@blokkli/editor 2.0.0-alpha.45 → 2.0.0-alpha.47

package/dist/module.d.mts

@@ -1,6 +1,6 @@
 import { NuxtModule } from 'nuxt/schema';
-import { M as ModuleOptions } from './shared/editor.BdBm1Z7C.mjs';
-export { a as ModuleHooks } from './shared/editor.BdBm1Z7C.mjs';
+import { M as ModuleOptions } from './shared/editor.BVregnEC.mjs';
+export { a as ModuleHooks } from './shared/editor.BVregnEC.mjs';
 import 'consola';
 import '../dist/global/types/definitions.js';
 import '../dist/global/types/theme.js';

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@blokkli/editor",
   "configKey": "blokkli",
-  "version": "2.0.0-alpha.45",
+  "version": "2.0.0-alpha.47",
   "compatibility": {
     "nuxt": ">=3.15.0"
   },

package/dist/module.mjs

@@ -18,7 +18,7 @@ import 'typescript';
 import 'oxc-walker';
 
 const name = "@blokkli/editor";
-const version = "2.0.0-alpha.45";
+const version = "2.0.0-alpha.47";
 
 function validateOption(optionKey, option, icons) {
   const errors = [];
@@ -1426,6 +1426,7 @@ const USED_MATERIAL_ICONS = [
   "bk_mdi_build-fill",
   "bk_mdi_calendar_clock",
   "bk_mdi_calendar_month",
+  "bk_mdi_campaign",
   "bk_mdi_chat",
   "bk_mdi_check",
   "bk_mdi_check_box",
@@ -1467,6 +1468,7 @@ const USED_MATERIAL_ICONS = [
   "bk_mdi_keyboard_arrow_down",
   "bk_mdi_keyboard_command_key",
   "bk_mdi_lists",
+  "bk_mdi_lock",
   "bk_mdi_logo_dev",
   "bk_mdi_menu",
   "bk_mdi_mobile",
@@ -2662,6 +2664,17 @@ export const forceDefaultLanguage = ${JSON.stringify(
     )}
 
 export const featureFragmentNames = ${JSON.stringify(featureFragmentNames)}
+
+export const textAutoReplace = ${(() => {
+      const opt = ctx.helper.options.textAutoReplace;
+      const all = opt === void 0 || opt === true;
+      const obj = typeof opt === "object" && opt !== null ? opt : null;
+      return JSON.stringify({
+        quotes: obj ? obj.quotes ?? true : all,
+        ellipsis: obj ? obj.ellipsis ?? true : all,
+        enDash: obj ? obj.enDash ?? true : all
+      });
+    })()}
 `;
   },
   (ctx) => {
@@ -2719,6 +2732,15 @@ export declare const forceDefaultLanguage: boolean
  * The fragment names provided by features.
  */
 export declare const featureFragmentNames: string[]
+
+/**
+ * Text auto-replace configuration.
+ */
+export declare const textAutoReplace: {
+  quotes: boolean
+  ellipsis: boolean
+  enDash: boolean
+}
 `;
   }
 );

package/dist/modules/agent/index.d.mts

@@ -1,4 +1,4 @@
-import { B as BlokkliModule } from '../../shared/editor.BdBm1Z7C.mjs';
+import { B as BlokkliModule } from '../../shared/editor.BVregnEC.mjs';
 import 'nuxt/schema';
 import 'consola';
 import '../../../dist/global/types/definitions.js';

package/dist/modules/agent/runtime/app/helpers/validation.d.ts

@@ -1,5 +1,7 @@
 import type { BlokkliApp } from '#blokkli/editor/types/app';
 import type { RenderedFieldListItem } from '#blokkli/editor/types/field';
+import type { BlockPermission } from '#blokkli/editor/types/definitions';
+import type { ToolError } from '../types/index.js';
 type ValidationResult = {
     valid: true;
 } | {
@@ -32,4 +34,15 @@ export declare function validateFieldCardinality(app: BlokkliApp, host: Rendered
  * Validate that all bundles are allowed in the field.
  */
 export declare function validateBundlesAllowed(app: BlokkliApp, host: RenderedFieldListItem['host'], bundles: string[]): ValidationResult;
+/**
+ * Check that none of the given blocks are inside a restricted ancestor.
+ * Returns a ToolError if any block has a restricted ancestor, or undefined if
+ * all are unrestricted.
+ */
+export declare function requireNoRestrictedAncestor(app: BlokkliApp, uuids: string[]): ToolError | undefined;
+/**
+ * Check that the user has a specific permission for all given bundles.
+ * Returns a ToolError if any bundle is denied, or undefined if all are allowed.
+ */
+export declare function requireBundlePermission(app: BlokkliApp, bundles: string[], operation: BlockPermission): ToolError | undefined;
 export {};

