@dyrected/core 2.5.30 → 2.5.33

package/dist/index.cjs

@@ -24,6 +24,7 @@ __export(index_exports, {
   LIFECYCLE_EVENT_NAMES: () => LIFECYCLE_EVENT_NAMES,
   WORKFLOW_HISTORY_COLLECTION: () => WORKFLOW_HISTORY_COLLECTION,
   availableWorkflowTransitions: () => availableWorkflowTransitions,
+  canViewWorkflowDraft: () => canViewWorkflowDraft,
   createLifecycleEvent: () => createLifecycleEvent,
   createWorkflowDocument: () => createWorkflowDocument,
   defineCollection: () => defineCollection,
@@ -33,8 +34,7 @@ __export(index_exports, {
   dispatchPendingLifecycleEvents: () => dispatchPendingLifecycleEvents,
   executeFieldAfterRead: () => executeFieldAfterRead,
   executeFieldBeforeChange: () => executeFieldBeforeChange,
-  generateAIPrompt: () => generateAIPrompt,
-  generateFreshSetupPrompt: () => generateFreshSetupPrompt,
+  generateOpenApi: () => generateOpenApi,
   initializeWorkflowDocument: () => initializeWorkflowDocument,
   materializeWorkflowDocument: () => materializeWorkflowDocument,
   normalizeConfig: () => normalizeConfig,
@@ -57,827 +57,6 @@ var LIFECYCLE_EVENT_NAMES = [
   "entry.unpublished"
 ];
 
-// src/utils/setup-prompt.ts
-function buildEnvironmentSection(frameworkLabel, isSelfHosted, config) {
-  const credentialLines = isSelfHosted ? "" : `- Site ID  : ${config.siteId}
-- API Key  : ${config.apiKey}`;
-  return `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-1. ENVIRONMENT
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-- Framework : ${frameworkLabel || "Detect it"}
-- Host Type : ${isSelfHosted ? "Self-Hosted (Local/Private Server)" : "Managed (Dyrected Cloud)"}
-- API Base  : ${config.baseUrl || "http://localhost:3000"}
-${credentialLines}`;
-}
-function buildDiagnosticSection() {
-  return `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-2. PHASE 0 \u2014 DISCOVERY
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-Before writing any code, you MUST ask the user these questions.
-Write them exactly as shown below \u2014 in plain language with examples.
-Wait for the user to answer ALL of them before proceeding.
-
-\u2500\u2500\u2500 QUESTION 1 \u2500\u2500\u2500
-Ask:
-"Do you already have a website built, or are we starting fresh?
-
-  \u2192 Already built: share your project or describe what pages you have
-    (e.g. Home, About, Services, Contact)
-  \u2192 Starting fresh: just say 'new site' and describe what the site is for"
-
-\u2500\u2500\u2500 QUESTION 2 \u2500\u2500\u2500
-Ask:
-"What kind of content will your client need to update regularly?
-
-  Here are some examples to help you think:
-  \u2192 Blog posts or news articles
-  \u2192 Team member profiles (name, photo, bio)
-  \u2192 Services or product descriptions
-  \u2192 Testimonials or reviews
-  \u2192 Event listings
-  \u2192 FAQs
-  \u2192 Homepage text (headline, hero image, call-to-action button)
-
-  Just list the ones that apply. You can say things like:
-  'They need to update blog posts and team members'"
-
-\u2500\u2500\u2500 QUESTION 3 \u2500\u2500\u2500
-Ask:
-"Are there any pages on the site that should NEVER change \u2014 like a
-  custom-coded page you want to leave exactly as it is?
-
-  Example answer: 'The homepage has a custom animation, leave that alone.
-  Everything else can be managed from the CMS.'
-
-  If everything should be manageable, just say 'all pages'"
-
-\u2500\u2500\u2500 QUESTION 4 \u2500\u2500\u2500
-Ask:
-"What is this website for? Pick the closest description:
-
-  A) A business or agency marketing site (show services, get leads)
-  B) A blog or content site (publish articles regularly)
-  C) A SaaS or product site (landing page, pricing, features)
-  D) A portfolio (show work, case studies)
-  E) An e-commerce or product catalogue
-  F) Something else \u2014 describe it in one sentence"
-
-\u2500\u2500\u2500 IF EXISTING SITE \u2500\u2500\u2500
-If the user confirms they have an existing site, also:
-- Scan the codebase for all hardcoded text that should be CMS-managed
-- Identify repeated data structures that should become collections
-- Propose saving current content to a migration/ folder as .json files
-  BEFORE touching any code
-- Report your findings to the user and get confirmation before proceeding
-
-Do NOT write any implementation code until all questions are answered
-and the user has confirmed the content plan.`;
-}
-function buildConstraintsSection() {
-  return `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-3. ARCHITECTURE & CONSTRAINTS
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-- API ACCESS         : Use client.collection(slug) as the only entry point.
-- ZERO-STATE         : Always use initialData in all data fetches so the site
-                       renders correctly on first load and never throws during render.
-- MARKETING FREEDOM  : Use a dynamic pages collection with a catch-all route
-                       so marketing can create and manage pages without a developer.
-- BLOCKS DESIGN      : Use blocks for flexible page builders. Store as
-                       [{ blockType: 'slug', ...fields }] and switch on blockType
-                       in the frontend renderer.
-- DATA SAFETY        : Never overwrite or drop existing content or pages.
-                       Preserve everything before making changes.
-- RESILIENCE         : If Dyrected backend is unreachable, fall back to
-                       initialData and show stale content \u2014 never an error page.
-                       All relationship fields must handle null gracefully.
-                       Every block renderer must have a default fallback case.
-- AUTO-SEEDING        : Use initialData: [...] in CollectionConfig or GlobalConfig
-                        to automatically populate the database on first run.
-                        This is great for demo content or default settings.`;
-}
-function buildSchemaRulesSection() {
-  return `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-4. SCHEMA EVOLUTION RULES
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-- Never drop existing fields from the schema. Mark unused fields as deprecated only.
-- All new fields must have a defaultValue.
-- Use renameTo: 'oldName' to lazily migrate data when renaming fields.
-- Use promoted: true for fields that need high-performance SQL indexing or unique constraints.
-- For Cloud deployments, run npx @dyrected/cli sync:schema after every config change. Self-hosted deployments sync automatically on startup.
-`;
-}
-function buildDoNotSection() {
-  return `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-5. DO NOT
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-- Do NOT use client.collections \u2014 always use client.collection(slug).
-- Do NOT add custom auth middleware to the admin route.
