@dyrected/core 2.11.0 → 2.13.0

package/dist/index.d.ts

@@ -1,8 +1,14 @@
-import { F as Field, B as Block, D as DyrectedConfig, C as CollectionConfig, A as AdminAuthConfig, P as PublicAdminAuthConfig, G as GlobalConfig, a as DeclarativeHookExpression, W as WorkflowConfig, b as AuthenticatedUser, c as WorkflowTransition, L as LifecycleEventName, d as LifecycleEvent, e as BaseDocument, H as HookRequestContext, f as DetailComputedOptions, g as ComputedHandler, h as DetailComputed, i as DetailCustomOptions, j as DetailCustom, k as DetailDividerOptions, l as DetailDivider, m as DisplayFieldOptions, n as DetailField, o as DetailItem, p as DetailGridOptions, q as DetailGrid, r as DetailRepeatOptions, s as DetailRepeat, t as DetailSectionOptions, u as DetailSection, v as DetailTabOptions, w as DetailTab, x as DetailTabsOptions, y as DetailTabs, z as DetailTextOptions, E as DetailText, I as DetailSchema, J as ArrayField, K as BlocksField, M as BooleanField, N as AuthConfig, O as AccessPolicyResolver, Q as DateField, R as DateTimeField, S as EmailField, T as IconField, U as ImageField, V as JoinField, X as JsonField, Y as MultiSelectField, Z as NumberField, _ as ObjectField, $ as RadioField, a0 as RelationshipField, a1 as RichTextField, a2 as RowField, a3 as SelectField, a4 as TextField, a5 as TextareaField, a6 as TimeField, a7 as UrlField } from './app-config-6U_Kum-Z.js';
-export { a8 as AccessConfig, a9 as AccessFunction, aa as AccessFunctionArgs, ab as AccessResult, ac as AccessRule, ad as ActionConfig, ae as ActionContext, af as ActionType, ag as AdminAuthAccessResolution, ah as AdminAuthClaimMapping, ai as AdminAuthMember, aj as AdminAuthProvider, ak as AdminAuthProviderMembersConfig, al as AdminAuthProvisioningMode, am as AdminAuthResolveAccessArgs, an as AdminAuthResolvedIdentity, ao as AdminConfig, ap as AdminDashboardComponentSlots, aq as AdminIconName, ar as AggregateArgs, as as AggregateCastType, at as AggregateInput, au as AggregateOperation, av as AggregateResult, aw as BaseAdminAuthProvider, ax as BaseFieldAdmin, ay as BlockVariant, az as BooleanFieldAdmin, aA as BooleanFormat, aB as CharacterLimitFieldAdmin, aC as CharacterLimitFieldConfig, aD as CollectionAfterChangeHook, aE as CollectionAfterDeleteHook, aF as CollectionAfterReadHook, aG as CollectionAfterReadHookEntry, aH as CollectionAfterTransitionHook, aI as CollectionBeforeChangeHook, aJ as CollectionBeforeChangeHookEntry, aK as CollectionBeforeDeleteHook, aL as CollectionBeforeReadHook, aM as CollectionBeforeReadHookEntry, aN as CollectionBeforeTransitionHook, aO as CollectionListComponentSlots, aP as CollectionViewComponentSlots, aQ as CountOperation, aR as CustomAdminAuthProvider, aS as DatabaseAdapter, aT as DateFieldAdmin, aU as DateFormat, aV as DefineActionOptions, aW as DefineViewOptions, aX as DetailSpan, aY as DisplayTone, aZ as DisplayVariant, a_ as DistinctCountOperation, a$ as DistinctValuesOperation, b0 as DynamicOptionItem, b1 as DynamicOptionsConfig, b2 as DynamicOptionsResolver, b3 as DynamicOptionsResolverArgs, b4 as DyrectedLoggerConfig, b5 as DyrectedObservabilityConfig, b6 as EmailFieldAdmin, b7 as FieldAdminHooks, b8 as FieldAdminOnChangeHook, b9 as FieldAdminOnChangeHookArgs, ba as FieldAdminOptionsHook, bb as FieldAdminOptionsHookArgs, bc as FieldAdminOptionsHookResult, bd as FieldAfterReadHook, be as FieldAfterReadHookArgs, bf as FieldBase, bg as FieldBeforeChangeHook, bh as FieldBeforeChangeHookArgs, bi as FieldHook, bj as FieldHooks, bk as FieldType, bl as FileData, bm as GlobalAfterChangeHook, bn as GlobalAfterReadHook, bo as GlobalAfterReadHookEntry, bp as GlobalBeforeChangeHook, bq as GlobalBeforeChangeHookEntry, br as GlobalBeforeReadHook, bs as GlobalBeforeReadHookEntry, bt as HeadingLevel, bu as HookFunction, bv as IconFieldAdmin, bw as ImageService, bx as InferAggregateResult, by as JoinFieldAdmin, bz as JsonFieldAdmin, bA as JsonFormat, bB as LIFECYCLE_EVENT_NAMES, bC as LifecycleEventHandler, bD as LinkFormat, bE as MetricColor, bF as MultiSelectFieldAdmin, bG as NamedAccessPolicy, bH as NumberFieldAdmin, bI as NumberFormat, bJ as NumberLimitFieldAdmin, bK as NumberLimitFieldConfig, bL as NumericOperation, bM as OIDCAdminAuthProvider, bN as OptionFormat, bO as PaginatedResult, bP as PublicAdminAuthProvider, bQ as RadioFieldAdmin, bR as RateLimitConfig, bS as ReadonlyDatabaseAdapter, bT as RichTextFeature, bU as RichTextFieldConfig, bV as SelectFieldAdmin, bW as SqlWhereResult, bX as StorageAdapter, bY as TextFieldAdmin, bZ as TextFormat, b_ as TextareaFieldAdmin, b$ as TrustProxyConfig, c0 as TypedField, c1 as UploadConfig, c2 as UrlFieldAdmin, c3 as UrlLinkValue, c4 as ViewActionFeatures, c5 as ViewComponentSlots, c6 as ViewConfig, c7 as ViewLayout, c8 as ViewMetric, c9 as ViewSubMetric, ca as WhereClause, cb as WhereOperator, cc as WhereOperatorName, cd as WordLimitFieldAdmin, ce as WordLimitFieldConfig, cf as WorkflowMetadata, cg as WorkflowRole, ch as WorkflowState, ci as WorkflowTransitionContext, cj as defineAction, ck as defineView, cl as parseMongoWhere, cm as parseSqlWhere } from './app-config-6U_Kum-Z.js';
+import { F as Field, B as Block, D as DyrectedConfig, C as CollectionConfig, A as AdminAuthConfig, P as PublicAdminAuthConfig, G as GlobalConfig, a as DeclarativeHookExpression, W as WorkflowConfig, b as AuthenticatedUser, c as WorkflowTransition, L as LifecycleEventName, d as LifecycleEvent, e as BaseDocument, H as HookRequestContext, f as DetailComputedOptions, g as ComputedHandler, h as DetailComputed, i as DetailCustomOptions, j as DetailCustom, k as DetailDividerOptions, l as DetailDivider, m as DisplayFieldOptions, n as DetailField, o as DetailItem, p as DetailGridOptions, q as DetailGrid, r as DetailRepeatOptions, s as DetailRepeat, t as DetailSectionOptions, u as DetailSection, v as DetailTabOptions, w as DetailTab, x as DetailTabsOptions, y as DetailTabs, z as DetailTextOptions, E as DetailText, I as DetailSchema, J as DyrectedContext, K as AIConfig, M as AIPIIConfig, N as ArrayField, O as BlocksField, Q as BooleanField, R as AuthConfig, S as AccessPolicyResolver, T as DateField, U as DateTimeField, V as EmailField, X as IconField, Y as ImageField, Z as JoinField, _ as JsonField, $ as MultiSelectField, a0 as NumberField, a1 as ObjectField, a2 as RadioField, a3 as RelationshipField, a4 as RichTextField, a5 as RowField, a6 as SelectField, a7 as TextField, a8 as TextareaField, a9 as TimeField, aa as UrlField } from './app-D_ODsBWA.js';
+export { ab as AIAction, ac as AIActionStatus, ad as AIActionType, ae as AIAuditActionType, af as AIAuditRecord, ag as AIChunk, ah as AIMessage, ai as AIPIIPattern, aj as AIRateLimitResult, ak as AIRateLimitStore, al as AIThread, am as AIToolContext, an as AIToolDefinition, ao as AI_ACTIONS_COLLECTION, ap as AI_AUDIT_COLLECTION, aq as AI_CHUNKS_COLLECTION, ar as AI_MESSAGES_COLLECTION, as as AI_THREADS_COLLECTION, at as AccessConfig, au as AccessFunction, av as AccessFunctionArgs, aw as AccessResult, ax as AccessRule, ay as ActionConfig, az as ActionContext, aA as ActionType, aB as AdminAuthAccessResolution, aC as AdminAuthClaimMapping, aD as AdminAuthMember, aE as AdminAuthProvider, aF as AdminAuthProviderMembersConfig, aG as AdminAuthProvisioningMode, aH as AdminAuthResolveAccessArgs, aI as AdminAuthResolvedIdentity, aJ as AdminConfig, aK as AdminDashboardComponentSlots, aL as AdminIconName, aM as AggregateArgs, aN as AggregateCastType, aO as AggregateCollectionResult, aP as AggregateInput, aQ as AggregateOperation, aR as AggregateResult, aS as BaseAdminAuthProvider, aT as BaseFieldAdmin, aU as BlockVariant, aV as BooleanFieldAdmin, aW as BooleanFormat, aX as CharacterLimitFieldAdmin, aY as CharacterLimitFieldConfig, aZ as CollectionAfterChangeHook, a_ as CollectionAfterDeleteHook, a$ as CollectionAfterReadHook, b0 as CollectionAfterReadHookEntry, b1 as CollectionAfterTransitionHook, b2 as CollectionBeforeChangeHook, b3 as CollectionBeforeChangeHookEntry, b4 as CollectionBeforeDeleteHook, b5 as CollectionBeforeReadHook, b6 as CollectionBeforeReadHookEntry, b7 as CollectionBeforeTransitionHook, b8 as CollectionListComponentSlots, b9 as CollectionRAGConfig, ba as CollectionSchemaResult, bb as