package/dist/modules/agent/runtime/app/helpers/validation.js

@@ -75,3 +75,25 @@ export function validateBundlesAllowed(app, host, bundles) {
   }
   return { valid: true };
 }
+export function requireNoRestrictedAncestor(app, uuids) {
+  for (const uuid of uuids) {
+    if (app.permissions.blockHasRestrictedAncestor(uuid)) {
+      return {
+        error: "Permission denied: block is inside a parent with restricted editing permissions"
+      };
+    }
+  }
+  return void 0;
+}
+export function requireBundlePermission(app, bundles, operation) {
+  const denied = app.permissions.filterDeniedBundles(bundles, operation);
+  if (denied.length > 0) {
+    const labels = denied.map(
+      (b) => app.types.getBlockBundleDefinition(b)?.label || b
+    );
+    return {
+      error: `Permission denied: cannot ${operation} ${labels.map((l) => `"${l}"`).join(", ")}`
+    };
+  }
+  return void 0;
+}

package/dist/modules/agent/runtime/app/tools/add_content_search_paragraph/index.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
 import { mutationResultSchema, parentSchema, positionSchema } from "../schemas.js";
 import { resolvePosition } from "../helpers.js";
+import { requireBundlePermission } from "../../helpers/validation.js";
 const paramsSchema = z.object({
   itemId: z.string().describe("Content item ID from search_content results"),
   itemEntityType: z.string().describe("Entity type of the content item"),
@@ -29,6 +30,17 @@ export default defineBlokkliAgentTool({
   resultSchema: mutationResultSchema,
   requiredAdapterMethods: ["addContentSearchItem"],
   execute(ctx, params) {
+    const denied = requireBundlePermission(
+      ctx.app,
+      [params.targetBundle],
+      "add"
+    );
+    if (denied) return denied;
+    if (ctx.app.permissions.blockHasRestrictedAncestor(params.parent.uuid)) {
+      return {
+        error: "Permission denied: target parent is inside a block with restricted editing permissions"
+      };
+    }
     const { $t, types } = ctx.app;
     const item = {
       id: params.itemId,

package/dist/modules/agent/runtime/app/tools/add_fragment/index.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
 import { mutationResultSchema, parentSchema, positionSchema } from "../schemas.js";
 import { resolvePosition } from "../helpers.js";
+import { fragmentBlockBundle } from "#blokkli-build/config";
 const paramsSchema = z.object({
   name: z.string().describe("The fragment name to add"),
   parent: parentSchema.describe("The parent entity to add the fragment to"),
@@ -21,7 +22,17 @@ export default defineBlokkliAgentTool({
   resultSchema: mutationResultSchema,
   requiredAdapterMethods: ["fragmentsAddBlock"],
   execute(ctx, params) {
-    const { fields, definitions } = ctx.app;
+    const { fields, definitions, permissions } = ctx.app;
+    if (!permissions.checkBlockBundlePermission(fragmentBlockBundle, "add")) {
+      return {
+        error: "Permission denied: cannot add fragment blocks."
+      };
+    }
+    if (permissions.blockHasRestrictedAncestor(params.parent.uuid)) {
+      return {
+        error: "Permission denied: target parent is inside a block with restricted editing permissions"
+      };
+    }
     const fragment = definitions.fragmentDefinitions.value.find(
       (f) => f.name === params.name
     );