-  Dyrected handles admin authentication internally. Do not wrap,
-  protect, or redirect the admin route yourself.
-- Do NOT use renderAdminUI in a Nuxt.js project. Use the DyrectedAdmin
-  component which is auto-imported by @dyrected/nuxt.
-- Do NOT modify or overwrite existing pages without first preserving their data.
-- Do NOT drop, rename, or remove fields from an existing schema.
-- Do NOT integrate blog posts or testimonials unless explicitly requested.
-- Do NOT skip the diagnostic or discovery phase.`;
-}
-function buildTechnicalReferenceSection() {
-  return `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-6. TECHNICAL REFERENCE
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-Use defineCollection, defineGlobal, and defineConfig from '@dyrected/core'.
-
-FIELD TYPES:
-- Primitive  : text | textarea | richText | number | boolean | date | email | url | json | image
-- Choice     : select | multiSelect           (requires options: [{ label, value }])
-- Structural : array | object                 (requires nested fields: [...])
-- Relation   : relationship                   (requires relationTo: '<slug>')
-- Media      : relationship to an upload collection (e.g. 'media')
-- Blocks     : blocks                         (requires blocks: [{ slug, labels, fields }])
-
-COLLECTION OPTIONS:
-- upload: true       \u2014 media library with file upload support
-- auth: true         \u2014 adds login/me endpoints; password field is auto-managed
-- audit: true        \u2014 enables activity logging
-- admin.icon         \u2014 valid Lucide component name for sidebar navigation (e.g. 'Newspaper')
-- admin.useAsTitle   \u2014 field used as display title in admin list view
-- admin.group        \u2014 groups collection under a sidebar heading
-- admin.hidden       \u2014 hides collection from the sidebar (internal/system use)
-
-FIELD OPTIONS:
-- label              \u2014 user-friendly display name (REQUIRED for all fields)
-- required           \u2014 validation
-- unique             \u2014 database-level uniqueness constraint
-- hasMany            \u2014 allow multiple values (for relationship, select, image)
-- defaultValue       \u2014 fallback value (required on all new fields added to existing schemas)
-- promoted           \u2014 extracts field to a real SQL column for native indexing (SQL adapters only)
-- renameTo           \u2014 name of the old field key to migrate data from (lazy migration)
-- admin.condition    \u2014 Jexl expression string to conditionally show/hide field
-                       e.g. "status == \\"published\\""
-- admin.readOnly     \u2014 display only, not editable
-- admin.hidden       \u2014 hidden from editor UI entirely
-- hooks.beforeChange \u2014 [async (value) => newValue] transform before save
-- hooks.afterRead    \u2014 [async (value) => newValue] transform after read
-
-GLOBALS:
-Use defineGlobal for single-instance documents like site settings or navigation.
-Access via client.global(slug).get() and client.global(slug).update(data).
-
-BLOCKS:
-Blocks are stored as [{ blockType: '<slug>', ...fields }].
-The admin renders a drag-and-drop block editor automatically.
-On the frontend, iterate the array and switch on block.blockType.
-Always include a default case in your switch for unknown block types.
-
-COMPLETE SCHEMA EXAMPLE:
-\`\`\`ts
-import { defineCollection, defineGlobal, defineConfig } from '@dyrected/core'
-import { SqliteAdapter } from '@dyrected/db-sqlite'
-
-const media = defineCollection({
-  slug: 'media',
-  upload: true,
-  fields: [
-    { name: 'alt', label: 'Alt Text', type: 'text' },
-  ],
-})
-
-const pages = defineCollection({
-  slug: 'pages',
-  admin: { icon: 'FileText', useAsTitle: 'title', group: 'Content' },
-  fields: [
-    { name: 'title', label: 'Title', type: 'text', required: true },
-    { name: 'slug',  label: 'URL Slug', type: 'text', required: true, unique: true },
-    { name: 'seo', label: 'SEO Metadata', type: 'object', fields: [
-      { name: 'metaTitle',       label: 'Meta Title',       type: 'text' },
-      { name: 'metaDescription', label: 'Meta Description', type: 'textarea' },
-      { name: 'ogImage',         label: 'OG Image',         type: 'relationship', relationTo: 'media' },
-    ]},
-    {
-      name: 'layout',
-      label: 'Page Layout',
-      type: 'blocks',
-      blocks: [
-        {
-          slug: 'hero',
-          labels: { singular: 'Hero', plural: 'Heroes' },
-          fields: [
-            { name: 'heading',    label: 'Heading',    type: 'text',         required: true },
-            { name: 'subheading', label: 'Subheading', type: 'textarea' },
-            { name: 'image',      label: 'Hero Image', type: 'relationship', relationTo: 'media' },
-            { name: 'ctaLabel',   label: 'Button Label', type: 'text' },
-            { name: 'ctaLink',    label: 'Button Link',  type: 'url' },
-          ],
-        },
-        {
-          slug: 'richContent',
-          labels: { singular: 'Rich Content', plural: 'Rich Content Blocks' },
-          fields: [
-            { name: 'content', label: 'Content', type: 'richText', required: true },
-          ],
-        },
-        {
-          slug: 'callToAction',
-          labels: { singular: 'Call to Action', plural: 'Calls to Action' },
-          fields: [
-            { name: 'heading',     label: 'Heading',     type: 'text', required: true },
-            { name: 'description', label: 'Description', type: 'textarea' },
-            { name: 'buttonLabel', label: 'Button Text', type: 'text' },
-            { name: 'buttonLink',  label: 'Button Link',  type: 'url' },
-            { name: 'theme', label: 'Theme', type: 'select', options: [
-              { label: 'Primary',   value: 'primary' },
-              { label: 'Secondary', value: 'secondary' },
-              { label: 'Dark',      value: 'dark' },
-            ]},
-          ],
-        },
-      ],
-    },
-  ],
-})
-
-const settings = defineGlobal({
-  slug: 'settings',
-  label: 'Site Settings',
-  fields: [
-    { name: 'siteName',   label: 'Site Name',    type: 'text' },
-    { name: 'tagline',    label: 'Site Tagline', type: 'text' },
-    { name: 'logo',       label: 'Site Logo',    type: 'relationship', relationTo: 'media' },
-    { name: 'footerText', label: 'Footer Text',  type: 'textarea' },
-  ],
-})
-
-export default defineConfig({
-  collections: [media, pages],
-  globals:     [settings],
-  // Use SqliteAdapter for local, PostgresAdapter or MySqlAdapter for production
-  db: new SqliteAdapter({ filename: './dyrected.db' }),
-})
-\`\`\``;
-}
-function buildDeliverablesSection() {
-  return `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-7. REQUIRED DELIVERABLES \u2014 IN THIS ORDER
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-Return your response in exactly this order. Do not combine steps. Do not skip steps.