CollectionSummaryResult, bc as CollectionViewComponentSlots, bd as CountOperation, be as CustomAdminAuthProvider, bf as DatabaseAdapter, bg as DateFieldAdmin, bh as DateFormat, bi as DefineActionOptions, bj as DefineViewOptions, bk as DetailSpan, bl as DisplayTone, bm as DisplayVariant, bn as DistinctCountOperation, bo as DistinctValuesOperation, bp as DynamicOptionItem, bq as DynamicOptionsConfig, br as DynamicOptionsResolver, bs as DynamicOptionsResolverArgs, bt as DyrectedAIContext, bu as DyrectedLoggerConfig, bv as DyrectedObservabilityConfig, bw as EmailFieldAdmin, bx as FieldAdminHooks, by as FieldAdminOnChangeHook, bz as FieldAdminOnChangeHookArgs, bA as FieldAdminOptionsHook, bB as FieldAdminOptionsHookArgs, bC as FieldAdminOptionsHookResult, bD as FieldAfterReadHook, bE as FieldAfterReadHookArgs, bF as FieldBase, bG as FieldBeforeChangeHook, bH as FieldBeforeChangeHookArgs, bI as FieldHook, bJ as FieldHooks, bK as FieldType, bL as FileData, bM as GetDocumentResult, bN as GlobalAfterChangeHook, bO as GlobalAfterReadHook, bP as GlobalAfterReadHookEntry, bQ as GlobalBeforeChangeHook, bR as GlobalBeforeChangeHookEntry, bS as GlobalBeforeReadHook, bT as GlobalBeforeReadHookEntry, bU as GlobalRAGConfig, bV as GlobalSchemaResult, bW as GlobalSummaryResult, bX as HeadingLevel, bY as HookFunction, bZ as IconFieldAdmin, b_ as ImageService, b$ as ImageTransformOptions, c0 as InferAggregateResult, c1 as JoinFieldAdmin, c2 as JsonFieldAdmin, c3 as JsonFormat, c4 as LIFECYCLE_EVENT_NAMES, c5 as LifecycleEventHandler, c6 as LinkFormat, c7 as MetricColor, c8 as MultiSelectFieldAdmin, c9 as NamedAccessPolicy, ca as NumberFieldAdmin, cb as NumberFormat, cc as NumberLimitFieldAdmin, cd as NumberLimitFieldConfig, ce as NumericOperation, cf as OIDCAdminAuthProvider, cg as OptionFormat, ch as PaginatedResult, ci as PublicAdminAuthProvider, cj as QueryCollectionResult, ck as RAGSearchResult, cl as RadioFieldAdmin, cm as RateLimitConfig, cn as ReadonlyDatabaseAdapter, co as RichTextFeature, cp as RichTextFieldConfig, cq as SelectFieldAdmin, cr as SqlWhereResult, cs as StorageAdapter, ct as TextFieldAdmin, cu as TextFormat, cv as TextareaFieldAdmin, cw as TrustProxyConfig, cx as TypedField, cy as UploadConfig, cz as UrlFieldAdmin, cA as UrlLinkValue, cB as ViewActionFeatures, cC as ViewComponentSlots, cD as ViewConfig, cE as ViewLayout, cF as ViewMetric, cG as ViewSubMetric, cH as WhereClause, cI as WhereOperator, cJ as WhereOperatorName, cK as WordLimitFieldAdmin, cL as WordLimitFieldConfig, cM as WorkflowMetadata, cN as WorkflowRole, cO as WorkflowState, cP as WorkflowTransitionContext, cQ as defineAction, cR as defineView, cS as isAICollection, cT as parseMongoWhere, cU as parseSqlWhere } from './app-D_ODsBWA.js';
 import jexl from 'jexl';
-import 'lucide-react';
+import { Context } from 'hono';
+export { z } from 'zod';
+import 'hono/types';
 import 'pino';
+import 'lucide-react';
+import 'jose';
+import '@opentelemetry/api';
+import '@opentelemetry/exporter-prometheus';
 
 type Prettify<T> = {
     [K in keyof T]: T[K];
@@ -75,6 +81,21 @@ type UploadDocFields = {
     }>;
 };
 
+type AIErrorCode = 'AI_UNCONFIGURED' | 'AI_RATE_LIMITED' | 'AI_QUOTA_EXHAUSTED' | 'AI_TIMEOUT' | 'AI_TOOL_VALIDATION_ERROR' | 'AI_PERMISSION_DENIED' | 'AI_TENANT_VIOLATION' | 'AI_ACTION_EXPIRED' | 'AI_ACTION_ALREADY_EXECUTED' | 'AI_INTERNAL_ERROR';
+declare class DyrectedAIError extends Error {
+    readonly code: AIErrorCode;
+    readonly status: number;
+    readonly details?: Record<string, unknown>;
+    constructor(code: AIErrorCode, message: string, status?: number, details?: Record<string, unknown>);
+    toJSON(): {
+        error: boolean;
+        code: AIErrorCode;
+        message: string;
+        status: number;
+        details: Record<string, unknown> | undefined;
+    };
+}
+
 /**
  * Normalizes the Dyrected configuration by injecting system fields
  * (createdAt, updatedAt, createdBy, updatedBy) into every collection and
@@ -751,6 +772,10 @@ declare class FieldConditionBuilder {
      * Checks that the field is null, undefined, or an empty string.
