@bettercms-ai/mcp 0.84.5 → 0.85.0

package/dist/index.js

@@ -2504,6 +2504,72 @@ var DOCK_ICON_NAMES = [
 ];
 var DOCK_ICON_NAME_SET = new Set(DOCK_ICON_NAMES);
 
+// ../types/src/kit-v2.ts
+var OPEN_MODES = ["inline", "drill", "popover", "dialog"];
+var SHOW_IF_SCOPES = ["parent", "root"];
+var V2_SHAPES = ["block", "page", "entry", "global", "object"];
+var V2_PLACEMENTS = ["inline", "section", "page"];
+var KIT_CATEGORIES = [
+  "Navigation & chrome",
+  "Heroes",
+  "Features & storytelling",
+  "Social proof",
+  "Media & galleries",
+  "Commerce",
+  "Pricing & plans",
+  "Conversion & forms",
+  "Listings & feeds",
+  "Long-form & docs",
+  "Company & people",
+  "Events & places",
+  "Data & interactive",
+  "Advanced patterns"
+];
+var UI_REFUSAL_CODES = {
+  schema: [
+    "facet_unclassified",
+    "excluded_facet",
+    "depth_exceeded",
+    "validation_failed",
+    "hash_mismatch",
+    "non_finite_number",
+    "shape_kind_mismatch",
+    "block_field_unrenderable",
+    // rich text (richtext-features.ts richTextRefusal): `richtext.<code>:<detail>`
+    "block_not_accepted",
+    "derived_field",
+    "feature_unknown"
+  ],
+  build: [
+    "peer_missing",
+    "kit_major_unsupported",
+    "compile_error",
+    "nondeterministic",
+    "size_exceeded",
+    // CMS-stored UI (dock-ui.ts): an import off the allow-list; one name in both the repo and the CMS
+    "import_denied",
+    "name_conflict"
+  ],
+  protocol: ["unsupported", "handshake_timeout", "origin_mismatch", "write_denied"],
+  runtime: ["crashed", "blank", "csp_violation"],
+  // not_approved: publish_dock_ui on a version no one approved
+  policy: ["confirmation_required", "flag_off", "not_approved"]
+};
+var UI_REFUSAL_IDS = Object.keys(UI_REFUSAL_CODES).flatMap(
+  (f) => UI_REFUSAL_CODES[f].map((c) => `${f}.${c}`)
+);
+var KEY_RESERVED = /* @__PURE__ */ new Set(["derived", "layout", "page"]);
+var DERIVE_MINTED_RESERVED = /* @__PURE__ */ new Set([...KEY_RESERVED, "id"]);
+
+// ../types/src/dock-ui.ts
+var DOCK_UI_LIMITS = {
+  sourcesPerProject: 64,
+  bytesPerProject: 4 * 1024 * 1024,
+  bytesPerVersion: 256 * 1024,
+  bytesPerBundle: 512 * 1024
+};
+var DOCK_UI_NAME = /^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/;
+
 // src/tools.ts
 import { BetterCMSError } from "@bettercms-ai/sdk";
 
@@ -2742,9 +2808,10 @@ var MODEL_UPDATE_KEYS = [
   "fieldOrder",
   "fieldLabel",
   "fieldHelpText",
-  "override"
+  "override",
+  "v2"
 ];
-var NOTHING_TO_UPDATE = "Nothing to update: update_content_model changes the model's name, slug, description, urlPattern, fieldsets and field chrome (fieldUi, fieldFieldset, fieldOrder, fieldLabel, fieldHelpText). `fields` is not an argument: add a field with add_field, change one with update_field, delete with removeFields (remove_page_fields for a page).";
+var NOTHING_TO_UPDATE = "Nothing to update: update_content_model changes the model's name, slug, description, urlPattern, fieldsets, its V2 block (v2) and field chrome (fieldUi, fieldFieldset, fieldOrder, fieldLabel, fieldHelpText). `fields` is not an argument: add a field with add_field, change one with update_field, delete with removeFields (remove_page_fields for a page).";
 var updatesNothing = (args) => args.removeFields === void 0 && args.allowFieldRemoval === void 0 && !MODEL_UPDATE_KEYS.some((k) => args[k] !== void 0);
 function planFieldRemoval(model, keys, callerIfMatch) {
   const fields = model.fields ?? [];
@@ -2761,6 +2828,19 @@ function planFieldRemoval(model, keys, callerIfMatch) {
   const kept = fields.filter((f) => !drop.has(f.key));
   return ifMatch === void 0 ? { ok: true, fields: kept } : { ok: true, fields: kept, ifMatch };
 }
+var SOURCES_SERVER_OWNED = "sources_server_owned: `sources` is stamped by the server on every write (who last set ui, input and ai) and is never taken from a client. Drop it and send the facet itself.";
+function sourcesIn(fields, at = "") {
+  for (const f of Array.isArray(fields) ? fields : []) {
+    if (!f || typeof f !== "object") continue;
+    const path = at ? `${at}.${String(f.key)}` : String(f.key);
+    if (f.sources !== void 0) return path;
+    for (const list2 of CHILD_LISTS) {
+      const hit = sourcesIn(getIn(f, list2), path);
+      if (hit) return hit;
+    }
+  }
+  return null;
+}
 var CHILD_LISTS = [
   ["fields"],
   ["config", "zones", "nonRepeatable"],
@@ -2793,16 +2873,17 @@ function fieldAt(fields, keys) {
   patchAt(fields, keys, (f) => (found = f, f));
   return found;
 }
-function allKeys(fields) {
-  return fields.flatMap((f) => [
-    String(f.key),
-    ...CHILD_LISTS.flatMap((list2) => {
-      const kids = getIn(f, list2);
-      return Array.isArray(kids) ? allKeys(kids) : [];
-    })
-  ]);
+function siblingKeys(fields, keys) {
+  if (keys.length <= 1) return fields.map((f) => String(f.key));
+  const parent = fieldAt(fields, keys.slice(0, -1));
+  const self = keys[keys.length - 1];
+  for (const list2 of CHILD_LISTS) {
+    const kids = parent ? getIn(parent, list2) : void 0;