-
-1. Diagnostic findings (what exists, what needs to become CMS-managed)
-2. dyrected.config.ts \u2014 complete file
-3. Admin route file \u2014 complete file
-4. Catch-all frontend page route \u2014 complete file
-5. Block components \u2014 names and fields only
-6. Migration/fallback strategy \u2014 numbered steps
-7. Schema sync command
-
-API Reference: https://docs.dyrected.com
-If you are unsure about any syntax or property, refer to the documentation above.`;
-}
-function buildFrameworkSection(activeTab, isSelfHosted, config) {
-  const envPrefix = activeTab === "next" ? "NEXT_PUBLIC_" : activeTab === "nuxt" ? "NUXT_PUBLIC_" : "";
-  const credentialEnvLines = isSelfHosted ? "" : `
-  apiKey:  process.env.${envPrefix}DYRECTED_API_KEY || '${config.apiKey}',
-  siteId:  process.env.${envPrefix}SITE_ID || '${config.siteId}',`;
-  const baseUrlLine = `process.env.${envPrefix}DYRECTED_URL || '${config.baseUrl || "http://localhost:3000"}'`;
-  const sections = {
-    next: `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-8. IMPLEMENTATION \u2014 Next.js
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-1. SDK Setup (lib/dyrected.ts):
-\`\`\`ts
-import { createClient } from '@dyrected/sdk'
-
-export const dyrected = createClient({
-  baseUrl: ${baseUrlLine},${credentialEnvLines}
-})
-\`\`\`
-
-2. Admin Route (app/cms/page.tsx):
-\`\`\`tsx
-import { DyrectedAdmin } from '@dyrected/next/admin'
-
-export default function AdminPage() {
-  // DyrectedAdmin handles routing, auth, and CSS automatically.
-  // Do NOT wrap this in custom auth middleware.
-  return <DyrectedAdmin basename="/cms" />
-}
-\`\`\`
-
-3. Catch-all Page Route (app/[...slug]/page.tsx):
-\`\`\`tsx
-import { dyrected } from '@/lib/dyrected'
-
-export default async function CmsPage({ params }: { params: { slug: string[] } }) {
-  const slug = params.slug?.join('/') || 'home'
-  const page = await dyrected.collection('pages').findOne({ where: { slug: { equals: slug } } })
-
-  if (!page) return <div>Page not found</div>
-
-  return (
-    <main>
-      {page.layout?.map((block: any, i: number) => (
-        <BlockRenderer key={i} block={block} />
-      ))}
-    </main>
-  )
-}
-\`\`\``,
-    nuxt: `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-8. IMPLEMENTATION \u2014 Nuxt.js
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-1. Nuxt.js Config (nuxt.config.ts):
-\`\`\`ts
-export default defineNuxtConfig({
-  modules: ['@dyrected/nuxt'],
-  dyrected: {
-    baseUrl: process.env.${envPrefix}DYRECTED_URL || '${config.baseUrl || "http://localhost:3000"}',${isSelfHosted ? "" : `
-    apiKey:  process.env.${envPrefix}DYRECTED_API_KEY || '${config.apiKey}',
-    siteId:  process.env.${envPrefix}SITE_ID || '${config.siteId}',`}
-  },
-})
-\`\`\`
-
-2. Admin Route (pages/cms/index.vue):
-\`\`\`vue
-<script setup lang="ts">
-// DyrectedAdmin is auto-imported by @dyrected/nuxt.
-// Do NOT manually import it.
-// Do NOT use renderAdminUI here.
-// Do NOT add custom auth middleware \u2014 Dyrected handles authentication.
-definePageMeta({ layout: false })
-</script>
-
-<template>
-  <ClientOnly>
-    <DyrectedAdmin basename="/cms" />
-  </ClientOnly>
-</template>
-\`\`\`
-
-3. Catch-all Page Route (pages/[...slug].vue):
-\`\`\`vue
-<script setup lang="ts">
-const route = useRoute()
-const slug = computed(() => 
-  Array.isArray(route.params.slug) 
-    ? route.params.slug.join('/') 
-    : route.params.slug || 'home'
-)
-
-const { data: page } = await useDyrected('pages').findOne({
-  where: { slug: { equals: slug.value } },
-  initialData: null,
-})
-</script>
-
-<template>
-  <main v-if="page">
-    <BlockRenderer
-      v-for="(block, i) in page.layout"
-      :key="i"
-      :block="block"
-    />
-  </main>
-  <div v-else>Page not found</div>
-</template>
-\`\`\``,
-    react: `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-8. IMPLEMENTATION \u2014 React
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-1. SDK Setup (lib/dyrected.ts):
-\`\`\`ts
-import { createClient } from '@dyrected/sdk'
-
-export const dyrected = createClient({
-  baseUrl: '${config.baseUrl || "https://api.dyrected.cloud"}',${isSelfHosted ? "" : `
-  apiKey:  '${config.apiKey}',
-  siteId:  '${config.siteId}',`}
-})
-\`\`\`
-
-2. Admin Route (pages/cms.tsx):
-\`\`\`tsx
-import { AdminUI } from '@dyrected/admin'
-import '@dyrected/admin/styles'
-
-export default function AdminPage() {
-  return (
-    <div style={{ height: '100vh' }}>
-      <AdminUI
-        baseUrl="${config.baseUrl || "https://api.dyrected.cloud"}"${isSelfHosted ? "" : `
-        apiKey="${config.apiKey}"
-        siteId="${config.siteId}"`}
-      />
-    </div>
-  )
-}
-\`\`\``,
-    vue: `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-8. IMPLEMENTATION \u2014 Vue
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-1. SDK Setup (lib/dyrected.ts):
-\`\`\`ts
-import { createClient } from '@dyrected/sdk'
-
-export const dyrected = createClient({
-  baseUrl: '${config.baseUrl || "https://api.dyrected.cloud"}',${isSelfHosted ? "" : `
-  apiKey:  '${config.apiKey}',
-  siteId:  '${config.siteId}',`}
-})
-\`\`\`
-
-2. Admin Route (pages/cms.vue):
-\`\`\`vue
-<template>
-  <div ref="container" style="height: 100vh" />
-</template>
-
-<script setup>
-import { ref, onMounted, onUnmounted } from 'vue'
-import { renderAdminUI } from '@dyrected/admin'
-import '@dyrected/admin/styles'
-
-const container = ref(null)
-let cleanup: (() => void) | undefined
-
-onMounted(() => {
-  cleanup = renderAdminUI(container.value, {
-    baseUrl: '${config.baseUrl || "https://api.dyrected.cloud"}',${isSelfHosted ? "" : `
-    apiKey: '${config.apiKey}',
-    siteId: '${config.siteId}',`}
-  })
-})
-
-onUnmounted(() => cleanup?.())
-</script>
-\`\`\``
-  };
-  return sections[activeTab] || sections.next;
-}
-function generateFreshSetupPrompt(activeTab, config) {
-  const frameworkLabel = activeTab === "next" ? "Next.js" : activeTab === "nuxt" ? "Nuxt.js" : activeTab ? activeTab.charAt(0).toUpperCase() + activeTab.slice(1) : "the project's detected framework";
-  const isSelfHosted = config.isSelfHosted === true || !config.apiKey && !config.siteId;
-  const frameworkSetup = {
-    nuxt: `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-3. INSTALLATION STEPS \u2014 Run these in order
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-Tell the user to follow these steps exactly. Explain each one in plain
-language before showing the command. Do not skip any step.