      */
     isEmpty(): string;
+    /**
+     * Alias for `isEmpty()`.
+     */
+    empty(): string;
     /**
      * Numerical greater than (`field > num`).
      */
@@ -791,6 +816,22 @@ declare class FieldConditionBuilder {
      * Checks if array/string length is at least a threshold.
      */
     hasLengthAtLeast(length: number): string;
+    /**
+     * Generates a JEXL `slugify(field)` transform expression.
+     */
+    slugify(): string;
+    /**
+     * Generates a JEXL `lower(field)` transform expression.
+     */
+    lower(): string;
+    /**
+     * Generates a JEXL `upper(field)` transform expression.
+     */
+    upper(): string;
+    /**
+     * Generates a JEXL `trim(field)` transform expression.
+     */
+    trim(): string;
 }
 /**
  * Pre-built access control condition helpers.
@@ -830,22 +871,26 @@ interface AccessConditions {
  * Condition builder utilities for serializable JEXL expressions in `admin.condition`,
  * access control rules, computed fields, and dynamic `admin.previewUrl`.
  */
-interface WhenFunction {
+/**
+ * Expression builder utilities for serializable JEXL expressions in `admin.condition`,
+ * access control rules, computed fields, transforms, and dynamic `admin.previewUrl`.
+ */
+interface ExprFunction {
     /**
-     * Starts a fluent condition builder for a specific field name.
+     * Starts a fluent condition/expression builder for a specific field name.
      *
      * @example
-     *   admin: { condition: when('price').greaterThan(100) }
-     *   admin: { condition: when('status').in('published', 'archived') }
-     *   admin: { previewUrl: when.then(when('slug').equals('home'), '/', "'/' + slug") }
+     *   admin: { condition: expr('price').greaterThan(100) }
+     *   admin: { condition: expr('status').in('published', 'archived') }
+     *   admin: { previewUrl: expr.ifElse(expr('slug').equals('home'), '/', expr.concat('/', 'slug')) }
      */
     (fieldName: string): FieldConditionBuilder;
     /**
-     * Starts a fluent condition builder on the `user` context (e.g. `when.user('email').endsWith('@company.com')`).
+     * Starts a fluent condition builder on the `user` context (e.g. `expr.user('email').endsWith('@company.com')`).
      */
     user: (userProp: string) => FieldConditionBuilder;
     /**
-     * Starts a fluent condition builder on `siblingData` (e.g. `when.sibling('_variant').equals('split')`).
+     * Starts a fluent condition builder on `siblingData` (e.g. `expr.sibling('_variant').equals('split')`).
      */
     sibling: (siblingProp: string) => FieldConditionBuilder;
     /**
@@ -857,10 +902,10 @@ interface WhenFunction {
      * Automatically quotes literal segments (like paths) and preserves field identifiers.
      *
      * @example
-     *   when.concat('/country-portals/', 'slug')
+     *   expr.concat('/country-portals/', 'slug')
      *   // => "'/country-portals/' + slug"
      *
-     *   when.concat('/blog/', 'category', '/', 'slug')
+     *   expr.concat('/blog/', 'category', '/', 'slug')
      *   // => "'/blog/' + category + '/' + slug"
      */
     concat: (...parts: string[]) => string;
@@ -885,7 +930,11 @@ interface WhenFunction {
      * Can be nested to create ternary chains.
      *
      * @example
-     *   admin: { previewUrl: when.then(when.fieldEquals('slug', 'home'), '/', "'/' + slug") }
+     *   admin: { previewUrl: expr.ifElse(expr.equals('slug', 'home'), '/', expr.concat('/', 'slug')) }
+     */
+    ifElse: (condition: string, ifTrue: string | number | boolean | null, ifFalse?: string | number | boolean | null) => string;
+    /**
+     * Alias for `ifElse`.
      */
     then: (condition: string, ifTrue: string | number | boolean | null, ifFalse?: string | number | boolean | null) => string;
     /**
@@ -893,10 +942,10 @@ interface WhenFunction {
      *
      * @example
      *   admin: {
-     *     previewUrl: when.match()
-     *       .case(when('slug').equals('home'), '/')
-     *       .case(when.fieldNotEmpty('path'), 'path')
-     *       .case(when('category').equals('news'), "'/news/' + slug")
+     *     previewUrl: expr.match()
+     *       .case(expr('slug').equals('home'), '/')
+     *       .case(expr.notEmpty('path'), 'path')
+     *       .case(expr('category').equals('news'), "'/news/' + slug")
      *       .otherwise("'/' + slug")
      *   }
      */
@@ -906,9 +955,9 @@ interface WhenFunction {
      *
      * @example
      *   admin: {
-     *     previewUrl: when.cases(
-     *       [when.fieldEquals('slug', 'home'), '/'],
-     *       [when.fieldNotEmpty('path'), 'path'],
+     *     previewUrl: expr.cases(
+     *       [expr.equals('slug', 'home'), '/'],
+     *       [expr.notEmpty('path'), 'path'],
      *       "'/' + slug"
      *     )
      *   }
@@ -919,7 +968,7 @@ interface WhenFunction {
      */
     all: (...conditions: (string | undefined | null | false)[]) => string;
     /**
-     * Alias for `when.all(...)`.
