@dotcms/ai 1.5.6-beta.1 → 1.6.0-next.36

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dotcms/ai",
-  "version": "1.5.6-beta.1",
+  "version": "1.6.0-next.36",
   "description": "The dotCMS agentic runtime — run model-written or human-written code safely against a dotCMS instance, with auth and policy owned in one place.",
   "repository": {
     "type": "git",
@@ -16,30 +16,10 @@
   },
   "exports": {
     "./package.json": "./package.json",
-    "./runtime": {
-      "module": "./runtime.esm.js",
-      "types": "./runtime.d.ts",
-      "import": "./runtime.cjs.mjs",
-      "default": "./runtime.cjs.js"
-    },
-    "./sandbox": {
-      "module": "./runtime.esm.js",
-      "types": "./src/sandbox/index.d.ts",
-      "import": "./runtime.cjs.mjs",
-      "default": "./runtime.cjs.js"
-    },
-    "./adapter": {
-      "module": "./runtime.esm.js",
-      "types": "./src/adapter/index.d.ts",
-      "import": "./runtime.cjs.mjs",
-      "default": "./runtime.cjs.js"
-    },
-    "./spec": {
-      "module": "./spec.esm.js",
-      "types": "./src/spec/index.d.ts",
-      "import": "./spec.cjs.js",
-      "default": "./spec.cjs.js"
-    },
+    "./runtime": "./src/runtime.ts",
+    "./sandbox": "./src/sandbox/index.ts",
+    "./adapter": "./src/adapter/index.ts",
+    "./spec": "./src/spec/index.ts",
     ".": {
       "module": "./runtime.esm.js",
       "types": "./runtime.d.ts",
@@ -56,7 +36,7 @@
   "typesVersions": {
     "*": {
       "runtime": [
-        "./runtime.d.ts"
+        "./src/runtime.d.ts"
       ],
       "sandbox": [
         "./src/sandbox/index.d.ts"
@@ -89,4 +69,4 @@
   "module": "./runtime.esm.js",
   "main": "./runtime.cjs.js",
   "types": "./runtime.d.ts"
-}
+}

package/spec.cjs.js

@@ -989,7 +989,7 @@ var paths = {
 			requestBody: {
 				description: "Updated container configuration data including identifier and modified properties",
 				content: {
-					"*/*": {
+					"application/json": {
 						schema: {
 							required: [
 								"title"
@@ -1135,7 +1135,7 @@ var paths = {
 			requestBody: {
 				description: "Container configuration data including title, code, content type structures, and display settings",
 				content: {
-					"*/*": {
+					"application/json": {
 						schema: {
 							required: [
 								"title"
@@ -3149,61 +3149,41 @@ var paths = {
 			}
 		}
 	},
-	"/api/v1/folder/byPath": {
-		post: {
+	"/api/v1/folder/sitename/{siteName}/uri/{uri}": {
+		get: {
 			tags: [
 				"Folders"
 			],
-			summary: "Find subfolders by path",
-			description: "Retrieves subfolders of a given path, filtered by the path sent. The path format supports site-specific search (//siteName/path) or global search (/path). For example: '//default/folder1/' returns subfolder1, subfolder2 under folder1 in the 'default' site. '/folder1/s' returns all subfolders starting with 's' under folder1 across all sites.",
-			operationId: "findSubFoldersByPath",
+			summary: "Load a folder by site name and URI",
+			description: "Retrieves a folder by its URI path within the specified site.",
+			operationId: "loadFolderByURI",
 			parameters: [
 				{
-					name: "offset",
-					"in": "query",
-					description: "Number of results to skip for pagination. Must be >= 0.",
+					name: "siteName",
+					"in": "path",
+					required: true,
 					schema: {
-						type: "integer",
-						format: "int32",
-						"default": 0
+						type: "string"
 					}
 				},
 				{
-					name: "limit",
-					"in": "query",
-					description: "Maximum number of results to return. Default 40. Use -1 for unlimited (capped at 10000 as a safety limit).",
+					name: "uri",
+					"in": "path",
+					required: true,
 					schema: {
-						type: "integer",
-						format: "int32",
-						"default": 40
+						pattern: ".+",
+						type: "string"
 					}
 				}
 			],
-			requestBody: {
-				content: {
-					"*/*": {
-						schema: {
-							type: "object",
-							properties: {
-								path: {
-									type: "string"
-								}
-							}
-						}
-					}
-				}
-			},
 			responses: {
 				"200": {
-					description: "Subfolders retrieved successfully",
+					description: "Folder retrieved successfully",
 					content: {
 						"application/json": {
 						}
 					}
 				},
-				"400": {
-					description: "Path property must be sent"
-				},
 				"401": {
 					description: "Authentication required"
 				},
@@ -3211,54 +3191,117 @@ var paths = {
 					description: "Insufficient permissions"
 				},
 				"404": {
-					description: "Site not found"
+					description: "Folder not found"
 				}
 			}
 		}
 	},
-	"/api/v1/folder/sitename/{siteName}/uri/{uri}": {
+	"/api/v1/folder/search": {
 		get: {
 			tags: [
 				"Folders"
 			],
-			summary: "Load a folder by site name and URI",
-			description: "Retrieves a folder by its URI path within the specified site.",
-			operationId: "loadFolderByURI",
+			summary: "Search folders",
+			description: "Returns folders within a site matching an optional name filter and/or path scope. Supports recursive depth control, standard pagination, and sorting. With no 'name' and default path '/' + recursive=true, all site folders are returned.",
+			operationId: "searchFolders",
 			parameters: [
 				{
-					name: "siteName",
-					"in": "path",
-					required: true,
+					name: "name",
+					"in": "query",
+					description: "Optional case-insensitive partial match on folder name (minimum 3 characters when provided)",
 					schema: {
 						type: "string"
 					}
 				},
 				{
-					name: "uri",
-					"in": "path",
-					required: true,
+					name: "path",
+					"in": "query",
+					description: "Path scope for the search. Defaults to '/' (site root).",
+					schema: {
+						type: "string",
+						"default": "/"
+					}
+				},
+				{
+					name: "recursive",
+					"in": "query",
+					description: "false = direct children of 'path' only (default); true = search all descendants",
+					schema: {
+						type: "boolean",
+						"default": false
+					}
+				},
+				{
+					name: "siteId",
+					"in": "query",
+					description: "Site ID to scope the search (required)",
 					schema: {
-						pattern: ".+",
 						type: "string"
 					}
+				},
+				{
+					name: "orderby",
+					"in": "query",
+					description: "Column to sort by.",
+					schema: {
+						type: "string",
+						"enum": [
+							"name",
+							"mod_date"
+						],
+						"default": "name"
+					}
+				},
+				{
+					name: "direction",
+					"in": "query",
+					description: "Sort direction",
+					schema: {
+						type: "string",
+						"enum": [
+							"ASC",
+							"DESC"
+						],
+						"default": "ASC"
+					}
+				},
+				{
+					name: "page",
+					"in": "query",
+					description: "Page number (1-based, default 1)",
+					schema: {
+						type: "integer",
+						format: "int32",
+						"default": 1
+					}
+				},
+				{
+					name: "per_page",
+					"in": "query",
+					description: "Number of results per page (default 40)",
+					schema: {
+						type: "integer",
+						format: "int32",
+						"default": 40
+					}
 				}
 			],
 			responses: {
 				"200": {
-					description: "Folder retrieved successfully",
+					description: "Paginated list of matching folders",
 					content: {
 						"application/json": {
 						}
 					}
 				},
-				"401": {
-					description: "Authentication required"