-
-STEP 1 \u2014 Initialize Dyrected
-Tell the user:
-"Run this command in your terminal inside your Nuxt.js project folder.
-It will set everything up for you automatically."
-
-\`\`\`bash
-npx @dyrected/cli init
-\`\`\`
-
-When it asks questions, tell the user to:
-- Choose: Nuxt.js 3
-- Choose: SQLite (easiest option, no extra setup needed)
-
-The CLI will automatically:
-- Install all required packages
-- Create a dyrected.config.ts file
-- Mount the Admin UI at pages/cms/index.vue
-- Generate a .env.example file
-
-STEP 2 \u2014 Register the module
-Tell the user to open nuxt.config.ts and add '@dyrected/nuxt' to modules:
-
-\`\`\`ts
-export default defineNuxtConfig({
-  modules: ['@dyrected/nuxt'],
-})
-\`\`\`
-
-STEP 3 \u2014 Set up environment variables
-Tell the user:
-"Find the file called .env.example in your project.
-Make a copy of it and rename the copy to .env
-Then open .env and fill in the values."
-
-STEP 4 \u2014 Start the project
-\`\`\`bash
-pnpm dev
-\`\`\`
-
-STEP 5 \u2014 Open the dashboard
-Tell the user to open their browser and go to:
-http://localhost:3000/cms
-
-If they see the Dyrected admin dashboard, the installation worked.
-Tell them: "You are ready. Now let's set up your content."`,
-    next: `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-3. INSTALLATION STEPS \u2014 Run these in order
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-Tell the user to follow these steps exactly. Explain each one in plain
-language before showing the command. Do not skip any step.
-
-STEP 1 \u2014 Initialize Dyrected
-Tell the user:
-"Run this command in your terminal inside your Next.js project folder."
-
-\`\`\`bash
-npx @dyrected/cli init
-\`\`\`
-
-When it asks questions, tell the user to:
-- Choose: Next.js
-- Choose: SQLite (easiest option, no extra setup needed)
-
-The CLI will automatically:
-- Install all required packages
-- Create a dyrected.config.ts file
-- Mount the Admin UI at app/cms/page.tsx
-- Generate a .env.example file
-
-STEP 2 \u2014 Set up environment variables
-Tell the user:
-"Find the file called .env.example in your project.
-Make a copy of it and rename the copy to .env.local
-Then open .env.local and fill in the values."
-
-STEP 3 \u2014 Start the project
-\`\`\`bash
-pnpm dev
-\`\`\`
-
-STEP 4 \u2014 Open the dashboard
-Tell the user to open their browser and go to:
-http://localhost:3000/cms
-
-If they see the Dyrected admin dashboard, the installation worked.
-Tell them: "You are ready. Now let's set up your content."`,
-    react: `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-3. INSTALLATION STEPS \u2014 Run these in order
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-STEP 1 \u2014 Install the SDK and admin packages
-\`\`\`bash
-npm install @dyrected/sdk @dyrected/admin
-\`\`\`
-
-STEP 2 \u2014 Set up the client (lib/dyrected.ts):
-\`\`\`ts
-import { createClient } from '@dyrected/sdk'
-
-export const dyrected = createClient({
-  baseUrl: '${config.baseUrl || "https://api.dyrected.cloud"}',${isSelfHosted ? "" : `
-  apiKey:  '${config.apiKey}',
-  siteId:  '${config.siteId}',`}
-})
-\`\`\`
-
-STEP 3 \u2014 Mount the Admin UI (pages/cms.tsx):
-\`\`\`tsx
-import { AdminUI } from '@dyrected/admin'
-import '@dyrected/admin/styles'
-
-export default function AdminPage() {
-  return (
-    <div style={{ height: '100vh' }}>
-      <AdminUI
-        baseUrl="${config.baseUrl || "https://api.dyrected.cloud"}"${isSelfHosted ? "" : `
-        apiKey="${config.apiKey}"
-        siteId="${config.siteId}"`}
-      />
-    </div>
-  )
-}
-\`\`\``,
-    vue: `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-3. INSTALLATION STEPS \u2014 Run these in order
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-STEP 1 \u2014 Install the SDK and admin packages
-\`\`\`bash
-npm install @dyrected/sdk @dyrected/admin
-\`\`\`
-
-STEP 2 \u2014 Set up the client (lib/dyrected.ts):
-\`\`\`ts
-import { createClient } from '@dyrected/sdk'
-
-export const dyrected = createClient({
-  baseUrl: '${config.baseUrl || "https://api.dyrected.cloud"}',${isSelfHosted ? "" : `
-  apiKey:  '${config.apiKey}',
-  siteId:  '${config.siteId}',`}
-})
-\`\`\`
-
-STEP 3 \u2014 Mount the Admin UI (pages/cms.vue):
-\`\`\`vue
-<template>
-  <div ref="container" style="height: 100vh" />
-</template>
-
-<script setup>
-import { ref, onMounted, onUnmounted } from 'vue'
-import { renderAdminUI } from '@dyrected/admin'
-import '@dyrected/admin/styles'
-
-const container = ref(null)
-let cleanup
-
-onMounted(() => {
-  cleanup = renderAdminUI(container.value, {
-    baseUrl: '${config.baseUrl || "https://api.dyrected.cloud"}',${isSelfHosted ? "" : `
-    apiKey: '${config.apiKey}',
-    siteId: '${config.siteId}',`}
-  })
-})
-
-onUnmounted(() => cleanup?.())
-</script>
-\`\`\``
-  };
-  return [
-    `You are a friendly technical assistant helping someone set up Dyrected CMS for the very first time in a ${frameworkLabel} project. They have NOT installed anything yet.