+     * Alias for `expr.all(...)`.
      */
     and: (...conditions: (string | undefined | null | false)[]) => string;
     /**
@@ -927,7 +976,7 @@ interface WhenFunction {
      */
     any: (...conditions: (string | undefined | null | false)[]) => string;
     /**
-     * Alias for `when.any(...)`.
+     * Alias for `expr.any(...)`.
      */
     or: (...conditions: (string | undefined | null | false)[]) => string;
     /**
@@ -938,8 +987,8 @@ interface WhenFunction {
      * Generates a condition matching one or multiple variant names.
      *
      * @example
-     *   admin: { condition: when.variant('split') }
-     *   admin: { condition: when.variant('imageLeft', 'imageRight') }
+     *   admin: { condition: expr.variant('split') }
+     *   admin: { condition: expr.variant('imageLeft', 'imageRight') }
      */
     variant: (...variants: (string | string[])[]) => string;
     /**
@@ -950,7 +999,7 @@ interface WhenFunction {
      * Generates a condition matching one or multiple block slugs.
      *
      * @example
-     *   admin: { condition: when.block('hero', 'cta') }
+     *   admin: { condition: expr.block('hero', 'cta') }
      */
     block: (...blocks: (string | string[])[]) => string;
     /**
@@ -961,71 +1010,90 @@ interface WhenFunction {
      * Generates a condition checking equality against a field value.
      *
      * @example
-     *   admin: { condition: when.fieldEquals('status', 'published') }
+     *   admin: { condition: expr.equals('status', 'published') }
      */
-    fieldEquals: (field: string, value: string | number | boolean | null) => string;
+    equals: (field: string, value: string | number | boolean | null) => string;
     /**
      * Generates a condition checking inequality against a field value.
      */
-    fieldNotEquals: (field: string, value: string | number | boolean | null) => string;
+    notEquals: (field: string, value: string | number | boolean | null) => string;
     /**
      * Generates a condition checking if a field is in a list of allowed values.
      */
-    fieldIn: (field: string, ...values: (string | number | boolean | (string | number | boolean)[])[]) => string;
+    in: (field: string, ...values: (string | number | boolean | (string | number | boolean)[])[]) => string;
     /**
      * Generates a condition checking if a field is NOT in a list of values.
      */
-    fieldNotIn: (field: string, ...values: (string | number | boolean | (string | number | boolean)[])[]) => string;
+    notIn: (field: string, ...values: (string | number | boolean | (string | number | boolean)[])[]) => string;
     /**
      * Generates a condition checking that a field is not null and not empty.
      *
      * @example
-     *   admin: { condition: when.fieldNotEmpty('couponCode') }
+     *   admin: { condition: expr.notEmpty('couponCode') }
      */
-    fieldNotEmpty: (field: string) => string;
+    notEmpty: (field: string) => string;
     /**
      * Generates a condition checking that a field is null, undefined, or empty.
+     *
+     * @example
+     *   admin: { condition: expr.empty('couponCode') }
      */
-    fieldEmpty: (field: string) => string;
+    empty: (field: string) => string;
     /**
      * Generates a condition checking that a boolean field is true.
      */
-    fieldIsTrue: (field: string) => string;
+    isTrue: (field: string) => string;
     /**
      * Generates a condition checking that a boolean field is false / falsy.
      */
-    fieldIsFalse: (field: string) => string;
+    isFalse: (field: string) => string;
     /**
      * Generates a numerical greater-than condition (`field > value`).
      */
-    fieldGreaterThan: (field: string, value: number | string) => string;
+    greaterThan: (field: string, value: number | string) => string;
     /**
      * Generates a numerical greater-than-or-equal condition (`field >= value`).
      */
-    fieldGreaterThanOrEqual: (field: string, value: number | string) => string;
+    greaterThanOrEqual: (field: string, value: number | string) => string;
     /**
      * Generates a numerical less-than condition (`field < value`).
      */
-    fieldLessThan: (field: string, value: number | string) => string;
+    lessThan: (field: string, value: number | string) => string;
     /**
      * Generates a numerical less-than-or-equal condition (`field <= value`).
      */
-    fieldLessThanOrEqual: (field: string, value: number | string) => string;
+    lessThanOrEqual: (field: string, value: number | string) => string;
     /**
      * Generates a range condition (`field >= min && field <= max`).
      */
-    fieldBetween: (field: string, min: number, max: number) => string;
+    between: (field: string, min: number, max: number) => string;
     /**
      * Generates a string prefix condition using JEXL `startsWith(...)`.
      */
-    fieldStartsWith: (field: string, prefix: string) => string;
+    startsWith: (field: string, prefix: string) => string;
     /**
      * Generates a string suffix condition using JEXL `endsWith(...)`.