package/dist/modules/agent/runtime/app/tools/add_media_paragraph/index.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
 import { mutationResultSchema, parentSchema, positionSchema } from "../schemas.js";
 import { resolvePosition } from "../helpers.js";
+import { requireBundlePermission } from "../../helpers/validation.js";
 const paramsSchema = z.object({
   mediaId: z.string().describe("Media item ID from search_media results"),
   mediaBundle: z.string().describe('Media bundle type (e.g., "image")'),
@@ -25,6 +26,17 @@ export default defineBlokkliAgentTool({
   resultSchema: mutationResultSchema,
   requiredAdapterMethods: ["mediaLibraryAddBlock"],
   execute(ctx, params) {
+    const denied = requireBundlePermission(
+      ctx.app,
+      [params.targetBundle],
+      "add"
+    );
+    if (denied) return denied;
+    if (ctx.app.permissions.blockHasRestrictedAncestor(params.parent.uuid)) {
+      return {
+        error: "Permission denied: target parent is inside a block with restricted editing permissions"
+      };
+    }
     const { $t, types } = ctx.app;
     const item = {
       itemType: "media_library",

package/dist/modules/agent/runtime/app/tools/add_paragraphs/index.js

@@ -115,6 +115,9 @@ function validateBlockTree(ctx, blocks, allowedBundles, fieldLabel, pathPrefix)
     if (allowedBundles.length && !allowedBundles.includes(block.bundle)) {
       return `${path}: Bundle "${block.bundle}" is not allowed in field "${fieldLabel}". Allowed bundles: ${allowedBundles.join(", ")}`;
     }
+    if (!ctx.app.permissions.checkBlockBundlePermission(block.bundle, "add")) {
+      return `${path}: Permission denied: cannot add "${bundleDefinition.label}" blocks.`;
+    }
     const contentError = validateContentFields(ctx, block, path);
     if (contentError) return contentError;
     const optionsError = validateBlockOptions(ctx, block, path);
@@ -243,6 +246,13 @@ export default defineBlokkliAgentTool({
         error: `Field "${params.parent.field}" not found on bundle "${bundle}". Available fields: ${availableFields.length ? availableFields.join(", ") : "none"}. Use get_child_paragraphs to get the correct parent object.`
       };
     }
+    if (!isRootEntity) {
+      if (ctx.app.permissions.blockHasRestrictedAncestor(params.parent.uuid)) {
+        return {
+          error: "Permission denied: target parent is inside a block with restricted editing permissions"
+        };
+      }
+    }
     const validationError = validateBlockTree(
       ctx,
       params.paragraphs,

package/dist/modules/agent/runtime/app/tools/add_reusable_paragraph/index.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
 import { mutationResultSchema, parentSchema, positionSchema } from "../schemas.js";
 import { resolvePosition } from "../helpers.js";
+import { requireBundlePermission } from "../../helpers/validation.js";
 import { fromLibraryBlockBundle, itemEntityType } from "#blokkli-build/config";
 const paramsSchema = z.object({
   libraryItemUuid: z.string().describe(
@@ -26,6 +27,17 @@ export default defineBlokkliAgentTool({
   resultSchema: mutationResultSchema,
   requiredAdapterMethods: ["addLibraryItem"],
   execute(ctx, params) {
+    const denied = requireBundlePermission(
+      ctx.app,
+      [fromLibraryBlockBundle],
+      "add"
+    );
+    if (denied) return denied;
+    if (ctx.app.permissions.blockHasRestrictedAncestor(params.parent.uuid)) {
+      return {
+        error: "Permission denied: target parent is inside a block with restricted editing permissions"
+      };
+    }
     const { types, fields, context, blocks, $t } = ctx.app;
     const field = fields.find(params.parent.uuid, params.parent.field);
     if (!field) {

package/dist/modules/agent/runtime/app/tools/add_template/index.js

@@ -24,6 +24,11 @@ export default defineBlokkliAgentTool({
   requiredAdapterMethods: ["templatesAdd"],
   execute(ctx, params) {
     const { fields, $t } = ctx.app;
+    if (ctx.app.permissions.blockHasRestrictedAncestor(params.parent.uuid)) {
+      return {
+        error: "Permission denied: target parent is inside a block with restricted editing permissions"
+      };
+    }
     const field = fields.find(params.parent.uuid, params.parent.field);
     if (!field) {
       return {