+				"400": {
+					description: "'siteId' is required; 'name' must be at least 3 characters if provided"
 				},
-				"403": {
-					description: "Insufficient permissions"
+				"401": {
+					description: "User is not authenticated"
 				},
-				"404": {
-					description: "Folder not found"
+				"500": {
+					description: "Internal server error"
 				}
 			}
 		}
@@ -5218,8 +5261,9 @@ var paths = {
 				}
 			],
 			requestBody: {
+				description: "Updated site properties. 'siteName' (the hostname) is required.",
 				content: {
-					"*/*": {
+					"application/json": {
 						schema: {
 							type: "object",
 							properties: {
@@ -5298,7 +5342,8 @@ var paths = {
 							}
 						}
 					}
-				}
+				},
+				required: true
 			},
 			responses: {
 				"200": {
@@ -5330,8 +5375,9 @@ var paths = {
 			description: "Creates a new site with the provided properties including hostname, aliases, tag storage, SEO settings, and optional site variables.",
 			operationId: "createSite",
 			requestBody: {
+				description: "Site properties to create. 'siteName' (the hostname) is required.",
 				content: {
-					"*/*": {
+					"application/json": {
 						schema: {
 							type: "object",
 							properties: {
@@ -5410,7 +5456,8 @@ var paths = {
 							}
 						}
 					}
-				}
+				},
+				required: true
 			},
 			responses: {
 				"200": {
@@ -7639,7 +7686,7 @@ var paths = {
 			requestBody: {
 				description: "Template data to update. Must include the template identifier.",
 				content: {
-					"*/*": {
+					"application/json": {
 						schema: {
 							required: [
 								"title"
@@ -7877,7 +7924,7 @@ var paths = {
 			requestBody: {
 				description: "Template data to create",
 				content: {
-					"*/*": {
+					"application/json": {
 						schema: {
 							required: [
 								"title"
@@ -11342,7 +11389,7 @@ var paths = {
 				"Workflow"
 			],
 			summary: "Fire action by name (multipart form)",
-			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by name, on a target contentlet. Uses a multipart form to transmit its data.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as an HTML or Markdown string — do not hand-author the underlying ProseMirror/JSON document. The value is stored as-is and converted to the Block Editor structure when the contentlet is opened in the editor. Example: `\"body\": \"<h2>Intro</h2><p>Hello <strong>world</strong>.</p>\"`.",
+			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by name, on a target contentlet. Uses a multipart form to transmit its data.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as a **Markdown** string — you do not need to hand-author the underlying ProseMirror/JSON document. dotCMS converts it to the Block Editor (ProseMirror JSON) structure automatically on save, so the field reads back as structured content with no editor round-trip required. A value that is already a valid Tiptap/ProseMirror JSON document is detected and stored unchanged. Markdown is intended for plain content: if the field already holds rich blocks that Markdown cannot represent (embedded contentlets, video or layout blocks), the Markdown value is ignored and the existing document is preserved — to modify such a field, send a full Tiptap/ProseMirror JSON document. Example: `\"body\": \"## Intro\\n\\nHello **world**.\"`.",
 			operationId: "putFireActionByNameMultipart",
 			parameters: [
 				{
@@ -11440,7 +11487,7 @@ var paths = {
 				"Workflow"
 			],
 			summary: "Fire workflow action by name",
-			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by name, on a target contentlet.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as an HTML or Markdown string — do not hand-author the underlying ProseMirror/JSON document. The value is stored as-is and converted to the Block Editor structure when the contentlet is opened in the editor. Example: `\"body\": \"<h2>Intro</h2><p>Hello <strong>world</strong>.</p>\"`.",
+			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by name, on a target contentlet.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as a **Markdown** string — you do not need to hand-author the underlying ProseMirror/JSON document. dotCMS converts it to the Block Editor (ProseMirror JSON) structure automatically on save, so the field reads back as structured content with no editor round-trip required. A value that is already a valid Tiptap/ProseMirror JSON document is detected and stored unchanged. Markdown is intended for plain content: if the field already holds rich blocks that Markdown cannot represent (embedded contentlets, video or layout blocks), the Markdown value is ignored and the existing document is preserved — to modify such a field, send a full Tiptap/ProseMirror JSON document. Example: `\"body\": \"## Intro\\n\\nHello **world**.\"`.",
 			operationId: "putFireActionByName",
 			parameters: [
 				{
@@ -11590,7 +11637,7 @@ var paths = {
 				"Workflow"
 			],
 			summary: "Fire default action (multipart form)",
-			description: "Fires a default [system action](https://www.dotcms.com/docs/latest/managing-workflows#DefaultActions) on target contentlet. Uses a multipart form to transmit its data.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as an HTML or Markdown string — do not hand-author the underlying ProseMirror/JSON document. The value is stored as-is and converted to the Block Editor structure when the contentlet is opened in the editor. Example: `\"body\": \"<h2>Intro</h2><p>Hello <strong>world</strong>.</p>\"`.",
+			description: "Fires a default [system action](https://www.dotcms.com/docs/latest/managing-workflows#DefaultActions) on target contentlet. Uses a multipart form to transmit its data.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as a **Markdown** string — you do not need to hand-author the underlying ProseMirror/JSON document. dotCMS converts it to the Block Editor (ProseMirror JSON) structure automatically on save, so the field reads back as structured content with no editor round-trip required. A value that is already a valid Tiptap/ProseMirror JSON document is detected and stored unchanged. Markdown is intended for plain content: if the field already holds rich blocks that Markdown cannot represent (embedded contentlets, video or layout blocks), the Markdown value is ignored and the existing document is preserved — to modify such a field, send a full Tiptap/ProseMirror JSON document. Example: `\"body\": \"## Intro\\n\\nHello **world**.\"`.",
 			operationId: "putFireDefaultActionMultipart",
 			parameters: [
 				{
@@ -11707,7 +11754,7 @@ var paths = {
 				"Workflow"
 			],
 			summary: "Fire system action by name",