+    if (Array.isArray(kids) && kids.some((k) => k.key === self)) return kids.map((k) => String(k.key));
+  }
+  return [];
 }
-var CLEARABLE = ["helpText", "showIf", "requiredIf", "compare", "ui", "placement", "readOnly", "lockReason", "helpMore", "advanced", "recommendedMax", "openMode", "localized"];
+var CLEARABLE = ["helpText", "showIf", "requiredIf", "compare", "ui", "placement", "readOnly", "lockReason", "helpMore", "advanced", "recommendedMax", "openMode", "localized", "ai"];
 var SETTABLE = ["label", "required", ...CLEARABLE];
 function mergeConfig(current, patch) {
   const out = { ...current ?? {} };
@@ -2821,6 +2902,7 @@ function helpTextEcho(helpText, field) {
   return echoes ? `helpText repeats the field's label or value, which the editor already shows. Say what belongs here or its format in under 60 characters ("Whole number, no currency symbol."), or send null for none.` : null;
 }
 function planFieldEdit(model, edit, callerIfMatch) {
+  if (edit.sources !== void 0) return { ok: false, error: SOURCES_SERVER_OWNED };
   const fields = model.fields ?? [];
   const keys = typeof edit.path === "string" && edit.path ? edit.path.split(".") : [];
   const current = keys.length ? fieldAt(fields, keys) : void 0;
@@ -2835,12 +2917,12 @@ function planFieldEdit(model, edit, callerIfMatch) {
     };
   }
   const rename = typeof edit.key === "string" && edit.key !== current.key ? edit.key : void 0;
-  if (rename !== void 0 && allKeys(fields).includes(rename)) {
-    return { ok: false, error: `The key '${rename}' is already used in this schema; keys share one flat namespace, nested fields included.` };
+  if (rename !== void 0 && siblingKeys(fields, keys).includes(rename)) {
+    return { ok: false, error: `The key '${rename}' is already used by a field beside '${keys.join(".")}'. Two siblings can't share a key (the same key in a different group is fine).` };
   }
   const changes = SETTABLE.filter((k) => edit[k] !== void 0);
   if (!retype && rename === void 0 && edit.config === void 0 && changes.length === 0) {
-    return { ok: false, error: "Nothing to change: pass label, helpText, required, config, showIf, requiredIf, compare, ui, placement, readOnly, lockReason, helpMore, advanced, recommendedMax, openMode, localized, type or key." };
+    return { ok: false, error: "Nothing to change: pass label, helpText, required, config, showIf, requiredIf, compare, ui, placement, readOnly, lockReason, helpMore, advanced, recommendedMax, openMode, localized, ai, type or key." };
   }
   const echo = helpTextEcho(edit.helpText, { label: edit.label ?? current.label, defaultValue: current.defaultValue });
   if (echo) return { ok: false, error: echo };
@@ -2869,6 +2951,7 @@ function planFieldEdit(model, edit, callerIfMatch) {
   };
 }
 function planFieldAdd(model, field, after, callerIfMatch) {
+  if (field.sources !== void 0 || sourcesIn(field.fields)) return { ok: false, error: SOURCES_SERVER_OWNED };
   const fields = model.fields ?? [];
   const keys = field.key.split(".");
   const childKey = keys.pop();
@@ -2879,8 +2962,8 @@ function planFieldAdd(model, field, after, callerIfMatch) {
   if (lists.length > 1) return { ok: false, error: `'${parentPath}' holds two lists of fields (a fixed part and a repeating part); add this field in the dashboard, where you pick which.` };
   const list2 = lists[0] ?? (parent.type === "group" || parent.type === "repeater" ? ["fields"] : void 0);
   if (!list2) return { ok: false, error: `'${parentPath}' is a ${String(parent.type)} field: only a group or a repeater holds fields.` };
-  if (allKeys(fields).includes(childKey)) return { ok: false, error: `The key '${childKey}' is already used in this schema; keys share one flat namespace, nested fields included.` };
   const kids = getIn(parent, list2) ?? [];
+  if (kids.some((k) => k.key === childKey)) return { ok: false, error: `The key '${childKey}' is already used in '${parentPath}'. Two siblings can't share a key (the same key in a different group is fine).` };
   const at = after === void 0 ? kids.length : kids.findIndex((f) => f.key === after) + 1;
   if (after !== void 0 && at === 0) return { ok: false, error: `after: '${after}' is not a field of '${parentPath}'. Its fields: ${kids.map((f) => `'${String(f.key)}'`).join(", ") || "none"}.` };
   const next = patchAt(fields, keys, (p) => setIn(p, list2, [...kids.slice(0, at), { ...field, key: childKey }, ...kids.slice(at)]));
@@ -2959,6 +3042,14 @@ var LISTING_TAIL = /* @__PURE__ */ new Set([
   "start_integration_signin",
   "save_integration_template",
   "install_integration_template",
+  // CMS-stored custom dock UI: reached for once the stock controls and ui keys fall short.
+  "write_dock_ui",
+  "approve_dock_ui",
+  "validate_dock_ui",
+  "publish_dock_ui",
+  "list_dock_ui",
+  // A whole V2 schema at once: reached for when the field-by-field tools would take dozens of calls.
+  "write_schema",
   // The ABM campaign lane — also hidden from the default listing (ABM_TOOLS below).