-
-Your job is to:
-1. Understand who you are talking to before giving any instructions
-2. Ask simple questions about their project and content needs
-3. Walk them through setup in a way that matches their technical level
-4. Confirm each step worked before moving to the next
-5. Help them design their content so their client can manage it
-
-Speak in plain language at all times. Never assume technical knowledge.
-Never show more than one step at a time.
-Never mention the terminal, command line, or any commands until you have
-confirmed the user is comfortable running them.`,
-    `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-1. ENVIRONMENT
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-- Framework : ${frameworkLabel}
-- Host Type : ${isSelfHosted ? "Self-Hosted" : "Dyrected Cloud"}
-- API Base  : ${config.baseUrl || "http://localhost:3000"}
-${isSelfHosted ? "" : `- Site ID  : ${config.siteId}
-- API Key  : ${config.apiKey}`}`.trim(),
-    `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-2. PHASE 0 \u2014 UNDERSTAND THE USER FIRST
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-Ask these questions one at a time. Wait for each answer before asking the next.
-Never ask more than one question at a time.
-
-\u2500\u2500\u2500 QUESTION 1 \u2014 TECH LEVEL \u2500\u2500\u2500
-This is the most important question. Ask it first.
-
-Ask exactly this:
-"Before we dive in \u2014 how would you describe yourself?
-
-  A) I write code myself (I'm comfortable with the terminal and editing files)
-  B) I use tools like Lovable, Bolt, or v0 to build with AI \u2014 I don't write much code myself
-  C) I'm a designer or project manager \u2014 someone else usually handles the technical stuff
-  D) Something else \u2014 just describe how you work"
-
-Use their answer to decide how to guide them for the rest of the setup:
-- If A \u2192 they are TECHNICAL. You may show terminal commands and code directly.
-- If B \u2192 they are SEMI-TECHNICAL. Explain what each step does before showing
-          any code or commands. Ask before running anything in the terminal.
-          For Lovable users specifically: guide them to use the built-in
-          terminal or ask them to paste code into the right file in their editor.
-- If C \u2192 they are NON-TECHNICAL. Do not show terminal commands at all.
-          Generate all the code and config for them. Walk them through
-          copy-pasting into specific files by name. If a terminal step is
-          unavoidable, warn them first and offer to write the exact command
-          with a clear explanation of what it does and where to run it.
-- If D \u2192 ask one follow-up question to understand their workflow before
-          deciding which path above fits best.
-
-\u2500\u2500\u2500 QUESTION 2 \u2014 PROJECT STATUS \u2500\u2500\u2500
-Ask after Q1 is answered:
-
-"Do you already have a ${frameworkLabel} project open,
-or are we starting from scratch?
-
-  \u2192 Already have a project: tell me what the site is about or
-    share the folder name
-  \u2192 Starting fresh: just say 'new project' and I will help you
-    create one first"
-
-\u2500\u2500\u2500 QUESTION 3 \u2014 SITE PURPOSE \u2500\u2500\u2500
-Ask after Q2 is answered:
-
-"What kind of website is this?
-
-  A) A business or agency site (show services, get enquiries)
-  B) A blog or news site (publish articles regularly)
-  C) A SaaS or product landing page (features, pricing, sign up)
-  D) A portfolio (show work and past projects)
-  E) Something else \u2014 describe it in one sentence"
-
-\u2500\u2500\u2500 QUESTION 4 \u2014 CONTENT NEEDS \u2500\u2500\u2500
-Ask after Q3 is answered:
-
-"What will your client need to update themselves \u2014 without calling you?
-
-  Some examples to help you think:
-  \u2192 Blog posts or news articles
-  \u2192 Team member profiles (name, photo, bio)
-  \u2192 Services or product descriptions
-  \u2192 Homepage text (headline, buttons, images)
-  \u2192 Testimonials or reviews
-  \u2192 FAQs
-  \u2192 Event listings or announcements
-
-  Just list the ones that apply. Or say 'not sure yet'
-  and we will figure it out together."
-
-\u2500\u2500\u2500 AFTER ALL QUESTIONS \u2500\u2500\u2500
-Once all four questions are answered:
-1. Summarise what you understood in plain English
-2. Ask the user to confirm before touching any code
-3. Then move to the installation steps using the correct path
-   for their tech level from Question 1`,
-    frameworkSetup[activeTab] || frameworkSetup.nuxt,
-    `
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-4. AFTER INSTALLATION \u2014 CONTENT SETUP
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-Once the dashboard is confirmed working, help the user design their
-content model in dyrected.config.ts based on what they told you in
-Phase 0.
-
-RULES for this phase:
-- Use defineCollection and defineConfig from '@dyrected/core'
-- Use client.collection(slug) only \u2014 never client.collections
-- Always use initialData in all data fetches
-- Use a catch-all pages collection for marketing-managed pages
-- Use blocks for flexible page layouts
-- Use type: 'relationship', relationTo: 'collectionSlug' for relations
-- Never throw during render \u2014 fall back to initialData on errors
-- All relationship fields must handle null gracefully
-
-CONTENT SETUP DELIVERABLES \u2014 in this order:
-1. dyrected.config.ts \u2014 complete file based on their answers
-2. Catch-all page route for CMS-managed pages
-3. Block components list (names and fields only)
-4. One example fetch showing how to load content on a page
-
-After delivering the config, tell the user to sync their schema.
-For TECHNICAL users show the command directly:
-\`\`\`bash
-npx @dyrected/cli sync:schema
-\`\`\`
-For SEMI-TECHNICAL or NON-TECHNICAL users explain it first:
-"This next step tells Dyrected to read your content setup file
-and prepare the database. Here is the command to run:" then show it.
-
-Then ask: "Do you want me to help you connect this content to your
-frontend pages now?"