      */
-    fieldEndsWith: (field: string, suffix: string) => string;
+    endsWith: (field: string, suffix: string) => string;
     /**
      * Generates a string/array inclusion condition using JEXL `includes(...)`.
      */
+    contains: (field: string, item: string | number) => string;
+    fieldEquals: (field: string, value: string | number | boolean | null) => string;
+    fieldNotEquals: (field: string, value: string | number | boolean | null) => string;
+    fieldIn: (field: string, ...values: (string | number | boolean | (string | number | boolean)[])[]) => string;
+    fieldNotIn: (field: string, ...values: (string | number | boolean | (string | number | boolean)[])[]) => string;
+    fieldNotEmpty: (field: string) => string;
+    fieldEmpty: (field: string) => string;
+    fieldIsTrue: (field: string) => string;
+    fieldIsFalse: (field: string) => string;
+    fieldGreaterThan: (field: string, value: number | string) => string;
+    fieldGreaterThanOrEqual: (field: string, value: number | string) => string;
+    fieldLessThan: (field: string, value: number | string) => string;
+    fieldLessThanOrEqual: (field: string, value: number | string) => string;
+    fieldBetween: (field: string, min: number, max: number) => string;
+    fieldStartsWith: (field: string, prefix: string) => string;
+    fieldEndsWith: (field: string, suffix: string) => string;
     fieldContains: (field: string, item: string | number) => string;
     /**
      * Generates a condition checking that an array is non-empty (`length(field) > 0`).
@@ -1052,14 +1120,14 @@ interface WhenFunction {
      * Checks both `user.role` (string) and `user.roles` (array).
      *
      * @example
-     *   admin: { condition: when.userRole('admin', 'developer') }
+     *   admin: { condition: expr.userRole('admin', 'developer') }
      */
     userRole: (...roles: (string | string[])[]) => string;
     /**
      * Generates a condition checking the editor's email domain.
      *
      * @example
-     *   admin: { condition: when.userEmailDomain('agrictrail.com') }
+     *   admin: { condition: expr.userEmailDomain('agrictrail.com') }
      */
     userEmailDomain: (domain: string) => string;
     /**
@@ -1083,7 +1151,73 @@ interface WhenFunction {
      */
     statusIn: (...statuses: (string | string[])[]) => string;
 }
-declare const when: WhenFunction;
+/**
+ * Backwards compatibility type alias for `ExprFunction`.
+ */
+type WhenFunction = ExprFunction;
+/**
+ * Primary declarative expression builder for Dyrected schemas.
+ */
+declare const expr: ExprFunction;
+/**
+ * Backwards compatibility alias for `expr`.
+ */
+declare const when: ExprFunction;
+
+/**
+ * Extracts the list of allowed site IDs for a given authenticated user or token payload.
+ * Checks common tenant membership properties: `allowedSites`, `siteIds`, `siteAccess`, and singular `siteId`.
+ */
+declare function getAllowedSitesForUser(user?: Record<string, unknown> | null, payload?: Record<string, unknown> | null): string[] | undefined;
+/**
+ * Checks whether an authenticated user is permitted to access a given site ID.
+ * If the user has no tenant restrictions configured, access is unrestricted (returns true).
+ */
+declare function isSiteAuthorized(user: Record<string, unknown> | null | undefined, payload: Record<string, unknown> | null | undefined, requestedSiteId: string | undefined): boolean;
+/**
+ * Resolves the authorized site ID for the current request.
+ * Prioritizes `c.get("siteId")` (set upstream) and `X-Site-Id` header.
+ * Enforces that restricted users cannot spoof or access unauthorized site IDs.
+ *
+ * @throws HTTPException(403) if the user is not authorized for the requested site.
+ */
+declare function resolveAuthorizedSiteId(c: Context<DyrectedContext>): string;
+
+declare const NON_NEGOTIABLE_CREDENTIAL_FIELDS: Set<string>;
+/**
+ * Masks an email address to protect privacy (e.g. "john.doe@example.com" -> "j***@example.com").
+ */
+declare function maskEmail(email: string, strategy?: "mask" | "token"): string;
+/**
+ * Masks a phone number (e.g. "+1 555-234-5678" -> "+1 ***-***-5678").
+ */
+declare function maskPhone(phone: string, strategy?: "mask" | "token"): string;
+/**
+ * High-performance regex patterns for common PII.
+ */
+declare const PII_REGEX_PATTERNS: Record<string, RegExp>;
+/**
+ * Scrubs unstructured free text using configured regex patterns and custom scrubbers.
+ */
+declare function maskTextPII(text: string, piiConfig?: AIPIIConfig): string;
+interface SanitizeDocForAIOptions {
+    doc: Record<string, unknown>;
+    collectionConfig?: CollectionConfig;
+    globalAIConfig?: AIConfig;
+}
+/**
+ * Deterministically sanitizes a CMS document before sending it to an AI assistant or RAG pipeline:
+ * 1. Non-negotiably strips passwords, secrets, hashes, and session tokens.
+ * 2. Strips collection-level `excludeFields`.