   "research_account",
   "build_abm_page",
@@ -3010,7 +3101,7 @@ var toolMeta = (name) => ALWAYS_LOADED.has(name) ? { "anthropic/alwaysLoad": tru
 var TOOL_LOADING_INSTRUCTION = `TOOL SCHEMAS: a client with tool search lists most BetterCMS tools by name only. Before the first call to a tool whose schema you have not been shown, load it with the client's tool search, and load every tool the task needs in ONE search (for a renaming pass: update_field, update_content_model, update_component, list_components). A call made without the schema is refused by the client before it reaches BetterCMS ("Invalid tool parameters"): that is this, never a BetterCMS error, and never a reason to change the arguments.`;
 
 // src/tool-text.ts
-var ADD_FIELD_DESCRIPTION = "Append ONE field to a content model (`modelId`) or to a page's schema (`pageId`) \u2014 additive, never overwrites; a key already in use is refused. For a section/zone add ONE 'group' (fixed block) or 'repeater' (repeating list) carrying its child `fields`, not the zone's inner fields as separate top-level fields. Pass `after` to insert it after an existing top-level field instead of at the end; key 'a.b' adds b inside group/repeater a (after: a sibling); `ui`, `helpText`, `showIf`, `placement` and `fieldsetId` declare how it presents in the editor \u2014 read them back with get_content_model or get_page. On a page a 'group' is stored as type 'array' with `config.zones.nonRepeatable`: entry and delivery data carry `<key>.nonRepeatable.<sub>`, while data-bcms-field paths are `<key>.<sub>`. Schema only \u2014 never places a section; use componentize_sections to turn a group into a section. `multiselect` stores a string[] of `config.options`; `icon` is a BetterCMS icon name or an uploaded icon. To change a field that exists, use update_field. V2 keys (object, openMode, advanced, helpMore, recommendedMax, config.scale): \xA714 of bettercms://playbook/schema. Cross-field: `requiredIf` (showIf's shape) and `compare` [{op:gt|gte|lt|lte|eq|neq, field, message?}].";
+var ADD_FIELD_DESCRIPTION = "Append ONE field to a content model (`modelId`) or to a page's schema (`pageId`) \u2014 additive, never overwrites; a key already in use is refused. For a section/zone add ONE 'group' (fixed block) or 'repeater' (repeating list) carrying its child `fields`, not the zone's inner fields as separate top-level fields. Pass `after` to insert it after an existing top-level field instead of at the end; key 'a.b' adds b inside group/repeater a (after: a sibling); `ui`, `helpText`, `showIf`, `placement` and `fieldsetId` declare how it presents in the editor \u2014 read them back with get_content_model or get_page. On a page a 'group' is stored as type 'array' with `config.zones.nonRepeatable`: entry and delivery data carry `<key>.nonRepeatable.<sub>`, while data-bcms-field paths are `<key>.<sub>`. Schema only \u2014 never places a section; use componentize_sections to turn a group into a section. `multiselect` stores a string[] of `config.options`; `icon` is a BetterCMS icon name or an uploaded icon. To change a field that exists, use update_field. V2 keys (object, openMode, advanced, helpMore, recommendedMax, ai, config.scale): \xA714 of bettercms://playbook/schema. Cross-field: `requiredIf` (showIf's shape) and `compare` [{op:gt|gte|lt|lte|eq|neq, field, message?}].";
 var V2_LEAF_TYPES_NOTE = "`tags`: string[] taxonomy (config.options suggestions, max, allowCustom). `rating`: 0..config.max (5), step 1|0.5. `code`: {language?, code} or a string (config.languages).";
 var MOVE_STAGE_DESCRIPTION = "Move a content entry (`entryId`) or a page (`pageId`) to another editorial stage \u2014 this is how you take it OUT of review so it can be published. `workflowStage` is a stage key from get_workflow_board; pass `fromStage` to 409 if someone moved it first. Moving into the publish-gate stage is an approval and needs a publish-enabled connection. Publish afterwards with update_content_entry or update_page status:'published' \u2014 approving and publishing are deliberately two separate calls.";
 var WINDOW_NOTE = "{from?, until?}, ISO 8601 with offset: shown only between the two instants; null clears (skill publishing).";
@@ -3056,7 +3147,15 @@ var NEW_TOOL_TEXT = {
   start_integration_signin: "Start the vendor sign-in of an integration with `oauth`: a `url` the USER opens to sign in with their own OAuth app (register `redirectUri` in it first). Tokens stay on the server.",
   save_integration_template: "Save an integration as a workspace template: its shape, never a secret value or its settings, with copies of the collections its syncs write into.",
   install_integration_template: "Install a workspace template on this project: missing collections are created and the integration waits for approval (`approval.approveUrl`); `secretsNeeded` lists the env vars to set.",
-  test_integration_fetch: "Call the vendor once through the server, as the integration: an approved host only, with the integration's `inject` secrets added server-side and every secret redacted from the answer. The request itself takes no {{...}} templates, and the token endpoint cannot be called. Use it to read the response shape before writing a sync: `items`, `externalKey` and `map` are JSON Pointers into it. Bodies over 1 MB come back truncated. 409 integration_not_approved: an admin must approve it first."
+  test_integration_fetch: "Call the vendor once through the server, as the integration: an approved host only, with the integration's `inject` secrets added server-side and every secret redacted from the answer. The request itself takes no {{...}} templates, and the token endpoint cannot be called. Use it to read the response shape before writing a sync: `items`, `externalKey` and `map` are JSON Pointers into it. Bodies over 1 MB come back truncated. 409 integration_not_approved: an admin must approve it first.",
+  // CMS-stored custom dock UI: write → approve (the user's yes) → validate → publish. Recipe: skill dock-input.
+  write_dock_ui: "Save a custom dock input or panel (one .tsx `source`) as a new DRAFT version of `name` (a letter, then [a-z0-9-], \u226448), what `cms:<name>` imports resolve. Imports: react, react-dom, @bettercms-ai/kit/*, @bettercms-ai/dock-input, cms:<name>. Same bytes write nothing. Skill dock-input",
+  approve_dock_ui: "Approve the newest `version` for publishing. Show the user the source first; userApproved: true only after their yes. A later write drops it",
+  validate_dock_ui: "Check one version (default newest) without publishing: allowed imports, size caps, a name the repo also has. Answers the build receipt",
+  publish_dock_ui: "Publish an APPROVED version (default newest): validates first, refusing policy.not_approved, build.name_conflict or the build's refusals, then rebuilds the project's dock UI release",
+  list_dock_ui: "The project's dock UI sources, with usage against the limits",
+  // A V2 TypeSchema into a model (lane fields, through a change set) or a component's props (lane props).