-
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-DO NOT
-\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
-- Do NOT show terminal commands before confirming the user's tech level
-- Do NOT assume the user knows what a terminal, CLI, or package manager is
-- Do NOT show all steps at once \u2014 one step at a time always
-- Do NOT use client.collections \u2014 use client.collection(slug)
-- Do NOT add custom auth middleware to the admin route
-- Do NOT use renderAdminUI in a Nuxt.js project
-- Do NOT skip the confirmation after each installation step
-- Do NOT use jargon without explaining it in plain English first
-- Do NOT assume the installation worked \u2014 ask the user to confirm
-
-API Reference: https://docs.dyrected.com
-If you are unsure about any syntax, refer to the official documentation above.`
-  ].join("\n");
-}
-function generateAIPrompt(activeTab, config) {
-  const frameworkLabel = activeTab === "next" ? "Next.js" : activeTab === "nuxt" ? "Nuxt.js" : activeTab ? activeTab.charAt(0).toUpperCase() + activeTab.slice(1) : "the project's detected framework";
-  const isSelfHosted = config.isSelfHosted === true || !config.apiKey && !config.siteId;
-  const existingSite = config.existingSite ?? false;
-  const missionText = existingSite ? `You are a Senior Content Architect. Your mission is to integrate Dyrected CMS into an EXISTING ${frameworkLabel} project. Your absolute priority is DATA PRESERVATION and MIGRATION of existing hardcoded content into a flexible, blocks-based schema that empowers marketing teams to move independently.` : `You are a Senior Content Architect. Your mission is to integrate Dyrected CMS into a NEW ${frameworkLabel} project. Your priority is DATA PRESERVATION and creating a CMS that empowers marketing teams to move independently without raising tickets to engineering.`;
-  const sections = [
-    missionText,
-    buildEnvironmentSection(frameworkLabel, isSelfHosted, config),
-    buildDiagnosticSection(),
-    buildConstraintsSection(),
-    buildSchemaRulesSection(),
-    buildDoNotSection(),
-    buildTechnicalReferenceSection(),
-    buildDeliverablesSection(),
-    buildFrameworkSection(activeTab, isSelfHosted, config)
-  ];
-  return sections.join("\n");
-}
-
 // src/workflows.ts
 var WORKFLOW_HISTORY_COLLECTION = "__workflow_history";
 var LIFECYCLE_EVENTS_COLLECTION = "__lifecycle_events";
@@ -915,6 +94,14 @@ function workflowCapabilities(workflow, user) {
   }
   return capabilities;
 }
+function canViewWorkflowDraft(workflow, user) {
+  if (!user) return false;
+  const capabilities = workflowCapabilities(workflow, user);
+  if (capabilities.has("entry.edit")) return true;
+  return workflow.transitions.some(
+    (transition) => (transition.requiredCapabilities ?? []).some((capability) => capabilities.has(capability))
+  );
+}
 function availableWorkflowTransitions(workflow, state, user) {
   const capabilities = workflowCapabilities(workflow, user);
   return workflow.transitions.filter((transition) => {
@@ -932,7 +119,7 @@ function materializeWorkflowDocument(doc, workflow, user) {
   const meta = doc.__workflow;
   if (!meta) return doc;
   const { __published, __workflow, ...working } = doc;
-  if (!user) {
+  if (!canViewWorkflowDraft(workflow, user)) {
     if (!__published || typeof __published !== "object") return null;
     return { id: doc.id, ...__published, _workflow: publicMetadata(meta) };
   }
@@ -993,6 +180,7 @@ async function dispatchLifecycleEvent(config, event) {
 }
 async function dispatchPendingLifecycleEvents(config, limit = 50) {
   if (!config.db || !config.events?.handlers.length) return 0;
+  const maxAttempts = config.events.maxAttempts ?? 8;
   const result = await config.db.find({
     collection: LIFECYCLE_EVENTS_COLLECTION,
     where: { status: { in: ["pending", "failed"] } },
@@ -1000,7 +188,9 @@ async function dispatchPendingLifecycleEvents(config, limit = 50) {
     limit
   });
   const now = Date.now();
-  const due = result.docs.filter((doc) => !doc.nextAttemptAt || new Date(doc.nextAttemptAt).getTime() <= now);
+  const due = result.docs.filter(
+    (doc) => Number(doc.attempts ?? 0) < maxAttempts && (!doc.nextAttemptAt || new Date(doc.nextAttemptAt).getTime() <= now)
+  );
   for (const event of due) await dispatchLifecycleEvent(config, event);
   return due.length;
 }
@@ -1089,12 +279,18 @@ async function transitionWorkflow(args) {
     events.push(createLifecycleEvent({ name: "entry.unpublished", collection: collection.slug, documentId: id, actorId: user?.sub, payload: { revision: meta.publishedRevision } }));
   }
   const updated = await db.transaction(async (tx) => {
+    const locked = await tx.findOne({ collection: collection.slug, id });
+    if (!locked) throw Object.assign(new Error("Not Found"), { statusCode: 404 });
+    const lockedMeta = locked.__workflow;
+    if (lockedMeta.revision !== meta.revision || lockedMeta.state !== meta.state || expectedRevision !== void 0 && lockedMeta.revision !== expectedRevision) {
+      throw Object.assign(new Error("This entry changed since it was loaded. Refresh before transitioning it."), { statusCode: 409 });
+    }
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const { __published: _published, __workflow: _workflow, id: _id, ...working } = original;
+    const { __published: _published, __workflow: _workflow, id: _id, ...working } = locked;
     const nextMeta = {
-      ...meta,
+      ...lockedMeta,
       state: transition.to,
-      ...targetState.published ? { publishedRevision: meta.revision, publishedAt: now, publishedBy: user?.sub } : {},
+      ...targetState.published ? { publishedRevision: lockedMeta.revision, publishedAt: now, publishedBy: user?.sub } : {},
       ...transition.unpublish ? { publishedRevision: void 0, publishedAt: void 0, publishedBy: void 0 } : {}
     };
     const data = { __workflow: nextMeta };
@@ -1103,11 +299,11 @@ async function transitionWorkflow(args) {
     const next = await tx.update({ collection: collection.slug, id, data });
     await tx.create({
       collection: WORKFLOW_HISTORY_COLLECTION,
-      data: { collection: collection.slug, documentId: id, transition: transition.name, from: meta.state, to: transition.to, revision: meta.revision, comment: comment ?? null, actorId: user?.sub ?? null, createdAt: now }
+      data: { collection: collection.slug, documentId: id, transition: transition.name, from: lockedMeta.state, to: transition.to, revision: lockedMeta.revision, comment: comment ?? null, actorId: user?.sub ?? null, createdAt: now }
     });
     for (const event of events) await persistEvent(tx, event);
     if (collection.audit) {
-      await tx.create({ collection: "__audit", data: { collection: collection.slug, documentId: id, operation: "workflow.transition", user: user?.sub ?? null, timestamp: now, changes: JSON.stringify({ transition: transition.name, from: meta.state, to: transition.to, revision: meta.revision }) } });
+      await tx.create({ collection: "__audit", data: { collection: collection.slug, documentId: id, operation: "workflow.transition", user: user?.sub ?? null, timestamp: now, changes: JSON.stringify({ transition: transition.name, from: lockedMeta.state, to: transition.to, revision: lockedMeta.revision }) } });
     }
     return next;
   });
@@ -1647,6 +843,831 @@ async function executeFieldAfterRead(fields, doc, user, db) {
   return result;
 }
 
+// src/utils/openapi.ts
+function generateOpenApi(config) {
+  const spec = {
+    openapi: "3.0.0",
+    info: {
+      title: "Dyrected API",
+      version: "1.0.0",
+      description: "Automatically generated OpenAPI specification for the Dyrected project."