-			description: "Fire a [default system action](https://www.dotcms.com/docs/latest/managing-workflows#DefaultActions) by name on a target contentlet.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**Request body** — wrap field values in a `contentlet` key:\n\n```json\n{\n  \"contentlet\": {\n    \"contentType\": \"<variable-or-inode>\",\n    \"title\": \"My New Item\",\n    \"...\": \"other field values\"\n  }\n}\n```\nField keys inside `contentlet` are the content type's field `variable` names (e.g., `title`, `body`, `image`). Unknown field names are silently dropped (a typo like `titel` will be ignored and may surface as a misleading 'title is required' error). Radio/Select/Checkbox values are not validated against the field's `values` list — out-of-range values are accepted as-is. Always verify spelling against `fields[].variable` from `GET /api/v1/contenttype/id/{idOrVar}`.\n\n**Validation error response shape:**\n\n```json\n{\n  \"entity\": \"\",\n  \"errors\": [{ \"errorCode\": \"required\", \"fieldName\": \"image\", \"message\": \"The field Image is required.\" }],\n  \"i18nMessagesMap\": {}, \"messages\": [], \"pagination\": null, \"permissions\": []\n}\n```\n`errorCode` values: `required`, `unknown`. `fieldName` is the field `variable` for field-specific errors, or `null` for content-level errors. Note: when the content type is not found, `message` returns the raw translation key `Workflow-does-not-exists-content-type` instead of translated text.\n\n**Binary and image fields** — These fields cannot receive raw file data or asset paths in the JSON body. Use one of the patterns below.\n\n**Pattern A — single-use file (works for all binary/image fields):**\n\n1. `POST /api/v1/temp` (multipart `file` part) OR `POST /api/v1/temp/byUrl` (JSON `{\"remoteUrl\":\"https://...\"}`) → use `tempFiles[0].id` (e.g. `\"temp_5311313004\"`) as the field value.\n2. Pass that ID in the contentlet body: `{\"contentlet\": {\"contentType\": \"ResortActivities\", \"image\": \"temp_5311313004\", ...}}`.\n\n**Pattern B — reusable shared asset (`ImmutableImageField` only):**\n\n1. Upload via `/temp`, create a dotAsset contentlet: `PUT .../fire/PUBLISH` with `{\"contentlet\": {\"contentType\": \"dotAsset\", \"asset\": \"temp_<id>\"}}`.\n2. Use the returned dotAsset `identifier` as the field value on any `ImmutableImageField`.\n\n| Field `clazz` | `temp_<id>` | dotAsset `identifier` |\n|---|---|---|\n| `ImmutableBinaryField` | ✅ | ❌ (returns 400 \\\"field is required\\\") |\n| `ImmutableImageField` | ✅ | ✅ |\n\nFind a field's `clazz` by calling `GET /api/v1/contenttype/id/{idOrVar}` and reading `fields[].clazz`.\n\n⚠️ **Known issue:** Firing `PUBLISH` on an archived contentlet (`archived: true`) does not validate the archived state and can produce an inconsistent `live: true, archived: true` tri-state. Always fire `UNARCHIVE` before `PUBLISH` on archived content.\n\n⚠️ **Multi-scheme content types:** When a content type has multiple workflow schemes attached, firing a system action only initializes the contentlet into the scheme whose `systemActionMappings` entry resolved the fire. Other attached schemes will not have a task for that contentlet, and firing their actions later will fail with 'Workflow Action is not available in the Workflow Step the content is currently in.' To exercise actions in those other schemes, fire by action ID via `PUT /api/v1/workflow/actions/{actionId}/fire` using an action mapped to the desired scheme.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as an HTML or Markdown string — do not hand-author the underlying ProseMirror/JSON document. The value is stored as-is and converted to the Block Editor structure when the contentlet is opened in the editor. Example: `\"body\": \"<h2>Intro</h2><p>Hello <strong>world</strong>.</p>\"`.",
+			description: "Fire a [default system action](https://www.dotcms.com/docs/latest/managing-workflows#DefaultActions) by name on a target contentlet.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**Request body** — wrap field values in a `contentlet` key:\n\n```json\n{\n  \"contentlet\": {\n    \"contentType\": \"<variable-or-inode>\",\n    \"title\": \"My New Item\",\n    \"...\": \"other field values\"\n  }\n}\n```\nField keys inside `contentlet` are the content type's field `variable` names (e.g., `title`, `body`, `image`). Unknown field names are silently dropped (a typo like `titel` will be ignored and may surface as a misleading 'title is required' error). Radio/Select/Checkbox values are not validated against the field's `values` list — out-of-range values are accepted as-is. Always verify spelling against `fields[].variable` from `GET /api/v1/contenttype/id/{idOrVar}`.\n\n**Validation error response shape:**\n\n```json\n{\n  \"entity\": \"\",\n  \"errors\": [{ \"errorCode\": \"required\", \"fieldName\": \"image\", \"message\": \"The field Image is required.\" }],\n  \"i18nMessagesMap\": {}, \"messages\": [], \"pagination\": null, \"permissions\": []\n}\n```\n`errorCode` values: `required`, `unknown`. `fieldName` is the field `variable` for field-specific errors, or `null` for content-level errors. Note: when the content type is not found, `message` returns the raw translation key `Workflow-does-not-exists-content-type` instead of translated text.\n\n**Binary and image fields** — These fields cannot receive raw file data or asset paths in the JSON body. Use one of the patterns below.\n\n**Pattern A — single-use file (works for all binary/image fields):**\n\n1. `POST /api/v1/temp` (multipart `file` part) OR `POST /api/v1/temp/byUrl` (JSON `{\"remoteUrl\":\"https://...\"}`) → use `tempFiles[0].id` (e.g. `\"temp_5311313004\"`) as the field value.\n2. Pass that ID in the contentlet body: `{\"contentlet\": {\"contentType\": \"ResortActivities\", \"image\": \"temp_5311313004\", ...}}`.\n\n**Pattern B — reusable shared asset (`ImmutableImageField` only):**\n\n1. Upload via `/temp`, create a dotAsset contentlet: `PUT .../fire/PUBLISH` with `{\"contentlet\": {\"contentType\": \"dotAsset\", \"asset\": \"temp_<id>\"}}`.\n2. Use the returned dotAsset `identifier` as the field value on any `ImmutableImageField`.\n\n| Field `clazz` | `temp_<id>` | dotAsset `identifier` |\n|---|---|---|\n| `ImmutableBinaryField` | ✅ | ❌ (returns 400 \\\"field is required\\\") |\n| `ImmutableImageField` | ✅ | ✅ |\n\nFind a field's `clazz` by calling `GET /api/v1/contenttype/id/{idOrVar}` and reading `fields[].clazz`.\n\n⚠️ **Known issue:** Firing `PUBLISH` on an archived contentlet (`archived: true`) does not validate the archived state and can produce an inconsistent `live: true, archived: true` tri-state. Always fire `UNARCHIVE` before `PUBLISH` on archived content.\n\n⚠️ **Multi-scheme content types:** When a content type has multiple workflow schemes attached, firing a system action only initializes the contentlet into the scheme whose `systemActionMappings` entry resolved the fire. Other attached schemes will not have a task for that contentlet, and firing their actions later will fail with 'Workflow Action is not available in the Workflow Step the content is currently in.' To exercise actions in those other schemes, fire by action ID via `PUT /api/v1/workflow/actions/{actionId}/fire` using an action mapped to the desired scheme.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as a **Markdown** string — you do not need to hand-author the underlying ProseMirror/JSON document. dotCMS converts it to the Block Editor (ProseMirror JSON) structure automatically on save, so the field reads back as structured content with no editor round-trip required. A value that is already a valid Tiptap/ProseMirror JSON document is detected and stored unchanged. Markdown is intended for plain content: if the field already holds rich blocks that Markdown cannot represent (embedded contentlets, video or layout blocks), the Markdown value is ignored and the existing document is preserved — to modify such a field, send a full Tiptap/ProseMirror JSON document. Example: `\"body\": \"## Intro\\n\\nHello **world**.\"`.",