+  write_schema: "Write a kit V2 TypeSchema into a model (lane fields, as a change set; model: null creates) or a component's props (lane props). Run dryRun first: a write whose `loss` is not all in acceptLoss is refused schema.loss_not_accepted"
 };
 var DELETE_PAGE_RUNTIME_BUNDLE = " Or, with no pageId, `runtimeBundle`: 'report' lists the duplicate pages derived from a server app's own bundle (`app/` folders); 'apply' retires them and their empty folders.";
 var FIELD_LOCKED_NOTE = "A readOnly 'developer' field keeps its stored value: changing or omitting it without schema access is 403 FIELD_LOCKED.";
@@ -3069,8 +3168,10 @@ var PARAM_TEXT = {
   readOnly: "'developer' = the value and this lock change only with schema access (needs lockReason); true = an editor marker",
   lockReason: "which system owns the value (\u2264 200 chars)",
   lockClears: "as on add_field; null clears it",
-  helpText: "shown under the field. Most fields get none: write it only for a format or unit, a place the canvas cannot show, a real constraint or a fallback, as one plain sentence under 90 characters with no semicolons, no dashes and no values from the page, never its label or value. Omitted: the platform writes it where one of those reasons holds.",
+  helpText: "shown under the field. Most fields get none: write it only for a format or unit, a place the canvas cannot show, a real constraint or a fallback, as one plain sentence of at most 160 characters with no semicolons, no dashes and no values from the page, never its label or value. Omitted: the platform writes it where one of those reasons holds.",
   helpMore: "longer help behind the \u24D8 next to the label, when one helpText line cannot carry it",
+  fieldAi: "true = the editor offers its AI assist on this field",
+  modelV2: "the V2 block {shape?, placement?, category?, variants?: {slug: {icon?, description?}}}; null clears it",
   advanced: "true = a rare or developer setting: it collects in a closed 'Advanced' section",
   recommendedMax: "a SOFT limit (characters, items or value): the editor warns past it, never refuses",
   openMode: "object/array/group/repeater: how the value (or each row) opens: 'inline', 'drill', 'popover' or 'dialog'",
@@ -3106,7 +3207,12 @@ var PARAM_TEXT = {
   focalX: "focal point, 0-1 across from the left edge; null resets to the centre",
   focalY: "focal point, 0-1 down from the top edge; null resets to the centre",
   mergeHref: "pageId only: the link field paired with `path` (the label). Both become ONE `button` field keyed `key` (default: their stem, primaryCtaHref \u2192 primaryCta). Each entry's DRAFT gets {label, href} and keeps the old values; the live copy changes on publish. ifMatch is the page's version. 409 CODE_RENDERED_ROUTE: do its `next` recipe in code",
-  confirmedInput: "true only after the user explicitly approved adding this custom input (`ui.input`); else setting or changing one is refused input_needs_confirmation. Removing one needs no approval"
+  confirmedInput: "true only after the user explicitly approved adding this custom input (`ui.input`); else setting or changing one is refused input_needs_confirmation. Removing one needs no approval",
+  dockUiUserApproved: "true only after the user said yes to this version",
+  dockUiTarget: "per scope: field {modelId|pageId|componentId, path}, section {componentId}, page {pageId}, layout {}",
+  writeSchemaModel: "model or component id/slug; null creates a model",
+  writeSchemaAcceptLoss: "loss keys or paths you accept",
+  writeSchemaIfMatch: "the dry run's `version`; needed to write over a stored row"
 };
 var INTEGRATION_PARAM_TEXT = {
   integration: "the integration's id or slug (from list_integrations)",
@@ -3136,7 +3242,7 @@ var INTEGRATION_PARAM_TEXT = {
 var INPUT_CONFIRMED_HEADER = "x-bcms-confirmed-input";
 var BUTTON_FIELD_NOTE = "'button' is ONE call to action, value {label, href, variant? (a Button family look), size?, arrow?, icon?, newTab?, rel?, fullWidth?} (arrow:false, icon:null off): never a text field beside a link field.";
 var LINK_VALUE_NOTE = "A link or button href: a URL string or {type: url|page|entry|email|phone|anchor|file, href, title?, newTab?, rel?, section?, ref: page/entry id}.";
-var UPDATE_FIELD_DESCRIPTION = "Change ONE existing field of a content model (`modelId`) or of a page's schema (`pageId`), addressed by `path`: its key, or dot-separated keys through groups and repeaters ('hero.title'). Set its label, helpText, required, validation `config` (merged by key; null deletes one), showIf, requiredIf, compare, ui, placement, readOnly, lockReason, or the V2 helpMore, advanced, recommendedMax and openMode (null clears those). The rest of the schema is written back unchanged at the version read; a 409 means it changed since, so read again. `type` changes how every stored value is read and needs allowRetype: true. `key` renames it: stored values stay under the old key, so the route answers 409 with the entry count unless allowFieldRemoval: true discards them \u2014 migrate the values first. Ask the user before a retype or a rename. A page's label + link pair (primaryCtaText + primaryCtaHref) becomes one button with `mergeHref`.";
+var UPDATE_FIELD_DESCRIPTION = "Change ONE existing field of a content model (`modelId`) or of a page's schema (`pageId`), addressed by `path`: its key, or dot-separated keys through groups and repeaters ('hero.title'). Set its label, helpText, required, validation `config` (merged by key; null deletes one), showIf, requiredIf, compare, ui, placement, readOnly, lockReason, or the V2 helpMore, advanced, recommendedMax, openMode and ai (null clears those; `sources` is server-owned and refused). The rest of the schema is written back unchanged at the version read; a 409 means it changed since, so read again. `type` changes how every stored value is read and needs allowRetype: true. `key` renames it: stored values stay under the old key, so the route answers 409 with the entry count unless allowFieldRemoval: true discards them \u2014 migrate the values first. Ask the user before a retype or a rename. A page's label + link pair (primaryCtaText + primaryCtaHref) becomes one button with `mergeHref`.";
 var GET_SEO_DESCRIPTION = "Get the connected project's site-wide SEO settings \u2014 every key update_seo writes: seoDefaults (metaTitle, metaDescription, ogImage, twitterHandle, og, twitter, collectionSchemaTypes), siteSchema (the site's JSON-LD), robotsConfig, sitemapConfig, rssConfig, indexnowConfig and searchConfig.";