+    },
+    components: {
+      schemas: {
+        WorkflowMetadata: {
+          type: "object",
+          required: ["state", "revision"],
+          properties: {
+            state: { type: "string" },
+            revision: { type: "integer", minimum: 1 },
+            publishedRevision: { type: "integer", minimum: 1 },
+            publishedAt: { type: "string", format: "date-time" },
+            publishedBy: { type: "string" },
+            availableTransitions: { type: "array", items: { type: "string" } }
+          }
+        },
+        WorkflowTransitionRequest: {
+          type: "object",
+          properties: {
+            expectedRevision: { type: "integer", minimum: 1 },
+            comment: { type: "string" }
+          }
+        },
+        WorkflowHistoryEntry: {
+          type: "object",
+          required: [
+            "collection",
+            "documentId",
+            "transition",
+            "from",
+            "to",
+            "revision",
+            "createdAt"
+          ],
+          properties: {
+            id: { type: "string" },
+            collection: { type: "string" },
+            documentId: { type: "string" },
+            transition: { type: "string" },
+            from: { type: "string" },
+            to: { type: "string" },
+            revision: { type: "integer" },
+            comment: { type: "string", nullable: true },
+            actorId: { type: "string", nullable: true },
+            createdAt: { type: "string", format: "date-time" }
+          }
+        },
+        Error: {
+          type: "object",
+          properties: {
+            message: { type: "string" },
+            errors: {
+              type: "array",
+              items: { type: "object", additionalProperties: true }
+            }
+          }
+        },
+        AuthCredentials: {
+          type: "object",
+          required: ["email", "password"],
+          properties: {
+            email: { type: "string", format: "email" },
+            password: { type: "string" }
+          }
+        },
+        TokenResponse: {
+          type: "object",
+          properties: {
+            token: { type: "string" },
+            user: { type: "object", additionalProperties: true }
+          }
+        }
+      },
+      securitySchemes: {
+        ApiKeyAuth: {
+          type: "apiKey",
+          in: "header",
+          name: "x-api-key"
+        }
+      }
+    },
+    paths: {},
+    security: [{ ApiKeyAuth: [] }]
+  };
+  spec.paths["/api/schemas"] = {
+    get: {
+      tags: ["System"],
+      summary: "Get the serialized Dyrected schema",
+      security: [],
+      responses: {
+        200: { description: "Collection and global schema definitions" }
+      }
+    }
+  };
+  spec.paths["/api/openapi.json"] = {
+    get: {
+      tags: ["System"],
+      summary: "Get the OpenAPI specification",
+      security: [],
+      responses: { 200: { description: "OpenAPI 3.0 document" } }
+    }
+  };
+  spec.paths["/api/docs"] = {
+    get: {
+      tags: ["System"],
+      summary: "Open interactive API documentation",
+      security: [],
+      responses: { 200: { description: "Swagger UI HTML" } }
+    }
+  };
+  spec.paths["/api/dyrected/options/{collection}/{field}"] = {
+    get: {
+      tags: ["System"],
+      summary: "Resolve dynamic field options",
+      parameters: [
+        {
+          name: "collection",
+          in: "path",
+          required: true,
+          schema: { type: "string" }
+        },
+        {
+          name: "field",
+          in: "path",
+          required: true,
+          schema: { type: "string" }
+        }
+      ],
+      responses: { 200: { description: "Resolved option items" } }
+    }
+  };
+  spec.paths["/api/preferences/{key}"] = {
+    get: {
+      tags: ["Preferences"],
+      summary: "Get an authenticated user preference",
+      parameters: [
+        { name: "key", in: "path", required: true, schema: { type: "string" } }
+      ],
+      responses: { 200: { description: "Preference value" } }
+    },
+    put: {
+      tags: ["Preferences"],
+      summary: "Set an authenticated user preference",
+      parameters: [
+        { name: "key", in: "path", required: true, schema: { type: "string" } }
+      ],
+      requestBody: {
+        required: true,
+        content: { "application/json": { schema: { type: "object" } } }
+      },
+      responses: { 200: { description: "Updated preference" } }
+    }
+  };
+  spec.paths["/api/preview-token"] = {
+    post: {
+      tags: ["Preview"],
+      summary: "Create a preview token",
+      responses: { 200: { description: "Short-lived preview token" } }
+    }
+  };
+  spec.paths["/api/preview-data"] = {
+    get: {
+      tags: ["Preview"],
+      summary: "Resolve preview data from a token",
+      security: [],
+      parameters: [
+        {
+          name: "token",
+          in: "query",
+          required: true,
+          schema: { type: "string" }
+        }
+      ],
+      responses: { 200: { description: "Preview document data" } }
+    }
+  };
+  for (const collection of config.collections) {
+    spec.components.schemas[collection.slug] = collectionToSchema(collection);
+  }
+  for (const global of config.globals) {
+    spec.components.schemas[global.slug] = globalToSchema(global);
+  }
+  for (const collection of config.collections) {
+    const slug = collection.slug;
+    const path = `/api/collections/${slug}`;
+    const labels = collection.labels || { singular: slug, plural: `${slug}s` };
+    spec.paths[path] = {
+      get: {
+        tags: ["Collections"],
+        summary: `Find ${labels.plural}`,
+        parameters: [
+          {
+            name: "limit",
+            in: "query",
+            schema: { type: "integer", default: 10 }
+          },
+          {
+            name: "page",
+            in: "query",
+            schema: { type: "integer", default: 1 }
+          },
+          {
+            name: "where",
+            in: "query",
+            schema: { type: "string" },
+            description: "JSON filter"
+          },
+          {
+            name: "sort",
+            in: "query",
+            schema: { type: "string" },
+            description: "Sort field (e.g. -createdAt)"
+          }
+        ],
+        responses: {
+          200: {
+            description: "Success",
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    docs: {
+                      type: "array",
+                      items: { $ref: `#/components/schemas/${slug}` }
+                    },
+                    total: { type: "integer" },
+                    limit: { type: "integer" },
+                    page: { type: "integer" }
+                  }
+                }
+              }
+            }
+          }
+        }
+      },
+      post: {
+        tags: ["Collections"],
+        summary: `Create ${labels.singular}`,
+        requestBody: {
+          required: true,
+          content: {
+            "application/json": {