 			operationId: "putFireDefaultSystemAction",
 			parameters: [
 				{
@@ -12175,7 +12222,7 @@ var paths = {
 				"Workflow"
 			],
 			summary: "Fire action by ID (multipart form)",
-			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by identifier, on a target contentlet. Uses a multipart form to transmit its data.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as an HTML or Markdown string — do not hand-author the underlying ProseMirror/JSON document. The value is stored as-is and converted to the Block Editor structure when the contentlet is opened in the editor. Example: `\"body\": \"<h2>Intro</h2><p>Hello <strong>world</strong>.</p>\"`.",
+			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by identifier, on a target contentlet. Uses a multipart form to transmit its data.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as a **Markdown** string — you do not need to hand-author the underlying ProseMirror/JSON document. dotCMS converts it to the Block Editor (ProseMirror JSON) structure automatically on save, so the field reads back as structured content with no editor round-trip required. A value that is already a valid Tiptap/ProseMirror JSON document is detected and stored unchanged. Markdown is intended for plain content: if the field already holds rich blocks that Markdown cannot represent (embedded contentlets, video or layout blocks), the Markdown value is ignored and the existing document is preserved — to modify such a field, send a full Tiptap/ProseMirror JSON document. Example: `\"body\": \"## Intro\\n\\nHello **world**.\"`.",
 			operationId: "putFireActionByIdMultipart",
 			parameters: [
 				{
@@ -12282,7 +12329,7 @@ var paths = {
 				"Workflow"
 			],
 			summary: "Fire action by ID",
-			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by identifier, on a target contentlet.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**Use this endpoint to fire actions that are not represented as `SystemAction` tokens** (`NEW`, `EDIT`, `PUBLISH`, etc.). The two most common are `Move` and `Copy` on the System Workflow scheme.\n\n**Move action** — relocates a contentlet to a new folder/host. Request body shape (note: `pathToMove` is a sibling of `contentlet`, **not** nested inside it):\n\n```json\n{\n  \"contentlet\": { \"identifier\": \"<contentlet-identifier>\" },\n  \"pathToMove\": \"//<siteHost>/<folderPath>\"\n}\n```\nAlternative shapes (`contentlet.host`+`contentlet.folder`, `contentlet.hostFolder`, `path` instead of `pathToMove`) all return `400 \"The host path is not valid: null\"`.\n\n**Copy action** — clones a contentlet. Fire with `?identifier=<source-id>` and an empty body (or `{\"contentlet\": {\"identifier\": \"<source-id>\"}}`). The Copy action id on the default System Workflow scheme is `963f6a04-5320-42e7-ab74-6d876d199946`; retrieve it for other environments via `GET /api/v1/workflow/schemes/{schemeId}/actions`. ⚠️ The response `entity` returns the **source** contentlet, not the newly-created copy — locate the copy via a follow-up `POST /api/content/_search` ordered by `modDate DESC`. The copy lands in `SYSTEM_HOST` / `SYSTEM_FOLDER`; destination hints (`pathToMove`, `host`, `folder`, `hostFolder`) are silently ignored. Fire the Move action afterwards to relocate.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as an HTML or Markdown string — do not hand-author the underlying ProseMirror/JSON document. The value is stored as-is and converted to the Block Editor structure when the contentlet is opened in the editor. Example: `\"body\": \"<h2>Intro</h2><p>Hello <strong>world</strong>.</p>\"`.",
+			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by identifier, on a target contentlet.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**Use this endpoint to fire actions that are not represented as `SystemAction` tokens** (`NEW`, `EDIT`, `PUBLISH`, etc.). The two most common are `Move` and `Copy` on the System Workflow scheme.\n\n**Move action** — relocates a contentlet to a new folder/host. Request body shape (note: `pathToMove` is a sibling of `contentlet`, **not** nested inside it):\n\n```json\n{\n  \"contentlet\": { \"identifier\": \"<contentlet-identifier>\" },\n  \"pathToMove\": \"//<siteHost>/<folderPath>\"\n}\n```\nAlternative shapes (`contentlet.host`+`contentlet.folder`, `contentlet.hostFolder`, `path` instead of `pathToMove`) all return `400 \"The host path is not valid: null\"`.\n\n**Copy action** — clones a contentlet. Fire with `?identifier=<source-id>` and an empty body (or `{\"contentlet\": {\"identifier\": \"<source-id>\"}}`). The Copy action id on the default System Workflow scheme is `963f6a04-5320-42e7-ab74-6d876d199946`; retrieve it for other environments via `GET /api/v1/workflow/schemes/{schemeId}/actions`. ⚠️ The response `entity` returns the **source** contentlet, not the newly-created copy — locate the copy via a follow-up `POST /api/content/_search` ordered by `modDate DESC`. The copy lands in `SYSTEM_HOST` / `SYSTEM_FOLDER`; destination hints (`pathToMove`, `host`, `folder`, `hostFolder`) are silently ignored. Fire the Move action afterwards to relocate.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as a **Markdown** string — you do not need to hand-author the underlying ProseMirror/JSON document. dotCMS converts it to the Block Editor (ProseMirror JSON) structure automatically on save, so the field reads back as structured content with no editor round-trip required. A value that is already a valid Tiptap/ProseMirror JSON document is detected and stored unchanged. Markdown is intended for plain content: if the field already holds rich blocks that Markdown cannot represent (embedded contentlets, video or layout blocks), the Markdown value is ignored and the existing document is preserved — to modify such a field, send a full Tiptap/ProseMirror JSON document. Example: `\"body\": \"## Intro\\n\\nHello **world**.\"`.",
 			operationId: "putFireActionById",
 			parameters: [
 				{
@@ -13597,6 +13644,12 @@ var paths = {
 													hasOnlyBatchActionlet: {
 														type: "boolean"
 													},
+													hasDeleteActionlet: {
+														type: "boolean"
+													},
+													hasResetActionlet: {
+														type: "boolean"
+													},
 													hasPublishActionlet: {
 														type: "boolean"
 													},
@@ -13626,12 +13679,6 @@ var paths = {
 													},
 													hasSaveActionlet: {
 														type: "boolean"
-													},
-													hasDeleteActionlet: {
-														type: "boolean"
-													},
-													hasResetActionlet: {
-														type: "boolean"
 													}
 												}
 											}
@@ -13871,6 +13918,12 @@ var paths = {
 															hasOnlyBatchActionlet: {
 																type: "boolean"
 															},
+															hasDeleteActionlet: {
+																type: "boolean"
+															},
+															hasResetActionlet: {
+																type: "boolean"
+															},
 															hasPublishActionlet: {
 																type: "boolean"
 															},
@@ -13900,12 +13953,6 @@ var paths = {
 															},
 															hasSaveActionlet: {
 																type: "boolean"