 var UPDATE_SEO_DESCRIPTION = "Set the connected project's site-wide SEO defaults and config. Each key you send is REPLACED whole (not deep-merged), so read get_seo and send the complete object. `seoDefaults` applies to every page that does not override it, and its `collectionSchemaTypes` maps a collection's model id to the schema.org type of its entries. `siteSchema` is the site's own JSON-LD (Organization/WebSite, emitted on the home page). `robotsConfig`, `sitemapConfig` and `rssConfig` shape robots.txt, sitemap.xml and the feed; `indexnowConfig` pings search engines on publish; `searchConfig` is site search. A key the plan does not include answers 403 FEATURE_LOCKED. Rebuilds the site.";
 var SEO_KEY_TEXT = {
@@ -3402,13 +3508,14 @@ var OPEN_MODE_INVALID = "openMode_invalid: openMode must be one of 'inline', 'dr
 var slug = z.string().regex(/^[a-z0-9-]+$/, "lowercase letters, numbers, and hyphens only");
 var fieldKey = z.string().regex(/^[a-zA-Z0-9_-]+$/, "letters, numbers, underscores, and hyphens only");
 var dockIconArg = z.string().min(1).max(40).refine((v) => DOCK_ICON_SET.has(v), `not a dock icon, see ${DOCK_ICONS_URI}`);
-var fieldCondition = z.object({
+var fieldCondition = z.strictObject({
   match: z.enum(["all", "any"]),
   rules: z.array(
-    z.object({
+    z.strictObject({
       field: z.string().describe("the BARE KEY of another field on this same model"),
       op: z.enum(["eq", "neq", "in", "notIn", "gt", "lt", "isSet", "notEmpty", "empty"]),
-      value: z.union([z.string(), z.array(z.string())]).optional().describe(`omit for 'isSet'/'notEmpty' (the source holds any value) and 'empty' (it holds none); 'gt'/'lt' take one number as a string ("10"); required for every other op`)
+      value: z.union([z.string(), z.array(z.string())]).optional().describe(`omit for 'isSet'/'notEmpty' (the source holds any value) and 'empty' (it holds none); 'gt'/'lt' take one number as a string ("10"); required for every other op`),
+      scope: z.enum(SHOW_IF_SCOPES).optional().describe("where `field` is looked up: absent = a sibling, 'parent' = the object holding the siblings, 'root' = the top of the entry or component")
     })
   )
 });
@@ -3444,7 +3551,7 @@ var uiObject = z.strictObject({
   reference: z.object({ integration: z.string(), key: z.string() }).strict().optional().describe("a json field holding a live vendor item: the integration's slug and reference key."),
   access: z.strictObject({ view: z.literal("schema.view").optional(), edit: z.literal("schema.manage").optional() }).optional().describe("who sees (view: developer-only) and who changes (edit) it, gated in the editor. The enforced lock is readOnly:'developer'."),
   hidden: z.boolean().optional().describe("true: never shown in the form (a system value). A conditional hide is showIf."),
-  blocks: z.record(z.string(), z.strictObject({ icon: dockIconArg.optional(), preview: z.record(z.string(), z.string()).optional() })).optional().describe("modular only: per block slug, {icon?, preview?} for its rows."),
+  blocks: z.record(z.string(), z.strictObject({ icon: dockIconArg.optional(), preview: z.record(z.string(), z.string()).optional(), openMode: z.enum(OPEN_MODES).optional() })).optional().describe("modular only: per block slug, {icon?, preview?, openMode?} for its rows."),
   input: z.object({
     name: z.string().regex(/^[a-z][a-z0-9-]{0,47}$/),
     writes: z.array(z.string().min(1).max(64)).max(16).optional()
@@ -3475,7 +3582,7 @@ var propUiObject = uiObject.extend({
 var choiceOption = z.union([z.string(), z.object({ label: z.string(), value: z.string(), icon: z.string().optional(), description: z.string().optional() })]);
 var fieldShape = {
   key: fieldKey.describe(
-    "machine field key. \u{1F534} UNIQUE ACROSS THE WHOLE MODEL \u2014 API IDs share ONE FLAT NAMESPACE, so a field nested inside a group must NOT reuse a key used by another field or group. Every section's heading cannot be 'title'. Prefix with the section: 'hero_title', 'pricing_title', 'faq_title'. Reusing a key is refused, and if it slips through it leaves permanent errors in the editor and breaks conditional-visibility rules, which reference fields by bare key. Keys derived from an imported site may contain hyphens ('hero-h1-welcome'): address them exactly as returned."
+    "machine field key, unique among its SIBLINGS (the top level, or one group's children): two siblings with one key are refused, the same key in two groups ('hero.title', 'faq.title') is fine. Keys derived from an imported site may contain hyphens ('hero-h1-welcome'): address them exactly as returned."
   ),
   label: z.string().min(1).describe("human label shown in the editor"),
   type: fieldType.describe(`field type. ${BUTTON_FIELD_NOTE} ${LINK_VALUE_NOTE}`),
@@ -3532,10 +3639,20 @@ var fieldShape = {
   helpMore: z.string().max(2e3).optional().describe(PARAM_TEXT.helpMore),
   advanced: z.boolean().optional().describe(PARAM_TEXT.advanced),
   recommendedMax: z.number().int().positive().optional().describe(PARAM_TEXT.recommendedMax),
-  openMode: z.enum(["inline", "drill", "popover", "dialog"], { error: OPEN_MODE_INVALID }).optional().describe(PARAM_TEXT.openMode),
-  localized: z.boolean().optional()
+  openMode: z.enum(OPEN_MODES, { error: OPEN_MODE_INVALID }).optional().describe(PARAM_TEXT.openMode),
+  localized: z.boolean().optional(),
+  ai: z.boolean().optional().describe(PARAM_TEXT.fieldAi),
+  // Server-owned provenance (types DefSources): declared only so a client that sends it reads why.
+  sources: z.never({ error: SOURCES_SERVER_OWNED }).optional()
 };
-var fieldObject = z.object(fieldShape);
+var fieldObject = z.strictObject(fieldShape);
+var modelV2Arg = z.strictObject({
+  shape: z.enum(V2_SHAPES).optional(),
+  placement: z.enum(V2_PLACEMENTS).optional(),
+  category: z.enum(KIT_CATEGORIES).optional(),
+  variants: z.record(z.string(), z.strictObject({ icon: dockIconArg.optional(), description: z.string().optional() })).optional()
+}).nullable().optional().describe(PARAM_TEXT.modelV2);
+var dockUiName = z.string().regex(DOCK_UI_NAME).describe("[a-z0-9-], \u226464");
 var urlPatternArg = z.string().nullable().optional().describe(
   "the public URL of one entry, e.g. '/blog/:slug'. Must start with '/' and contain ':slug' exactly once ('{slug}' is refused). Drives RSS item links and the automatic 301 when an entry's slug changes. null clears it."
