtime.capabilities.readsMedia,
+                    /*
+                     * Whether `/audio/transcribe` can actually answer.
+                     *
+                     * This key was simply absent from library mode's feature list while
+                     * the standalone server has always reported it, and the editor's
+                     * check is `audioTranscription !== false` — so `undefined` read as
+                     * *available* and the microphone shipped visible in every
+                     * scaffolded project, including with no key configured at all.
+                     * Pressing it records audio and posts it to a route that can only
+                     * answer 503.
+                     *
+                     * The same providers as the standalone server, for the same reason:
+                     * transcription tries OpenAI first and falls back to Gemini, so
+                     * either key enables it and neither means the control must not be
+                     * offered.
+                     */
+                    audioTranscription: Boolean(process.env.OPENAI_API_KEY?.trim() || process.env.GOOGLE_GENAI_API_KEY?.trim()),
                     agentMode: false
                 },
                 /*

package/dist/nlp/deterministic-planner-suggestions.d.ts

@@ -75,20 +75,29 @@ export declare function blockContractsSummary(manifest?: BlockManifest): Record<
  */
 export declare const KEYLESS_PLANNER_NOTICE: string;
 /**
- * The same notice, naming the file by its full path when we can.
+ * The same notice, without the *path*.
  *
- * "Add it to `.env.local`" is a description of a file, not an address, and the
- * person reading it is by definition the one who does not yet know the layout:
- * the message arrives in a browser tab, on an origin that is not the site's,
- * from a server started by a script they did not write. Saying *which*
- * `.env.local` removes the only step in this instruction that requires a guess.
+ * An earlier version interpolated the absolute path of `.env.local` into the
+ * sentence. Correct, and it read appallingly: an 80-character path mid-
+ * paragraph, wrapping across four lines of a narrow pane, so a two-line
+ * explanation became a wall in which the actual advice was the least visible
+ * part — and it duplicated, word for word, the notice sitting directly below
+ * the conversation.
  *
- * Falls back to the constant above whenever a path would be wrong or
- * unavailable — in production there is no dev server to restart and the file is
- * not deployed, so a precise path there would be authoritative and false. See
- * `keyFileHint`.
+ * The path belongs in exactly one place: the notice, where it is a selectable
+ * code block rather than prose. The variable names stay here, though, and a
+ * first attempt at removing those was wrong — `library-demo-identity.test.ts`
+ * pins them, and it is right to. **The notice is dismissible.** A message that
+ * says "see the notice below" is a dangling reference the moment someone closes
+ * it, and chat messages are also read in transcripts and telemetry where no
+ * notice exists. So this sentence has to stand alone; it just does not have to
+ * carry a filesystem path to do it.
+ *
+ * `envFilePath` is still accepted so callers need not know any of this. It
+ * changes nothing today and keeps the seam if a surface without the notice ever
+ * needs the long form.
  */
-export declare function keylessPlannerNotice(envFilePath?: string): string;
+export declare function keylessPlannerNotice(_envFilePath?: string): string;
 export declare function withKeylessNotice(plan: EditPlan, envFilePath?: string): EditPlan;
 /**
  * Drop the suggestions this planner could not act on.

package/dist/nlp/deterministic-planner-suggestions.js

@@ -625,27 +625,33 @@ export function blockContractsSummary(manifest) {
  * So when the rules produce no operations, say why. The suggestions are kept:
  * they are the phrasings this planner *can* execute without a key.
  */
-export const KEYLESS_PLANNER_NOTICE = "There's no AI key configured, so I'm running on the built-in demo planner — it only handles simple, literal edits. " +
-    "Add ANTHROPIC_API_KEY (or OPENAI_API_KEY) to .env.local and restart the dev server to chat for real.";
+export const KEYLESS_PLANNER_NOTICE = "No API key is configured, so this is the built-in demo planner, which handles only simple, literal edits. " +
+    "Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your project's .env.local and restart the dev server for full chat.";
 /**
- * The same notice, naming the file by its full path when we can.
+ * The same notice, without the *path*.
  *
- * "Add it to `.env.local`" is a description of a file, not an address, and the
- * person reading it is by definition the one who does not yet know the layout:
- * the message arrives in a browser tab, on an origin that is not the site's,
- * from a server started by a script they did not write. Saying *which*
- * `.env.local` removes the only step in this instruction that requires a guess.
+ * An earlier version interpolated the absolute path of `.env.local` into the
+ * sentence. Correct, and it read appallingly: an 80-character path mid-
+ * paragraph, wrapping across four lines of a narrow pane, so a two-line
+ * explanation became a wall in which the actual advice was the least visible
+ * part — and it duplicated, word for word, the notice sitting directly below
+ * the conversation.
  *
- * Falls back to the constant above whenever a path would be wrong or
- * unavailable — in production there is no dev server to restart and the file is
- * not deployed, so a precise path there would be authoritative and false. See
- * `keyFileHint`.
+ * The path belongs in exactly one place: the notice, where it is a selectable
+ * code block rather than prose. The variable names stay here, though, and a
+ * first attempt at removing those was wrong — `library-demo-identity.test.ts`
+ * pins them, and it is right to. **The notice is dismissible.** A message that
+ * says "see the notice below" is a dangling reference the moment someone closes
+ * it, and chat messages are also read in transcripts and telemetry where no
+ * notice exists. So this sentence has to stand alone; it just does not have to
+ * carry a filesystem path to do it.
+ *
+ * `envFilePath` is still accepted so callers need not know any of this. It
+ * changes nothing today and keeps the seam if a surface without the notice ever
+ * needs the long form.
  */
-export function keylessPlannerNotice(envFilePath) {
-    if (!envFilePath)
-        return KEYLESS_PLANNER_NOTICE;
-    return ("There's no AI key configured, so I'm running on the built-in demo planner — it only handles simple, literal edits. " +
-        `Add ANTHROPIC_API_KEY (or OPENAI_API_KEY) to ${envFilePath} and restart the dev server to chat for real.`);
+export function keylessPlannerNotice(_envFilePath) {
+    return KEYLESS_PLANNER_NOTICE;
 }
 export function withKeylessNotice(plan, envFilePath) {
     if (plan.ops.length > 0)