+ * 3. Applies field-level definitions:
+ *    - Automatically masks `email` and `phone` by default (opt-out privacy) unless `ai: { allowRaw: true }`.
+ *    - Strips fields configured with `ai: { exclude: true }`.
+ *    - Masks fields configured with `ai: { redact: true }`.
+ * 4. Applies collection-level `redactFields`.
+ * 5. Calls custom programmatic `collectionConfig.ai.sanitizeDoc` hook if provided.
+ * 6. Scrubs unstructured text across string fields if `config.ai.pii.enabled === true`.
+ */
+declare function sanitizeDocForAI(options: SanitizeDocForAIOptions): Record<string, unknown>;
 
 type TopLevelFieldName<TFields extends readonly Field[]> = Extract<TFields[number], {
     name: string;
@@ -1504,4 +1638,4 @@ declare function defineTab<const T extends readonly Field[]>(args: {
     fields: T;
 }): T;
 
-export { type AccessConditions, AccessPolicyResolver, AdminAuthConfig, ArrayField, AuthConfig, type AuthDocFields, AuthenticatedUser, BUILTIN_JEXL_HELPERS, BaseDocument, Block, BlocksField, BooleanField, CollectionConfig, ComputedHandler, type ConfigDiagnostic, ConfigValidationError, DateField, DateTimeField, type DeclarativeAccessSurface, type DeclarativeAccessValidationIssue, type DeclarativeAdminSurface, type DeclarativeAdminValidationIssue, DeclarativeHookExpression, type DeclarativeHookSurface, type DeclarativeHookValidationIssue, type DeclarativePreviewSurface, type DeclarativePreviewValidationIssue, DetailComputed, DetailComputedOptions, DetailCustom, DetailCustomOptions, DetailDivider, DetailDividerOptions, DetailField, DetailGrid, DetailGridOptions, DetailItem, DetailRepeat, DetailRepeatOptions, DetailSchema, DetailSection, DetailSectionOptions, DetailTab, DetailTabOptions, DetailTabs, DetailTabsOptions, DetailText, DetailTextOptions, DisplayFieldOptions, DyrectedConfig, EmailField, Field, FieldConditionBuilder, GlobalConfig, HookRequestContext, IconField, ImageField, type InferDocShape, JoinField, JsonField, LIFECYCLE_EVENTS_COLLECTION, LifecycleEvent, LifecycleEventName, MatchBuilder, MultiSelectField, NumberField, ObjectField, type Prettify, PublicAdminAuthConfig, type PublishingWorkflowOptions, RadioField, RelationshipField, RichTextField, RowField, SelectField, type SortClause, type SortDirection, type SqlSortDialect, type SystemDocFields, TextField, TextareaField, TimeField, type UploadDocFields, UrlField, WORKFLOW_HISTORY_COLLECTION, type WhenFunction, WorkflowConfig, WorkflowTransition, abs, addDays, assertValidAdminConditionsInConfig, assertValidDeclarativeAccessInConfig, assertValidDeclarativeHookExpression, assertValidDeclarativeHookResult, assertValidDeclarativeHooksInConfig, assertValidPreviewUrlsInConfig, availableWorkflowTransitions, buildSqlOrderBy, canViewWorkflowDraft, capitalize, ceil, clamp, coalesce, collectAdminConditionValidationIssues, collectConfigDiagnostics, collectDeclarativeAccessValidationIssues, collectDeclarativeHookValidationIssues, collectPreviewUrlValidationIssues, compact, count, createLifecycleEvent, createWorkflowDocument, defaultValue, defineArrayField, defineBlock, defineBlocksField, defineBooleanField, defineCollection, defineConfig, defineDateField, defineDateTimeField, defineEmailField, defineField, defineGlobal, defineIconField, defineImageField, defineJoinField, defineJsonField, defineMultiSelectField, defineNumberField, defineObjectField, definePublishingWorkflow, defineRadioField, defineRelationshipField, defineRichTextField, defineRowField, defineSelectField, defineTab, defineTextField, defineTextareaField, defineTimeField, defineUrlField, diffDays, dispatchLifecycleEvent, dispatchPendingLifecycleEvents, displayComputed, displayCustom, displayCustomComponent, displayDivider, displayField, displayGrid, displayRepeat, displaySection, displayTab, displayTabs, displayText, endsWith, evaluateDetailComputed, evaluateJexl, evaluateJexlSync, executeFieldAfterRead, executeFieldBeforeChange, first, floor, formatConfigDiagnostics, formatDate, formatJexlValue, generateDefaultDetailSchema, generateOpenApi, get, getAdminAuthCollection, getPublicAdminAuthConfig, includes, initializeWorkflowDocument, isConfigValidationError, isDetailItemVisible, isEmpty, isFuture, isPast, join, last, length, lower, materializeWorkflowDocument, max, min, normalizeConfig, normalizeDetailItem, now, numericFieldNames, parseSort, pow, publishedStateName, publishingWorkflow, readingTime, registerJexlHelpers, replace, resolveAdminAuthCollection, round, runCollectionHooks, saveWorkflowDraft, simplePublishingWorkflow, slugify, sqrt, startsWith, sum, today, transitionWorkflow, trim, truncate, unique, upper, validateAdminConditionExpression, validateDeclarativeAccessExpression, validateDeclarativeHookExpression, validatePreviewUrlExpression, when, wordCount, workflowCapabilities };