-															},
-															hasDeleteActionlet: {
-																type: "boolean"
-															},
-															hasResetActionlet: {
-																type: "boolean"
 															}
 														}
 													},
@@ -13942,10 +13989,10 @@ var paths = {
 											type: {
 												type: "string"
 											},
-											bitPermission: {
+											individualPermission: {
 												type: "boolean"
 											},
-											individualPermission: {
+											bitPermission: {
 												type: "boolean"
 											},
 											roleId: {

package/spec.esm.js

@@ -987,7 +987,7 @@ var paths = {
 			requestBody: {
 				description: "Updated container configuration data including identifier and modified properties",
 				content: {
-					"*/*": {
+					"application/json": {
 						schema: {
 							required: [
 								"title"
@@ -1133,7 +1133,7 @@ var paths = {
 			requestBody: {
 				description: "Container configuration data including title, code, content type structures, and display settings",
 				content: {
-					"*/*": {
+					"application/json": {
 						schema: {
 							required: [
 								"title"
@@ -3147,61 +3147,41 @@ var paths = {
 			}
 		}
 	},
-	"/api/v1/folder/byPath": {
-		post: {
+	"/api/v1/folder/sitename/{siteName}/uri/{uri}": {
+		get: {
 			tags: [
 				"Folders"
 			],
-			summary: "Find subfolders by path",
-			description: "Retrieves subfolders of a given path, filtered by the path sent. The path format supports site-specific search (//siteName/path) or global search (/path). For example: '//default/folder1/' returns subfolder1, subfolder2 under folder1 in the 'default' site. '/folder1/s' returns all subfolders starting with 's' under folder1 across all sites.",
-			operationId: "findSubFoldersByPath",
+			summary: "Load a folder by site name and URI",
+			description: "Retrieves a folder by its URI path within the specified site.",
+			operationId: "loadFolderByURI",
 			parameters: [
 				{
-					name: "offset",
-					"in": "query",
-					description: "Number of results to skip for pagination. Must be >= 0.",
+					name: "siteName",
+					"in": "path",
+					required: true,
 					schema: {
-						type: "integer",
-						format: "int32",
-						"default": 0
+						type: "string"
 					}
 				},
 				{
-					name: "limit",
-					"in": "query",
-					description: "Maximum number of results to return. Default 40. Use -1 for unlimited (capped at 10000 as a safety limit).",
+					name: "uri",
+					"in": "path",
+					required: true,
 					schema: {
-						type: "integer",
-						format: "int32",
-						"default": 40
+						pattern: ".+",
+						type: "string"
 					}
 				}
 			],
-			requestBody: {
-				content: {
-					"*/*": {
-						schema: {
-							type: "object",
-							properties: {
-								path: {
-									type: "string"
-								}
-							}
-						}
-					}
-				}
-			},
 			responses: {
 				"200": {
-					description: "Subfolders retrieved successfully",
+					description: "Folder retrieved successfully",
 					content: {
 						"application/json": {
 						}
 					}
 				},
-				"400": {
-					description: "Path property must be sent"
-				},
 				"401": {
 					description: "Authentication required"
 				},
@@ -3209,54 +3189,117 @@ var paths = {
 					description: "Insufficient permissions"
 				},
 				"404": {
-					description: "Site not found"
+					description: "Folder not found"
 				}
 			}
 		}
 	},
-	"/api/v1/folder/sitename/{siteName}/uri/{uri}": {
+	"/api/v1/folder/search": {
 		get: {
 			tags: [
 				"Folders"
 			],
-			summary: "Load a folder by site name and URI",
-			description: "Retrieves a folder by its URI path within the specified site.",
-			operationId: "loadFolderByURI",
+			summary: "Search folders",
+			description: "Returns folders within a site matching an optional name filter and/or path scope. Supports recursive depth control, standard pagination, and sorting. With no 'name' and default path '/' + recursive=true, all site folders are returned.",
+			operationId: "searchFolders",
 			parameters: [
 				{
-					name: "siteName",
-					"in": "path",
-					required: true,
+					name: "name",
+					"in": "query",
+					description: "Optional case-insensitive partial match on folder name (minimum 3 characters when provided)",
 					schema: {
 						type: "string"
 					}
 				},
 				{
-					name: "uri",
-					"in": "path",
-					required: true,
+					name: "path",
+					"in": "query",
+					description: "Path scope for the search. Defaults to '/' (site root).",
+					schema: {
+						type: "string",
+						"default": "/"
+					}
+				},
+				{
+					name: "recursive",
+					"in": "query",
+					description: "false = direct children of 'path' only (default); true = search all descendants",
+					schema: {
+						type: "boolean",
+						"default": false
+					}
+				},
+				{
+					name: "siteId",
+					"in": "query",
+					description: "Site ID to scope the search (required)",
 					schema: {
-						pattern: ".+",
 						type: "string"
 					}
+				},
+				{
+					name: "orderby",
+					"in": "query",
+					description: "Column to sort by.",
+					schema: {
+						type: "string",
+						"enum": [
+							"name",
+							"mod_date"
+						],
+						"default": "name"
+					}
+				},
+				{
+					name: "direction",
+					"in": "query",
+					description: "Sort direction",
+					schema: {
+						type: "string",
+						"enum": [
+							"ASC",
+							"DESC"
+						],
+						"default": "ASC"
+					}
+				},
+				{
+					name: "page",
+					"in": "query",
+					description: "Page number (1-based, default 1)",
+					schema: {
+						type: "integer",
+						format: "int32",
+						"default": 1
+					}
+				},
+				{
+					name: "per_page",
+					"in": "query",
+					description: "Number of results per page (default 40)",
+					schema: {
+						type: "integer",
+						format: "int32",
+						"default": 40
+					}
 				}
 			],
 			responses: {
 				"200": {
-					description: "Folder retrieved successfully",
+					description: "Paginated list of matching folders",
 					content: {
 						"application/json": {
 						}
 					}
 				},
-				"401": {
-					description: "Authentication required"
+				"400": {
+					description: "'siteId' is required; 'name' must be at least 3 characters if provided"
 				},
-				"403": {
-					description: "Insufficient permissions"
+				"401": {
+					description: "User is not authenticated"
 				},
-				"404": {
-					description: "Folder not found"
+				"500": {
+					description: "Internal server error"
 				}
 			}
 		}
@@ -5216,8 +5259,9 @@ var paths = {
 				}
 			],
 			requestBody: {
+				description: "Updated site properties. 'siteName' (the hostname) is required.",
 				content: {
-					"*/*": {
+					"application/json": {
 						schema: {
 							type: "object",
 							properties: {
@@ -5296,7 +5340,8 @@ var paths = {
 							}
 						}
 					}
-				}
+				},
+				required: true
 			},
 			responses: {
 				"200": {
@@ -5328,8 +5373,9 @@ var paths = {
 			description: "Creates a new site with the provided properties including hostname, aliases, tag storage, SEO settings, and optional site variables.",
 			operationId: "createSite",
 			requestBody: {
+				description: "Site properties to create. 'siteName' (the hostname) is required.",
 				content: {
-					"*/*": {