package/dist/modules/agent/runtime/app/tools/delegate_text_rewrite/index.js

@@ -1,6 +1,11 @@
 import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
 import { runReadabilityAnalysis } from "../helpers.js";
+import {
+  requireBundlePermission,
+  requireNoRestrictedAncestor
+} from "../../helpers/validation.js";
+import { onlyUnique } from "#blokkli/helpers";
 import Component from "./Component.vue";
 import DetailsComponent from "./Details/index.vue";
 const fieldSchema = z.object({
@@ -55,6 +60,16 @@ export default defineBlokkliAgentTool({
   buildDetails: (result) => result,
   async execute(ctx, params) {
     const { blocks, context } = ctx.app;
+    const bundles = params.fields.map((f) => blocks.getBlock(f.uuid)?.bundle).filter((b) => !!b).filter(onlyUnique);
+    if (bundles.length) {
+      const denied = requireBundlePermission(ctx.app, bundles, "edit");
+      if (denied) return denied;
+    }
+    const blockUuids = params.fields.map((f) => f.uuid).filter((uuid) => uuid !== context.value.entityUuid).filter(onlyUnique);
+    if (blockUuids.length) {
+      const ancestorDenied = requireNoRestrictedAncestor(ctx.app, blockUuids);
+      if (ancestorDenied) return ancestorDenied;
+    }
     const resolvedFields = [];
     for (const { uuid, fieldName } of params.fields) {
       let entityType;

package/dist/modules/agent/runtime/app/tools/delete_paragraphs/index.js

@@ -1,6 +1,10 @@
 import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
 import { mutationResultSchema } from "../schemas.js";
+import {
+  requireBundlePermission,
+  requireNoRestrictedAncestor
+} from "../../helpers/validation.js";
 const paramsSchema = z.object({
   uuids: z.array(z.string()).describe("The UUIDs of the paragraphs to delete")
 });
@@ -30,6 +34,14 @@ export default defineBlokkliAgentTool({
       }
       validBlocks.push({ uuid, bundle: block.bundle });
     }
+    const denied = requireBundlePermission(
+      ctx.app,
+      validBlocks.map((b) => b.bundle),
+      "delete"
+    );
+    if (denied) return denied;
+    const ancestorDenied = requireNoRestrictedAncestor(ctx.app, params.uuids);
+    if (ancestorDenied) return ancestorDenied;
     const { $t } = ctx.app;
     const firstBlock = validBlocks[0];
     const label = validBlocks.length === 1 && firstBlock ? $t("aiAgentDeleteBlockDone", "Deleted @bundle").replace(

package/dist/modules/agent/runtime/app/tools/detach_reusable_paragraph/index.js

@@ -1,6 +1,10 @@
 import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
 import { mutationResultSchema } from "../schemas.js";
+import {
+  requireBundlePermission,
+  requireNoRestrictedAncestor
+} from "../../helpers/validation.js";
 import { fromLibraryBlockBundle } from "#blokkli-build/config";
 const paramsSchema = z.object({
   uuids: z.array(z.string()).describe("UUIDs of library paragraphs to detach")
@@ -23,6 +27,14 @@ export default defineBlokkliAgentTool({
     if (params.uuids.length === 0) {
       return { error: "No paragraph UUIDs provided" };
     }
+    const denied = requireBundlePermission(
+      ctx.app,
+      [fromLibraryBlockBundle],
+      "edit"
+    );
+    if (denied) return denied;
+    const ancestorDenied = requireNoRestrictedAncestor(ctx.app, params.uuids);
+    if (ancestorDenied) return ancestorDenied;
     for (const uuid of params.uuids) {
       const block = blocks.getBlock(uuid);
       if (!block) {