 );
@@ -3590,31 +3707,29 @@ var seoPatchShape = {
   searchConfig: z.object({ enabled: z.boolean(), placeholder: z.string().max(120), aiEnabled: z.boolean().optional() }).optional().describe(SEO_KEY_TEXT.searchConfig)
 };
 var PAGES_NOT_COLLECTIONS_NOTE = "A collection is only for items one template route repeats (/blog/:slug: set urlPattern). A single page's copy (home, about, contact, pricing, legal) is page fields in sections (add_field with pageId / set_page_content), never a one-entry collection.";
-function flatFieldKeys(fields) {
+function siblingDuplicateKeys(fields) {
   const out = [];
-  const childrenOf = (f) => {
+  const levelsOf = (f) => {
     const zones = f.config?.zones;
-    if (zones?.nonRepeatable) return zones.nonRepeatable;
-    if (zones?.repeatable?.fields) return zones.repeatable.fields;
-    return f.fields ?? [];
+    return [f.fields, zones?.nonRepeatable, zones?.repeatable?.fields].filter((l) => Array.isArray(l));
   };
-  for (const raw of Array.isArray(fields) ? fields : []) {
-    const f = raw;
-    if (typeof f?.key === "string" && f.key.trim()) out.push(f.key.trim());
-    for (const raw2 of childrenOf(f)) {
-      const c = raw2;
-      if (typeof c?.key === "string" && c.key.trim()) out.push(c.key.trim());
+  const walk = (level) => {
+    const seen = /* @__PURE__ */ new Set();
+    for (const raw of level) {
+      const f = raw;
+      const key = typeof f?.key === "string" ? f.key.trim() : "";
+      if (key) {
+        if (seen.has(key) && !out.includes(key)) out.push(key);
+        seen.add(key);
+      }
+      if (f && typeof f === "object") for (const child of levelsOf(f)) walk(child);
     }
-  }
+  };
+  walk(Array.isArray(fields) ? fields : []);
   return out;
 }
-function duplicateKeys(keys) {
-  const seen = /* @__PURE__ */ new Map();
-  for (const k of keys) seen.set(k, (seen.get(k) ?? 0) + 1);
-  return [...new Set(keys)].filter((k) => (seen.get(k) ?? 0) > 1);
-}
 function duplicateKeyFailure(dupes) {
-  return `Duplicate API ID${dupes.length === 1 ? "" : "s"}: ${dupes.map((k) => `'${k}'`).join(", ")}. API IDs share ONE flat namespace across the whole model \u2014 a field inside a group must not reuse a key used by another field or group. Prefix each key with its section and retry (e.g. 'hero_title' and 'pricing_title', never 'title' in both).`;
+  return `Duplicate API ID${dupes.length === 1 ? "" : "s"}: ${dupes.map((k) => `'${k}'`).join(", ")}. Two fields at the same level (the top level, or one group's children) share it, and a value is stored at its key's path, so one would overwrite the other. Rename one (e.g. 'title' and 'subtitle'); the same key in DIFFERENT groups is fine ('hero.title', 'pricing.title').`;
 }
 function toFields(fs) {
   return (fs ?? []).map(toField);
@@ -3689,7 +3804,8 @@ function toField(f) {
     ...f.helpMore !== void 0 ? { helpMore: f.helpMore } : {},
     ...f.advanced !== void 0 ? { advanced: f.advanced } : {},
     ...f.recommendedMax !== void 0 ? { recommendedMax: f.recommendedMax } : {},
-    ...f.openMode !== void 0 ? { openMode: f.openMode } : {}
+    ...f.openMode !== void 0 ? { openMode: f.openMode } : {},
+    ...f.ai !== void 0 ? { ai: f.ai } : {}
   };
   if (f.type === "object") {
     return { ...base, type: "object", fields: toFields(f.fields) };
@@ -4700,6 +4816,72 @@ ${d.outline}` : "Proposed Content structure.", d);
         z.object({ pageId: z.string().min(1), blockId: z.string().min(1).describe("a top-level section id (get_page)"), name: z.string().min(1).describe("80 characters at most; a longer one is refused as SAVED_BLOCK_NAME_TOO_LONG") }).shape,
         async (c, a) => ok("Saved the section as a reusable block.", await data(c, "POST", `/management/saved-blocks`, { pageId: a.pageId, blockId: a.blockId, name: a.name }))
       ),
+      // ── CMS-stored custom dock UI (write → approve → validate → publish) ──
+      def(
+        "write_dock_ui",
+        "Write custom dock UI",
+        NEW_TOOL_TEXT.write_dock_ui,
+        z.object({
+          name: dockUiName,
+          scope: z.enum(["field", "section", "page", "layout"]),
+          kind: z.enum(["input", "panel"]),
+          target: z.record(z.string(), z.unknown()).describe(PARAM_TEXT.dockUiTarget),
+          source: z.string().min(1).describe(".tsx, \u2264256 KiB")
+        }).shape,
+        async (c, a) => ok("Saved the dock UI version as a draft.", await data(c, "POST", `/management/dock-ui`, { name: a.name, scope: a.scope, kind: a.kind, target: a.target, source: a.source }))
+      ),
+      def(
+        "approve_dock_ui",
+        "Approve custom dock UI",
+        NEW_TOOL_TEXT.approve_dock_ui,
+        z.object({ name: dockUiName, version: z.number().int().min(1), userApproved: z.boolean().optional().describe(PARAM_TEXT.dockUiUserApproved) }).shape,
+        async (c, a) => ok("Approved the dock UI version.", (await c.fetchJSON(c.url(`/management/dock-ui/${encodeURIComponent(s(a.name))}/approve`), {
+          method: "POST",
+          body: JSON.stringify({ version: a.version }),
+          ...withHeaders(a.userApproved === true ? { [INPUT_CONFIRMED_HEADER]: "true" } : {})
+        })).data)
+      ),
+      def(
+        "validate_dock_ui",
+        "Validate custom dock UI",
+        NEW_TOOL_TEXT.validate_dock_ui,
+        z.object({ name: dockUiName, version: z.number().int().min(1).optional() }).shape,
+        async (c, a) => ok("Dock UI build receipt.", await data(c, "POST", `/management/dock-ui/${encodeURIComponent(s(a.name))}/validate`, { version: a.version }))
+      ),
+      def(
+        "publish_dock_ui",
+        "Publish custom dock UI",
+        NEW_TOOL_TEXT.publish_dock_ui,
+        z.object({ name: dockUiName, version: z.number().int().min(1).optional() }).shape,