+					"application/json": {
 						schema: {
 							type: "object",
 							properties: {
@@ -5408,7 +5454,8 @@ var paths = {
 							}
 						}
 					}
-				}
+				},
+				required: true
 			},
 			responses: {
 				"200": {
@@ -7637,7 +7684,7 @@ var paths = {
 			requestBody: {
 				description: "Template data to update. Must include the template identifier.",
 				content: {
-					"*/*": {
+					"application/json": {
 						schema: {
 							required: [
 								"title"
@@ -7875,7 +7922,7 @@ var paths = {
 			requestBody: {
 				description: "Template data to create",
 				content: {
-					"*/*": {
+					"application/json": {
 						schema: {
 							required: [
 								"title"
@@ -11340,7 +11387,7 @@ var paths = {
 				"Workflow"
 			],
 			summary: "Fire action by name (multipart form)",
-			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by name, on a target contentlet. Uses a multipart form to transmit its data.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as an HTML or Markdown string — do not hand-author the underlying ProseMirror/JSON document. The value is stored as-is and converted to the Block Editor structure when the contentlet is opened in the editor. Example: `\"body\": \"<h2>Intro</h2><p>Hello <strong>world</strong>.</p>\"`.",
+			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by name, on a target contentlet. Uses a multipart form to transmit its data.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as a **Markdown** string — you do not need to hand-author the underlying ProseMirror/JSON document. dotCMS converts it to the Block Editor (ProseMirror JSON) structure automatically on save, so the field reads back as structured content with no editor round-trip required. A value that is already a valid Tiptap/ProseMirror JSON document is detected and stored unchanged. Markdown is intended for plain content: if the field already holds rich blocks that Markdown cannot represent (embedded contentlets, video or layout blocks), the Markdown value is ignored and the existing document is preserved — to modify such a field, send a full Tiptap/ProseMirror JSON document. Example: `\"body\": \"## Intro\\n\\nHello **world**.\"`.",
 			operationId: "putFireActionByNameMultipart",
 			parameters: [
 				{
@@ -11438,7 +11485,7 @@ var paths = {
 				"Workflow"
 			],
 			summary: "Fire workflow action by name",
-			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by name, on a target contentlet.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as an HTML or Markdown string — do not hand-author the underlying ProseMirror/JSON document. The value is stored as-is and converted to the Block Editor structure when the contentlet is opened in the editor. Example: `\"body\": \"<h2>Intro</h2><p>Hello <strong>world</strong>.</p>\"`.",
+			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by name, on a target contentlet.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as a **Markdown** string — you do not need to hand-author the underlying ProseMirror/JSON document. dotCMS converts it to the Block Editor (ProseMirror JSON) structure automatically on save, so the field reads back as structured content with no editor round-trip required. A value that is already a valid Tiptap/ProseMirror JSON document is detected and stored unchanged. Markdown is intended for plain content: if the field already holds rich blocks that Markdown cannot represent (embedded contentlets, video or layout blocks), the Markdown value is ignored and the existing document is preserved — to modify such a field, send a full Tiptap/ProseMirror JSON document. Example: `\"body\": \"## Intro\\n\\nHello **world**.\"`.",
 			operationId: "putFireActionByName",
 			parameters: [
 				{
@@ -11588,7 +11635,7 @@ var paths = {
 				"Workflow"
 			],
 			summary: "Fire default action (multipart form)",
-			description: "Fires a default [system action](https://www.dotcms.com/docs/latest/managing-workflows#DefaultActions) on target contentlet. Uses a multipart form to transmit its data.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as an HTML or Markdown string — do not hand-author the underlying ProseMirror/JSON document. The value is stored as-is and converted to the Block Editor structure when the contentlet is opened in the editor. Example: `\"body\": \"<h2>Intro</h2><p>Hello <strong>world</strong>.</p>\"`.",
+			description: "Fires a default [system action](https://www.dotcms.com/docs/latest/managing-workflows#DefaultActions) on target contentlet. Uses a multipart form to transmit its data.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as a **Markdown** string — you do not need to hand-author the underlying ProseMirror/JSON document. dotCMS converts it to the Block Editor (ProseMirror JSON) structure automatically on save, so the field reads back as structured content with no editor round-trip required. A value that is already a valid Tiptap/ProseMirror JSON document is detected and stored unchanged. Markdown is intended for plain content: if the field already holds rich blocks that Markdown cannot represent (embedded contentlets, video or layout blocks), the Markdown value is ignored and the existing document is preserved — to modify such a field, send a full Tiptap/ProseMirror JSON document. Example: `\"body\": \"## Intro\\n\\nHello **world**.\"`.",
 			operationId: "putFireDefaultActionMultipart",
 			parameters: [
 				{
@@ -11705,7 +11752,7 @@ var paths = {
 				"Workflow"
 			],
 			summary: "Fire system action by name",
-			description: "Fire a [default system action](https://www.dotcms.com/docs/latest/managing-workflows#DefaultActions) by name on a target contentlet.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**Request body** — wrap field values in a `contentlet` key:\n\n```json\n{\n  \"contentlet\": {\n    \"contentType\": \"<variable-or-inode>\",\n    \"title\": \"My New Item\",\n    \"...\": \"other field values\"\n  }\n}\n```\nField keys inside `contentlet` are the content type's field `variable` names (e.g., `title`, `body`, `image`). Unknown field names are silently dropped (a typo like `titel` will be ignored and may surface as a misleading 'title is required' error). Radio/Select/Checkbox values are not validated against the field's `values` list — out-of-range values are accepted as-is. Always verify spelling against `fields[].variable` from `GET /api/v1/contenttype/id/{idOrVar}`.\n\n**Validation error response shape:**\n\n```json\n{\n  \"entity\": \"\",\n  \"errors\": [{ \"errorCode\": \"required\", \"fieldName\": \"image\", \"message\": \"The field Image is required.\" }],\n  \"i18nMessagesMap\": {}, \"messages\": [], \"pagination\": null, \"permissions\": []\n}\n```\n`errorCode` values: `required`, `unknown`. `fieldName` is the field `variable` for field-specific errors, or `null` for content-level errors. Note: when the content type is not found, `message` returns the raw translation key `Workflow-does-not-exists-content-type` instead of translated text.\n\n**Binary and image fields** — These fields cannot receive raw file data or asset paths in the JSON body. Use one of the patterns below.\n\n**Pattern A — single-use file (works for all binary/image fields):**\n\n1. `POST /api/v1/temp` (multipart `file` part) OR `POST /api/v1/temp/byUrl` (JSON `{\"remoteUrl\":\"https://...