package/dist/publish/diff-engine.js

@@ -159,15 +159,53 @@ function diffPage(before, after) {
     const a = after;
     const blockDiffs = diffBlocks(b.blocks, a.blocks);
     const titleChanged = b.title !== a.title;
+    const metaDiffs = diffPageMeta(b, a);
     const hasStructuralChange = blockDiffs.some((bd) => bd.status !== "unchanged");
     return {
         slug: a.slug,
-        status: titleChanged || hasStructuralChange ? "modified" : "unchanged",
+        status: titleChanged || metaDiffs.length > 0 || hasStructuralChange ? "modified" : "unchanged",
         titleBefore: titleChanged ? b.title : undefined,
         titleAfter: titleChanged ? a.title : undefined,
+        ...(metaDiffs.length > 0 ? { metaDiffs } : {}),
         blockDiffs,
     };
 }
+/**
+ * Page-level SEO fields, which the diff did not look at.
+ *
+ * A page's `meta` carries the title, description, Open Graph image and public
+ * path — everything a crawler and a social card read, and the whole content of
+ * the property panel's **SEO** section. None of it reached the publish review,
+ * so a user who edited their page title saw "1 page modified · 1 field changed"
+ * counting only the block they had also touched, and no mention of the title at
+ * all. The draft held the change; the screen that exists to show what will
+ * change did not show it.
+ *
+ * `ogImage` is typed as an image so the UI renders a thumbnail rather than a
+ * URL, matching how block image fields already behave.
+ */
+const PAGE_META_FIELDS = [
+    ["title", "text"],
+    ["description", "text"],
+    ["ogImage", "image"],
+    ["path", "other"]
+];
+function diffPageMeta(before, after) {
+    const b = (before.meta ?? {});
+    const a = (after.meta ?? {});
+    const out = [];
+    for (const [key, kind] of PAGE_META_FIELDS) {
+        const bv = b[key];
+        const av = a[key];
+        // Absent and empty are the same thing to a reader, and treating them as
+        // different produced phantom diffs on pages that had never had a value.
+        const normalise = (v) => (v === undefined || v === null || v === "" ? undefined : v);
+        if (normalise(bv) === normalise(av))
+            continue;
+        out.push({ path: `meta.${key}`, before: bv, after: av, kind });
+    }
+    return out;
+}
 // Keys of SiteConfig that drive the rendered SiteHeader chrome. We diff
 // only these to keep the publish UI focused on user-visible header changes;
 // `purpose`, `tone`, `constraints`, `themeOverrides` are AI/style context
@@ -276,6 +314,15 @@ export function computePublishDiff(draft, published, options) {
             if (bd.fieldDiffs)
                 totalChangedFields += bd.fieldDiffs.length;
         }
+        /*
+         * Page metadata counts as changed fields too.
+         *
+         * Three counters used to disagree on one screen — "1 field changed" here
+         * (blocks only), "2 changes" on the page row (which counted an added
+         * block), and "Publish 1 change" on the button — and a metadata edit moved
+         * none of them.
+         */
+        totalChangedFields += diff.metaDiffs?.length ?? 0;
     }
     const statusOrder = {
         added: 0,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@avocadostudio-ai/orchestrator-core",
-  "version": "0.11.5",
+  "version": "0.11.6",
   "type": "module",
   "exports": {
     "./package.json": "./package.json",
@@ -22,8 +22,8 @@
     "openai": "^4.87.1",
     "sharp": "^0.35.4",
     "zod": "^4.3.6",
-    "@avocadostudio-ai/migration-sdk": "^0.11.5",
-    "@avocadostudio-ai/shared": "^0.11.5"
+    "@avocadostudio-ai/migration-sdk": "^0.11.6",
+    "@avocadostudio-ai/shared": "^0.11.6"
   },
   "devDependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.220",