package/dist/modules/agent/runtime/app/tools/duplicate_paragraphs/index.js

@@ -6,7 +6,9 @@ import {
   validateBlocksExist,
   validateSameField,
   validateFieldCardinality,
-  validateBundlesAllowed
+  validateBundlesAllowed,
+  requireBundlePermission,
+  requireNoRestrictedAncestor
 } from "../../helpers/validation.js";
 import { getFieldKey } from "#blokkli/helpers";
 import { itemEntityType } from "#blokkli-build/config";
@@ -34,6 +36,14 @@ export default defineBlokkliAgentTool({
     const { $t, types, context, blocks } = ctx.app;
     const blocksResult = validateBlocksExist(ctx.app, params.uuids);
     if ("error" in blocksResult) return blocksResult;
+    const denied = requireBundlePermission(
+      ctx.app,
+      blocksResult.blocks.map((b) => b.bundle),
+      "add"
+    );
+    if (denied) return denied;
+    const ancestorDenied = requireNoRestrictedAncestor(ctx.app, params.uuids);
+    if (ancestorDenied) return ancestorDenied;
     if (params.parent) {
       if (!ctx.adapter.pasteExistingBlocks) {
         return {
@@ -46,6 +56,11 @@ export default defineBlokkliAgentTool({
       if (!targetBundle) {
         return { error: "Target parent not found." };
       }
+      if (!isRootEntity && ctx.app.permissions.blockHasRestrictedAncestor(params.parent.uuid)) {
+        return {
+          error: "Permission denied: target parent is inside a block with restricted editing permissions"
+        };
+      }
       const fieldConfig = types.getFieldConfig(
         entityType,
         targetBundle,

package/dist/modules/agent/runtime/app/tools/move_paragraphs/index.js

@@ -2,6 +2,10 @@ import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
 import { mutationResultSchema, parentSchema, positionSchema } from "../schemas.js";
 import { resolvePosition } from "../helpers.js";
+import {
+  requireBundlePermission,
+  requireNoRestrictedAncestor
+} from "../../helpers/validation.js";
 const paramsSchema = z.object({
   uuids: z.array(z.string()).describe("The UUIDs of the paragraphs to move"),
   parent: parentSchema.describe("The target parent entity"),
@@ -33,6 +37,19 @@ export default defineBlokkliAgentTool({
       }
       validBlocks.push({ uuid, bundle: block.bundle });
     }
+    const denied = requireBundlePermission(
+      ctx.app,
+      validBlocks.map((b) => b.bundle),
+      "edit"
+    );
+    if (denied) return denied;
+    const ancestorDenied = requireNoRestrictedAncestor(ctx.app, params.uuids);
+    if (ancestorDenied) return ancestorDenied;
+    if (ctx.app.permissions.blockHasRestrictedAncestor(params.parent.uuid)) {
+      return {
+        error: "Permission denied: target parent is inside a block with restricted editing permissions"
+      };
+    }
     const { $t } = ctx.app;
     const firstBlock = validBlocks[0];
     const label = validBlocks.length === 1 && firstBlock ? $t("aiAgentMoveBlockDone", "Moved @bundle").replace(

package/dist/modules/agent/runtime/app/tools/rearrange_paragraphs/index.js

@@ -2,6 +2,10 @@ import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
 import { mutationResultSchema, parentSchema } from "../schemas.js";
 import { itemEntityType } from "#blokkli-build/config";
+import {
+  requireBundlePermission,
+  requireNoRestrictedAncestor
+} from "../../helpers/validation.js";
 const paramsSchema = z.object({
   parent: parentSchema.describe("The parent field containing the paragraphs"),
   uuids: z.array(z.string()).min(2).describe(
@@ -69,6 +73,13 @@ export default defineBlokkliAgentTool({
         };
       }
     }
+    const blockBundles = params.uuids.map((uuid) => blocks.getBlock(uuid)?.bundle).filter((b) => !!b);
+    if (blockBundles.length) {
+      const denied = requireBundlePermission(ctx.app, blockBundles, "edit");
+      if (denied) return denied;
+    }
+    const ancestorDenied = requireNoRestrictedAncestor(ctx.app, params.uuids);
+    if (ancestorDenied) return ancestorDenied;
     const isAlreadyInOrder = params.uuids.every(
       (uuid, i) => uuid === currentUuids[i]
     );

package/dist/modules/agent/runtime/app/tools/replace_content_search_item/index.js