+        async (c, a) => ok("Published the dock UI version.", await data(c, "POST", `/management/dock-ui/${encodeURIComponent(s(a.name))}/publish`, { version: a.version }))
+      ),
+      def(
+        "list_dock_ui",
+        "List custom dock UI",
+        NEW_TOOL_TEXT.list_dock_ui,
+        z.object({ scope: z.enum(["field", "section", "page", "layout"]).optional(), status: z.enum(["draft", "approved", "published"]).optional() }).shape,
+        async (c, a) => ok("Dock UI sources.", await data(c, "GET", `/management/dock-ui${q({ scope: a.scope, status: a.status })}`))
+      ),
+      // ── A V2 TypeSchema in one write (kit A9/C6): a model change set, a model create, or a component's props ──
+      def(
+        "write_schema",
+        "Write a V2 schema",
+        NEW_TOOL_TEXT.write_schema,
+        z.object({
+          model: z.string().min(1).nullable().describe(PARAM_TEXT.writeSchemaModel),
+          lane: z.enum(["fields", "props"]),
+          schema: z.record(z.string(), z.unknown()).describe("{ name, title, kind, fields, \u2026 }"),
+          acceptLoss: z.array(z.string().min(1)).optional().describe(PARAM_TEXT.writeSchemaAcceptLoss),
+          dryRun: z.boolean().optional(),
+          ifMatch: z.number().int().min(0).optional().describe(PARAM_TEXT.writeSchemaIfMatch),
+          confirmed: z.boolean().optional().describe(PARAM_TEXT.confirmedInput)
+        }).shape,
+        async (c, a) => ok(a.dryRun ? "Dry run of the schema write: nothing was written." : "Wrote the schema.", (await c.fetchJSON(c.url(`/management/schema`), {
+          method: "POST",
+          body: JSON.stringify({ model: a.model, lane: a.lane, schema: a.schema, acceptLoss: a.acceptLoss, dryRun: a.dryRun }),
+          ...withHeaders({ ...a.ifMatch !== void 0 ? { "If-Match": `W/"${a.ifMatch}"` } : {}, ...confirmedHeaders(a.confirmed) })
+        })).data)
+      ),
       def(
         "get_seo",
         "Get site SEO",
@@ -4957,6 +5139,7 @@ ${d.outline}` : "Proposed Content structure.", d);
           fieldOrder: z.strictObject({ parentPath: z.string().min(1).optional(), order: z.array(z.string().min(1)).min(1).max(200) }).optional().describe("the full new order of one parent's child keys (top level without parentPath). An array with both zones needs 'KEY.zones.nonRepeatable' or 'KEY.zones.repeatable'; its bare key is a 400"),
           fieldLabel: z.record(z.string(), z.string().min(1).max(255)).optional().describe('path or "<family>#section" \u2192 label'),
           fieldHelpText: z.record(z.string(), z.string().max(500).nullable()).optional().describe("path \u2192 help text, null clears it"),
+          v2: modelV2Arg,
           override: z.boolean().optional().describe(OVERRIDE_NOTE),
           ifMatch: z.number().int().min(0).optional().describe(MODEL_IF_MATCH_NOTE),
           removeFields: z.array(z.string().min(1)).min(1).max(100).optional().describe(FIELD_REMOVAL_NOTE),
@@ -5187,8 +5370,8 @@ ${d.outline}` : "Proposed Content structure.", d);
           helpText: z.string().nullable().optional().describe("null clears it"),
           required: z.boolean().optional(),
           config: z.record(z.string(), z.unknown()).optional().describe("per-type validation/config keys, merged into the stored config; null deletes a key"),
-          showIf: z.record(z.string(), z.unknown()).nullable().optional().describe("same shape as on add_field; null clears it"),
-          requiredIf: z.record(z.string(), z.unknown()).nullable().optional().describe("same shape as on add_field; null clears it"),
+          showIf: fieldCondition.nullable().optional().describe("same shape as on add_field; null clears it"),
+          requiredIf: fieldCondition.nullable().optional().describe("same shape as on add_field; null clears it"),
           compare: z.array(z.record(z.string(), z.unknown())).nullable().optional().describe("same shape as on add_field; null clears it"),
           ui: z.record(z.string(), z.unknown()).nullable().optional().describe("same vocabulary as on add_field; merged per key, a null key or ui:null clears"),
           placement: z.enum(["cover", "title", "excerpt", "body", "inline", "panel"]).nullable().optional(),
@@ -5197,10 +5380,12 @@ ${d.outline}` : "Proposed Content structure.", d);
           helpMore: z.string().max(2e3).nullable().optional().describe(PARAM_TEXT.helpMore),
           advanced: z.boolean().nullable().optional().describe(PARAM_TEXT.advanced),
           recommendedMax: z.number().int().positive().nullable().optional().describe(PARAM_TEXT.recommendedMax),
-          openMode: z.enum(["inline", "drill", "popover", "dialog"], { error: OPEN_MODE_INVALID }).nullable().optional().describe(PARAM_TEXT.openMode),
+          openMode: z.enum(OPEN_MODES, { error: OPEN_MODE_INVALID }).nullable().optional().describe(PARAM_TEXT.openMode),
           localized: z.boolean().nullable().optional(),
+          ai: z.boolean().nullable().optional().describe(PARAM_TEXT.fieldAi),
+          sources: z.never({ error: SOURCES_SERVER_OWNED }).optional(),
           type: fieldType.optional().describe("a new type; needs allowRetype"),
-          key: fieldKey.optional().describe("a new key (flat namespace, unique in the schema)"),
+          key: fieldKey.optional().describe("a new key (unique among its siblings)"),
           allowRetype: z.boolean().optional().describe("confirm a type change, once the user has agreed"),
           allowFieldRemoval: z.boolean().optional().describe("with a rename: discard the old key's stored values"),
           mergeHref: z.string().min(1).optional().describe(PARAM_TEXT.mergeHref),
@@ -5974,12 +6159,12 @@ ${d.outline}` : "Proposed Content structure.", d);
       name: "create_page",
       config: {