\"}`) → use `tempFiles[0].id` (e.g. `\"temp_5311313004\"`) as the field value.\n2. Pass that ID in the contentlet body: `{\"contentlet\": {\"contentType\": \"ResortActivities\", \"image\": \"temp_5311313004\", ...}}`.\n\n**Pattern B — reusable shared asset (`ImmutableImageField` only):**\n\n1. Upload via `/temp`, create a dotAsset contentlet: `PUT .../fire/PUBLISH` with `{\"contentlet\": {\"contentType\": \"dotAsset\", \"asset\": \"temp_<id>\"}}`.\n2. Use the returned dotAsset `identifier` as the field value on any `ImmutableImageField`.\n\n| Field `clazz` | `temp_<id>` | dotAsset `identifier` |\n|---|---|---|\n| `ImmutableBinaryField` | ✅ | ❌ (returns 400 \\\"field is required\\\") |\n| `ImmutableImageField` | ✅ | ✅ |\n\nFind a field's `clazz` by calling `GET /api/v1/contenttype/id/{idOrVar}` and reading `fields[].clazz`.\n\n⚠️ **Known issue:** Firing `PUBLISH` on an archived contentlet (`archived: true`) does not validate the archived state and can produce an inconsistent `live: true, archived: true` tri-state. Always fire `UNARCHIVE` before `PUBLISH` on archived content.\n\n⚠️ **Multi-scheme content types:** When a content type has multiple workflow schemes attached, firing a system action only initializes the contentlet into the scheme whose `systemActionMappings` entry resolved the fire. Other attached schemes will not have a task for that contentlet, and firing their actions later will fail with 'Workflow Action is not available in the Workflow Step the content is currently in.' To exercise actions in those other schemes, fire by action ID via `PUT /api/v1/workflow/actions/{actionId}/fire` using an action mapped to the desired scheme.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as an HTML or Markdown string — do not hand-author the underlying ProseMirror/JSON document. The value is stored as-is and converted to the Block Editor structure when the contentlet is opened in the editor. Example: `\"body\": \"<h2>Intro</h2><p>Hello <strong>world</strong>.</p>\"`.",
+			description: "Fire a [default system action](https://www.dotcms.com/docs/latest/managing-workflows#DefaultActions) by name on a target contentlet.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**Request body** — wrap field values in a `contentlet` key:\n\n```json\n{\n  \"contentlet\": {\n    \"contentType\": \"<variable-or-inode>\",\n    \"title\": \"My New Item\",\n    \"...\": \"other field values\"\n  }\n}\n```\nField keys inside `contentlet` are the content type's field `variable` names (e.g., `title`, `body`, `image`). Unknown field names are silently dropped (a typo like `titel` will be ignored and may surface as a misleading 'title is required' error). Radio/Select/Checkbox values are not validated against the field's `values` list — out-of-range values are accepted as-is. Always verify spelling against `fields[].variable` from `GET /api/v1/contenttype/id/{idOrVar}`.\n\n**Validation error response shape:**\n\n```json\n{\n  \"entity\": \"\",\n  \"errors\": [{ \"errorCode\": \"required\", \"fieldName\": \"image\", \"message\": \"The field Image is required.\" }],\n  \"i18nMessagesMap\": {}, \"messages\": [], \"pagination\": null, \"permissions\": []\n}\n```\n`errorCode` values: `required`, `unknown`. `fieldName` is the field `variable` for field-specific errors, or `null` for content-level errors. Note: when the content type is not found, `message` returns the raw translation key `Workflow-does-not-exists-content-type` instead of translated text.\n\n**Binary and image fields** — These fields cannot receive raw file data or asset paths in the JSON body. Use one of the patterns below.\n\n**Pattern A — single-use file (works for all binary/image fields):**\n\n1. `POST /api/v1/temp` (multipart `file` part) OR `POST /api/v1/temp/byUrl` (JSON `{\"remoteUrl\":\"https://...\"}`) → use `tempFiles[0].id` (e.g. `\"temp_5311313004\"`) as the field value.\n2. Pass that ID in the contentlet body: `{\"contentlet\": {\"contentType\": \"ResortActivities\", \"image\": \"temp_5311313004\", ...}}`.\n\n**Pattern B — reusable shared asset (`ImmutableImageField` only):**\n\n1. Upload via `/temp`, create a dotAsset contentlet: `PUT .../fire/PUBLISH` with `{\"contentlet\": {\"contentType\": \"dotAsset\", \"asset\": \"temp_<id>\"}}`.\n2. Use the returned dotAsset `identifier` as the field value on any `ImmutableImageField`.\n\n| Field `clazz` | `temp_<id>` | dotAsset `identifier` |\n|---|---|---|\n| `ImmutableBinaryField` | ✅ | ❌ (returns 400 \\\"field is required\\\") |\n| `ImmutableImageField` | ✅ | ✅ |\n\nFind a field's `clazz` by calling `GET /api/v1/contenttype/id/{idOrVar}` and reading `fields[].clazz`.\n\n⚠️ **Known issue:** Firing `PUBLISH` on an archived contentlet (`archived: true`) does not validate the archived state and can produce an inconsistent `live: true, archived: true` tri-state. Always fire `UNARCHIVE` before `PUBLISH` on archived content.\n\n⚠️ **Multi-scheme content types:** When a content type has multiple workflow schemes attached, firing a system action only initializes the contentlet into the scheme whose `systemActionMappings` entry resolved the fire. Other attached schemes will not have a task for that contentlet, and firing their actions later will fail with 'Workflow Action is not available in the Workflow Step the content is currently in.' To exercise actions in those other schemes, fire by action ID via `PUT /api/v1/workflow/actions/{actionId}/fire` using an action mapped to the desired scheme.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as a **Markdown** string — you do not need to hand-author the underlying ProseMirror/JSON document. dotCMS converts it to the Block Editor (ProseMirror JSON) structure automatically on save, so the field reads back as structured content with no editor round-trip required. A value that is already a valid Tiptap/ProseMirror JSON document is detected and stored unchanged. Markdown is intended for plain content: if the field already holds rich blocks that Markdown cannot represent (embedded contentlets, video or layout blocks), the Markdown value is ignored and the existing document is preserved — to modify such a field, send a full Tiptap/ProseMirror JSON document. Example: `\"body\": \"## Intro\\n\\nHello **world**.\"`.",
 			operationId: "putFireDefaultSystemAction",
 			parameters: [
 				{
@@ -12173,7 +12220,7 @@ var paths = {
 				"Workflow"
 			],
 			summary: "Fire action by ID (multipart form)",
-			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by identifier, on a target contentlet. Uses a multipart form to transmit its data.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as an HTML or Markdown string — do not hand-author the underlying ProseMirror/JSON document. The value is stored as-is and converted to the Block Editor structure when the contentlet is opened in the editor. Example: `\"body\": \"<h2>Intro</h2><p>Hello <strong>world</strong>.</p>\"`.",