@@ -1,6 +1,10 @@
 import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
 import { mutationResultSchema } from "../schemas.js";
+import {
+  requireBundlePermission,
+  requireNoRestrictedAncestor
+} from "../../helpers/validation.js";
 const paramsSchema = z.object({
   uuid: z.string().describe("The paragraph UUID containing the content reference field"),
   field: z.string().describe("The content field name (reference type)"),
@@ -30,6 +34,10 @@ export default defineBlokkliAgentTool({
     if (!block) {
       return { error: `Paragraph not found: ${params.uuid}` };
     }
+    const denied = requireBundlePermission(ctx.app, [block.bundle], "edit");
+    if (denied) return denied;
+    const ancestorDenied = requireNoRestrictedAncestor(ctx.app, [params.uuid]);
+    if (ancestorDenied) return ancestorDenied;
     const config = types.droppableFieldConfig.forName(
       ctx.itemEntityType,
       block.bundle,

package/dist/modules/agent/runtime/app/tools/replace_media_field/index.js

@@ -1,6 +1,10 @@
 import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
 import { mutationResultSchema } from "../schemas.js";
+import {
+  requireBundlePermission,
+  requireNoRestrictedAncestor
+} from "../../helpers/validation.js";
 const paramsSchema = z.object({
   uuid: z.string().describe("The paragraph UUID or entity UUID containing the media field"),
   field: z.string().describe("The content field name (reference type)"),
@@ -27,6 +31,12 @@ export default defineBlokkliAgentTool({
     if (!isEntity && !block) {
       return { error: `Paragraph not found: ${params.uuid}` };
     }
+    if (block) {
+      const denied = requireBundlePermission(ctx.app, [block.bundle], "edit");
+      if (denied) return denied;
+      const ancestorDenied = requireNoRestrictedAncestor(ctx.app, [params.uuid]);
+      if (ancestorDenied) return ancestorDenied;
+    }
     const entityType = isEntity ? context.value.entityType : ctx.itemEntityType;
     const bundle = isEntity ? context.value.entityBundle : block.bundle;
     const config = types.droppableFieldConfig.forName(

package/dist/modules/agent/runtime/app/tools/set_paragraph_options/index.js

@@ -7,6 +7,10 @@ import {
 import { mutationResultSchema, optionValueSchema } from "../schemas.js";
 import { validateOptionValue } from "../helpers.js";
 import { onlyUnique } from "#blokkli/helpers";
+import {
+  requireBundlePermission,
+  requireNoRestrictedAncestor
+} from "../../helpers/validation.js";
 const paragraphOptionsSchema = z.object({
   uuid: z.string().describe("The paragraph UUID"),
   options: z.record(z.string(), optionValueSchema).describe("Options to set as key-value pairs")
@@ -43,6 +47,12 @@ export default defineBlokkliAgentTool({
       if (!block) {
         return { error: `Paragraph not found: ${blockEntry.uuid}` };
       }
+      const denied = requireBundlePermission(ctx.app, [block.bundle], "edit");
+      if (denied) return denied;
+      const ancestorDenied = requireNoRestrictedAncestor(ctx.app, [
+        blockEntry.uuid
+      ]);
+      if (ancestorDenied) return ancestorDenied;
       const bundle = block.library?.reusableBundle || block.bundle;
       const selectionItem = selection.items.value.find(
         (v) => v.uuid === blockEntry.uuid

package/dist/modules/agent/runtime/app/tools/swap_paragraphs/index.js

@@ -1,6 +1,10 @@
 import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
 import { mutationResultSchema } from "../schemas.js";
+import {
+  requireBundlePermission,
+  requireNoRestrictedAncestor
+} from "../../helpers/validation.js";
 const paramsSchema = z.object({
   uuidA: z.string().describe("First paragraph UUID"),
   uuidB: z.string().describe("Second paragraph UUID")
@@ -31,6 +35,17 @@ export default defineBlokkliAgentTool({
     if (!blockB) {
       return { error: `Paragraph not found: ${params.uuidB}` };
     }
+    const denied = requireBundlePermission(
+      ctx.app,
+      [blockA.bundle, blockB.bundle],
+      "edit"
+    );
+    if (denied) return denied;
+    const ancestorDenied = requireNoRestrictedAncestor(ctx.app, [
+      params.uuidA,
+      params.uuidB
+    ]);
+    if (ancestorDenied) return ancestorDenied;
     const fieldConfigA = types.getFieldConfig(
       blockA.host.type,
       blockA.host.bundle,