         title: "Create a page",
-        description: "Create a page with its own typed schema. Supports pageType 'singleton' (exactly one entry \u2014 Home, About, Contact) and 'dynamic' (many entries sharing the schema \u2014 Blog posts, Products). Project-scoped from the key. Additive \u2014 does not delete or overwrite existing pages. FIRST read the page's real markup and DECOMPOSE it into a destructured tree: each visual section becomes a nested field \u2014 a fixed grouped block \u2192 type 'group', a repeating list of items (cards, testimonials, features, FAQs) \u2192 type 'repeater' \u2014 each carrying its own child `fields`. Do NOT flatten sections into many flat top-level fields. Build the full nested tree, then call this once. \u{1F534} Every field key must be UNIQUE ACROSS THE WHOLE TREE \u2014 the namespace is flat, so 'title' cannot appear in two sections; prefix each with its section ('hero_title', 'faq_title'). Prose fields (headings, body copy, descriptions) are created as RICH TEXT by default; pass richText:false for values that must stay bare strings \u2014 hrefs, slugs, ids, emails. That tree is the page's SCHEMA \u2014 what it holds. " + SECTION_DOCTRINE,
+        description: "Create a page with its own typed schema. Supports pageType 'singleton' (exactly one entry \u2014 Home, About, Contact) and 'dynamic' (many entries sharing the schema \u2014 Blog posts, Products). Project-scoped from the key. Additive \u2014 does not delete or overwrite existing pages. FIRST read the page's real markup and DECOMPOSE it into a destructured tree: each visual section becomes a nested field \u2014 a fixed grouped block \u2192 type 'group', a repeating list of items (cards, testimonials, features, FAQs) \u2192 type 'repeater' \u2014 each carrying its own child `fields`. Do NOT flatten sections into many flat top-level fields. Build the full nested tree, then call this once. Field keys are unique among siblings: 'title' may repeat in two sections, not twice in one. Prose fields (headings, body copy, descriptions) are created as RICH TEXT by default; pass richText:false for values that must stay bare strings \u2014 hrefs, slugs, ids, emails. That tree is the page's SCHEMA \u2014 what it holds. " + SECTION_DOCTRINE,
         inputSchema: createPageInput.shape
       },
       handler: guard(
         async (args) => withClient(async (client) => {
-          const dupes = duplicateKeys(flatFieldKeys(args.fields));
+          const dupes = siblingDuplicateKeys(args.fields);
           if (dupes.length > 0) return fail(duplicateKeyFailure(dupes));
           const page = await client.createPage({
             title: args.title,
@@ -6015,7 +6200,7 @@ ${notes.join("\n")}` : summary, created);
       },
       handler: guard(
         async (args) => withClient(async (client) => {
-          const modelDupes = duplicateKeys(flatFieldKeys(args.fields));
+          const modelDupes = siblingDuplicateKeys(args.fields);
           if (modelDupes.length > 0) return fail(duplicateKeyFailure(modelDupes));
           const input = {
             name: args.name,
@@ -6079,7 +6264,7 @@ ${notes.join("\n")}` : summary, created);
           }
           const modelId = args.modelId;
           const model = await client.getModel(modelId);
-          const dupes = duplicateKeys([...flatFieldKeys(model.fields), args.key]);
+          const dupes = (model.fields ?? []).some((f) => f?.key === args.key) ? [args.key] : [];
           if (dupes.length > 0) return fail(duplicateKeyFailure(dupes));
           const existingFields = model.fields;
           let at = existingFields.length;
@@ -7885,7 +8070,7 @@ delivered value \u2014 they change editor chrome only.
 
 - **\`helpText\`** \u2014 the exception: most fields get none. Write it only when the author needs it to
   type the right value: a format or unit ("Price in cents."), a placement the canvas cannot show, a
-  real constraint, a fallback. One plain sentence under 90 characters, no semicolons, no dashes, no values copied from the page. Never restate the label ("The title field"), never coach ("Keep it short").
+  real constraint, a fallback. One plain sentence of at most 160 characters, no semicolons, no dashes, no values copied from the page. Never restate the label ("The title field"), never coach ("Keep it short").
 - **\`showIf\`** \u2014 hide a field until another has a value:
   \`{match:'all',rules:[{field:'link_type',op:'eq',value:'external'}]}\`. Rules name fields by
   BARE KEY, and the key namespace is FLAT across the model (\xA7 the duplicate-key rule), so the
@@ -8039,7 +8224,7 @@ An unknown \`openMode\` is refused with \`openMode_invalid\`, one on a leaf \`op
   schema: the same call with \`pageId\` instead of \`modelId\`, and the version from \`get_page\`'s
   \`backingModel\`.
 - A component's props: \`update_component\` with \`propUi\`, \`propGroup\`, \`propTab\`, \`propLabel\`, \`propHelpText\` (keyed by prop key).
-  Name props from the code (\`plan.cents\` \u2192 Cents); help text only where a format, a hidden placement, a constraint or a fallback needs it ("Whole number, no currency symbol."), one plain sentence under 90 characters with no semicolons or dashes, never repeating
+  Name props from the code (\`plan.cents\` \u2192 Cents); help text only where a format, a hidden placement, a constraint or a fallback needs it ("Whole number, no currency symbol."), one plain sentence of at most 160 characters with no semicolons or dashes, never repeating
   the value; repeated cards are one \`table\` prop. An icon (\`config.media: "icon"\`) is content: group it, never prune it.
   They write the DRAFT props; no publish is needed for the editor to show them.
 - Always send \`ifMatch\`, the \`optimisticVersion\` you read.