+export { AIConfig, type AIErrorCode, AIPIIConfig, type AccessConditions, AccessPolicyResolver, AdminAuthConfig, ArrayField, AuthConfig, type AuthDocFields, AuthenticatedUser, BUILTIN_JEXL_HELPERS, BaseDocument, Block, BlocksField, BooleanField, CollectionConfig, ComputedHandler, type ConfigDiagnostic, ConfigValidationError, DateField, DateTimeField, type DeclarativeAccessSurface, type DeclarativeAccessValidationIssue, type DeclarativeAdminSurface, type DeclarativeAdminValidationIssue, DeclarativeHookExpression, type DeclarativeHookSurface, type DeclarativeHookValidationIssue, type DeclarativePreviewSurface, type DeclarativePreviewValidationIssue, DetailComputed, DetailComputedOptions, DetailCustom, DetailCustomOptions, DetailDivider, DetailDividerOptions, DetailField, DetailGrid, DetailGridOptions, DetailItem, DetailRepeat, DetailRepeatOptions, DetailSchema, DetailSection, DetailSectionOptions, DetailTab, DetailTabOptions, DetailTabs, DetailTabsOptions, DetailText, DetailTextOptions, DisplayFieldOptions, DyrectedAIError, DyrectedConfig, EmailField, type ExprFunction, Field, FieldConditionBuilder, GlobalConfig, HookRequestContext, IconField, ImageField, type InferDocShape, JoinField, JsonField, LIFECYCLE_EVENTS_COLLECTION, LifecycleEvent, LifecycleEventName, MatchBuilder, MultiSelectField, NON_NEGOTIABLE_CREDENTIAL_FIELDS, NumberField, ObjectField, PII_REGEX_PATTERNS, type Prettify, PublicAdminAuthConfig, type PublishingWorkflowOptions, RadioField, RelationshipField, RichTextField, RowField, type SanitizeDocForAIOptions, SelectField, type SortClause, type SortDirection, type SqlSortDialect, type SystemDocFields, TextField, TextareaField, TimeField, type UploadDocFields, UrlField, WORKFLOW_HISTORY_COLLECTION, type WhenFunction, WorkflowConfig, WorkflowTransition, abs, addDays, assertValidAdminConditionsInConfig, assertValidDeclarativeAccessInConfig, assertValidDeclarativeHookExpression, assertValidDeclarativeHookResult, assertValidDeclarativeHooksInConfig, assertValidPreviewUrlsInConfig, availableWorkflowTransitions, buildSqlOrderBy, canViewWorkflowDraft, capitalize, ceil, clamp, coalesce, collectAdminConditionValidationIssues, collectConfigDiagnostics, collectDeclarativeAccessValidationIssues, collectDeclarativeHookValidationIssues, collectPreviewUrlValidationIssues, compact, count, createLifecycleEvent, createWorkflowDocument, defaultValue, defineArrayField, defineBlock, defineBlocksField, defineBooleanField, defineCollection, defineConfig, defineDateField, defineDateTimeField, defineEmailField, defineField, defineGlobal, defineIconField, defineImageField, defineJoinField, defineJsonField, defineMultiSelectField, defineNumberField, defineObjectField, definePublishingWorkflow, defineRadioField, defineRelationshipField, defineRichTextField, defineRowField, defineSelectField, defineTab, defineTextField, defineTextareaField, defineTimeField, defineUrlField, diffDays, dispatchLifecycleEvent, dispatchPendingLifecycleEvents, displayComputed, displayCustom, displayCustomComponent, displayDivider, displayField, displayGrid, displayRepeat, displaySection, displayTab, displayTabs, displayText, endsWith, evaluateDetailComputed, evaluateJexl, evaluateJexlSync, executeFieldAfterRead, executeFieldBeforeChange, expr, first, floor, formatConfigDiagnostics, formatDate, formatJexlValue, generateDefaultDetailSchema, generateOpenApi, get, getAdminAuthCollection, getAllowedSitesForUser, getPublicAdminAuthConfig, includes, initializeWorkflowDocument, isConfigValidationError, isDetailItemVisible, isEmpty, isFuture, isPast, isSiteAuthorized, join, last, length, lower, maskEmail, maskPhone, maskTextPII, materializeWorkflowDocument, max, min, normalizeConfig, normalizeDetailItem, now, numericFieldNames, parseSort, pow, publishedStateName, publishingWorkflow, readingTime, registerJexlHelpers, replace, resolveAdminAuthCollection, resolveAuthorizedSiteId, round, runCollectionHooks, sanitizeDocForAI, saveWorkflowDraft, simplePublishingWorkflow, slugify, sqrt, startsWith, sum, today, transitionWorkflow, trim, truncate, unique, upper, validateAdminConditionExpression, validateDeclarativeAccessExpression, validateDeclarativeHookExpression, validatePreviewUrlExpression, when, wordCount, workflowCapabilities };