package/dist/modules/agent/runtime/app/tools/update_text_fields/index.js

@@ -1,5 +1,10 @@
 import { z } from "zod";
 import { defineBlokkliAgentTool } from "#blokkli/agent/app/composables";
+import {
+  requireBundlePermission,
+  requireNoRestrictedAncestor
+} from "../../helpers/validation.js";
+import { onlyUnique } from "#blokkli/helpers";
 import Component from "./Component.vue";
 import DetailsComponent from "./Details/index.vue";
 const operationSchema = z.object({
@@ -61,7 +66,22 @@ export default defineBlokkliAgentTool({
   component: Component,
   detailsComponent: DetailsComponent,
   buildDetails: (result) => result,
-  execute(_ctx, params) {
+  execute(ctx, params) {
+    const blockUuids = [];
+    if (params.uuids) {
+      blockUuids.push(...Object.keys(params.uuids));
+    }
+    if (params.operations) {
+      blockUuids.push(...params.operations.map((op) => op.uuid));
+    }
+    const bundles = blockUuids.filter(onlyUnique).map((uuid) => ctx.app.blocks.getBlock(uuid)?.bundle).filter((b) => !!b).filter(onlyUnique);
+    if (bundles.length) {
+      const denied = requireBundlePermission(ctx.app, bundles, "edit");
+      if (denied) return denied;
+    }
+    const uniqueUuids = blockUuids.filter(onlyUnique);
+    const ancestorDenied = requireNoRestrictedAncestor(ctx.app, uniqueUuids);
+    if (ancestorDenied) return ancestorDenied;
     return params;
   },
   mockParams: () => ({

package/dist/modules/agent/runtime/app/types/index.d.ts

@@ -297,11 +297,11 @@ declare const userConversationItemSchema: z.ZodObject<{
         id: z.ZodString;
         content: z.ZodString;
         format: z.ZodEnum<{
+            html: "html";
             code: "code";
             markdown: "markdown";
-            html: "html";
-            plaintext: "plaintext";
             csv: "csv";
+            plaintext: "plaintext";
         }>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
@@ -326,9 +326,9 @@ declare const toolConversationItemSchema: z.ZodObject<{
     tool: z.ZodString;
     label: z.ZodString;
     status: z.ZodEnum<{
+        active: "active";
         success: "success";
         error: "error";
-        active: "active";
     }>;
 }, z.core.$strip>;
 /**
@@ -370,11 +370,11 @@ export declare const conversationItemSchema: z.ZodDiscriminatedUnion<[z.ZodObjec
         id: z.ZodString;
         content: z.ZodString;
         format: z.ZodEnum<{
+            html: "html";
             code: "code";
             markdown: "markdown";
-            html: "html";
-            plaintext: "plaintext";
             csv: "csv";
+            plaintext: "plaintext";
         }>;
     }, z.core.$strip>>>;
 }, z.core.$strip>, z.ZodObject<{
@@ -390,9 +390,9 @@ export declare const conversationItemSchema: z.ZodDiscriminatedUnion<[z.ZodObjec
     tool: z.ZodString;
     label: z.ZodString;
     status: z.ZodEnum<{
+        active: "active";
         success: "success";
         error: "error";
-        active: "active";
     }>;
 }, z.core.$strip>, z.ZodObject<{
     id: z.ZodString;

package/dist/modules/charts/index.d.mts

@@ -1,4 +1,4 @@
-import { B as BlokkliModule } from '../../shared/editor.BdBm1Z7C.mjs';
+import { B as BlokkliModule } from '../../shared/editor.BVregnEC.mjs';
 import 'nuxt/schema';
 import 'consola';
 import '../../../dist/global/types/definitions.js';

package/dist/modules/drupal/index.d.mts

@@ -1,4 +1,4 @@
-import { B as BlokkliModule } from '../../shared/editor.BdBm1Z7C.mjs';
+import { B as BlokkliModule } from '../../shared/editor.BVregnEC.mjs';
 import 'nuxt/schema';
 import 'consola';
 import '../../../dist/global/types/definitions.js';