+			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by identifier, on a target contentlet. Uses a multipart form to transmit its data.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as a **Markdown** string — you do not need to hand-author the underlying ProseMirror/JSON document. dotCMS converts it to the Block Editor (ProseMirror JSON) structure automatically on save, so the field reads back as structured content with no editor round-trip required. A value that is already a valid Tiptap/ProseMirror JSON document is detected and stored unchanged. Markdown is intended for plain content: if the field already holds rich blocks that Markdown cannot represent (embedded contentlets, video or layout blocks), the Markdown value is ignored and the existing document is preserved — to modify such a field, send a full Tiptap/ProseMirror JSON document. Example: `\"body\": \"## Intro\\n\\nHello **world**.\"`.",
 			operationId: "putFireActionByIdMultipart",
 			parameters: [
 				{
@@ -12280,7 +12327,7 @@ var paths = {
 				"Workflow"
 			],
 			summary: "Fire action by ID",
-			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by identifier, on a target contentlet.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**Use this endpoint to fire actions that are not represented as `SystemAction` tokens** (`NEW`, `EDIT`, `PUBLISH`, etc.). The two most common are `Move` and `Copy` on the System Workflow scheme.\n\n**Move action** — relocates a contentlet to a new folder/host. Request body shape (note: `pathToMove` is a sibling of `contentlet`, **not** nested inside it):\n\n```json\n{\n  \"contentlet\": { \"identifier\": \"<contentlet-identifier>\" },\n  \"pathToMove\": \"//<siteHost>/<folderPath>\"\n}\n```\nAlternative shapes (`contentlet.host`+`contentlet.folder`, `contentlet.hostFolder`, `path` instead of `pathToMove`) all return `400 \"The host path is not valid: null\"`.\n\n**Copy action** — clones a contentlet. Fire with `?identifier=<source-id>` and an empty body (or `{\"contentlet\": {\"identifier\": \"<source-id>\"}}`). The Copy action id on the default System Workflow scheme is `963f6a04-5320-42e7-ab74-6d876d199946`; retrieve it for other environments via `GET /api/v1/workflow/schemes/{schemeId}/actions`. ⚠️ The response `entity` returns the **source** contentlet, not the newly-created copy — locate the copy via a follow-up `POST /api/content/_search` ordered by `modDate DESC`. The copy lands in `SYSTEM_HOST` / `SYSTEM_FOLDER`; destination hints (`pathToMove`, `host`, `folder`, `hostFolder`) are silently ignored. Fire the Move action afterwards to relocate.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as an HTML or Markdown string — do not hand-author the underlying ProseMirror/JSON document. The value is stored as-is and converted to the Block Editor structure when the contentlet is opened in the editor. Example: `\"body\": \"<h2>Intro</h2><p>Hello <strong>world</strong>.</p>\"`.",
+			description: "Fires a [workflow action](https://www.dotcms.com/docs/latest/managing-workflows#Actions), specified by identifier, on a target contentlet.\n\nReturns a map of the resultant contentlet, with an additional `AUTO_ASSIGN_WORKFLOW` property, which can be referenced by delegate services that handle automatically assigning workflow schemes to content with none.\n\n**Use this endpoint to fire actions that are not represented as `SystemAction` tokens** (`NEW`, `EDIT`, `PUBLISH`, etc.). The two most common are `Move` and `Copy` on the System Workflow scheme.\n\n**Move action** — relocates a contentlet to a new folder/host. Request body shape (note: `pathToMove` is a sibling of `contentlet`, **not** nested inside it):\n\n```json\n{\n  \"contentlet\": { \"identifier\": \"<contentlet-identifier>\" },\n  \"pathToMove\": \"//<siteHost>/<folderPath>\"\n}\n```\nAlternative shapes (`contentlet.host`+`contentlet.folder`, `contentlet.hostFolder`, `path` instead of `pathToMove`) all return `400 \"The host path is not valid: null\"`.\n\n**Copy action** — clones a contentlet. Fire with `?identifier=<source-id>` and an empty body (or `{\"contentlet\": {\"identifier\": \"<source-id>\"}}`). The Copy action id on the default System Workflow scheme is `963f6a04-5320-42e7-ab74-6d876d199946`; retrieve it for other environments via `GET /api/v1/workflow/schemes/{schemeId}/actions`. ⚠️ The response `entity` returns the **source** contentlet, not the newly-created copy — locate the copy via a follow-up `POST /api/content/_search` ordered by `modDate DESC`. The copy lands in `SYSTEM_HOST` / `SYSTEM_FOLDER`; destination hints (`pathToMove`, `host`, `folder`, `hostFolder`) are silently ignored. Fire the Move action afterwards to relocate.\n\n**When chaining workflow actions or reading state back immediately after firing, pass `indexPolicy=WAIT_FOR` on each call.** The default `DEFER` is asynchronous and can return stale index reads for several seconds, which can mimic server-side state bugs. For isolated one-off fires where nothing reads the result, leave the default.\n\n**Block Editor (Story Block) fields:** send the value as a **Markdown** string — you do not need to hand-author the underlying ProseMirror/JSON document. dotCMS converts it to the Block Editor (ProseMirror JSON) structure automatically on save, so the field reads back as structured content with no editor round-trip required. A value that is already a valid Tiptap/ProseMirror JSON document is detected and stored unchanged. Markdown is intended for plain content: if the field already holds rich blocks that Markdown cannot represent (embedded contentlets, video or layout blocks), the Markdown value is ignored and the existing document is preserved — to modify such a field, send a full Tiptap/ProseMirror JSON document. Example: `\"body\": \"## Intro\\n\\nHello **world**.\"`.",
 			operationId: "putFireActionById",
 			parameters: [
 				{
@@ -13595,6 +13642,12 @@ var paths = {
 													hasOnlyBatchActionlet: {
 														type: "boolean"
 													},
+													hasDeleteActionlet: {
+														type: "boolean"
+													},
+													hasResetActionlet: {
+														type: "boolean"
+													},
 													hasPublishActionlet: {
 														type: "boolean"
 													},
@@ -13624,12 +13677,6 @@ var paths = {
 													},
 													hasSaveActionlet: {
 														type: "boolean"
-													},
-													hasDeleteActionlet: {
-														type: "boolean"
-													},
-													hasResetActionlet: {
-														type: "boolean"
 													}
 												}
 											}
@@ -13869,6 +13916,12 @@ var paths = {
 															hasOnlyBatchActionlet: {
 																type: "boolean"
 															},
+															hasDeleteActionlet: {
+																type: "boolean"
+															},
+															hasResetActionlet: {
+																type: "boolean"
+															},
 															hasPublishActionlet: {
 																type: "boolean"
 															},
@@ -13898,12 +13951,6 @@ var paths = {
 															},
 															hasSaveActionlet: {
 																type: "boolean"
-															},
-															hasDeleteActionlet: {
-																type: "boolean"
-															},
-															hasResetActionlet: {
-																type: "boolean"
 															}
 														}
 													},
@@ -13940,10 +13987,10 @@ var paths = {
 											type: {
 												type: "string"
 											},
-											bitPermission: {
+											individualPermission: {
 												type: "boolean"
 											},
-											individualPermission: {
+											bitPermission: {
 												type: "boolean"
 											},
 											roleId: {