+              schema: { $ref: `#/components/schemas/${slug}` }
+            }
+          }
+        },
+        responses: {
+          201: {
+            description: "Created",
+            content: {
+              "application/json": {
+                schema: { $ref: `#/components/schemas/${slug}` }
+              }
+            }
+          }
+        }
+      }
+    };
+    spec.paths[`${path}/{id}`] = {
+      get: {
+        tags: ["Collections"],
+        summary: `Get a single ${labels.singular}`,
+        parameters: [
+          {
+            name: "id",
+            in: "path",
+            required: true,
+            schema: { type: "string" }
+          }
+        ],
+        responses: {
+          200: {
+            description: "Success",
+            content: {
+              "application/json": {
+                schema: { $ref: `#/components/schemas/${slug}` }
+              }
+            }
+          }
+        }
+      },
+      patch: {
+        tags: ["Collections"],
+        summary: `Update ${labels.singular}`,
+        parameters: [
+          {
+            name: "id",
+            in: "path",
+            required: true,
+            schema: { type: "string" }
+          }
+        ],
+        requestBody: {
+          required: true,
+          content: {
+            "application/json": {
+              schema: { $ref: `#/components/schemas/${slug}` }
+            }
+          }
+        },
+        responses: {
+          200: {
+            description: "Updated",
+            content: {
+              "application/json": {
+                schema: { $ref: `#/components/schemas/${slug}` }
+              }
+            }
+          }
+        }
+      },
+      delete: {
+        tags: ["Collections"],
+        summary: `Delete ${labels.singular}`,
+        parameters: [
+          {
+            name: "id",
+            in: "path",
+            required: true,
+            schema: { type: "string" }
+          }
+        ],
+        responses: {
+          204: { description: "Deleted" }
+        }
+      }
+    };
+    spec.paths[`${path}/delete-many`] = {
+      delete: {
+        tags: ["Collections"],
+        summary: `Delete multiple ${labels.plural}`,
+        requestBody: {
+          required: true,
+          content: {
+            "application/json": {
+              schema: {
+                type: "object",
+                required: ["ids"],
+                properties: {
+                  ids: { type: "array", items: { type: "string" } }
+                }
+              }
+            }
+          }
+        },
+        responses: { 200: { description: "Deleted and failed document IDs" } }
+      }
+    };
+    spec.paths[`${path}/seed`] = {
+      post: {
+        tags: ["Collections"],
+        summary: `Seed initial ${labels.plural}`,
+        responses: { 200: { description: "Seeded documents" } }
+      }
+    };
+    if (collection.upload) {
+      spec.paths[`${path}/media`] = {
+        get: {
+          tags: ["Media"],
+          summary: `List ${labels.plural}`,
+          responses: { 200: { description: "Paginated media documents" } }
+        },
+        post: {
+          tags: ["Media"],
+          summary: `Upload ${labels.singular}`,
+          requestBody: {
+            required: true,
+            content: {
+              "multipart/form-data": {
+                schema: {
+                  type: "object",
+                  required: ["file"],
+                  properties: { file: { type: "string", format: "binary" } }
+                }
+              }
+            }
+          },
+          responses: { 201: { description: "Uploaded media document" } }
+        }
+      };
+      spec.paths[`${path}/media/{filename}`] = {
+        get: {
+          tags: ["Media"],
+          summary: `Serve ${labels.singular} bytes`,
+          parameters: [
+            {
+              name: "filename",
+              in: "path",
+              required: true,
+              schema: { type: "string" }
+            }
+          ],
+          security: [],
+          responses: {
+            200: { description: "Stored file" },
+            404: { description: "File not found" }
+          }
+        }
+      };
+    }
+    if (collection.auth) {
+      const publicAuthPost = (summary) => ({
+        tags: ["Authentication"],
+        summary,
+        security: [],
+        requestBody: {
+          required: true,
+          content: {
+            "application/json": {
+              schema: { type: "object", additionalProperties: true }
+            }
+          }
+        },
+        responses: {
+          200: { description: "Success" },
+          400: { description: "Invalid request" }
+        }
+      });
+      spec.paths[`${path}/login`] = {
+        post: {
+          ...publicAuthPost(`Log in to ${labels.plural}`),
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: { $ref: "#/components/schemas/AuthCredentials" }
+              }
+            }
+          },
+          responses: {
+            200: {
+              description: "Authenticated",
+              content: {
+                "application/json": {
+                  schema: { $ref: "#/components/schemas/TokenResponse" }
+                }
+              }
+            },
+            401: { description: "Invalid credentials" }
+          }
+        }
+      };
+      spec.paths[`${path}/logout`] = {
+        post: {
+          tags: ["Authentication"],
+          summary: `Log out of ${labels.plural}`,
+          responses: { 200: { description: "Logged out" } }
+        }
+      };
+      spec.paths[`${path}/init`] = {
+        get: {
+          tags: ["Authentication"],
+          summary: `Get ${labels.plural} initialization state`,
+          security: [],
+          responses: { 200: { description: "Initialization state" } }
+        }
+      };
+      spec.paths[`${path}/first-user`] = {
+        post: publicAuthPost(`Register the first ${labels.singular}`)
+      };
+      spec.paths[`${path}/me`] = {
+        get: {
+          tags: ["Authentication"],
+          summary: `Get the current ${labels.singular}`,
+          responses: { 200: { description: "Authenticated user" } }
+        }
+      };
+      spec.paths[`${path}/refresh-token`] = {
+        post: {
+          tags: ["Authentication"],
+          summary: "Refresh an authentication token",
+          responses: { 200: { description: "Refreshed token" } }
+        }
+      };
+      spec.paths[`${path}/forgot-password`] = {
+        post: publicAuthPost("Request a password reset")
+      };
+      spec.paths[`${path}/reset-password`] = {
+        post: publicAuthPost("Reset a password")
+      };
+      spec.paths[`${path}/invite`] = {
+        post: {
+          tags: ["Authentication"],
+          summary: `Invite a ${labels.singular}`,
+          responses: { 200: { description: "Invitation sent" } }
+        }
+      };
+      spec.paths[`${path}/accept-invite`] = {
+        post: publicAuthPost("Accept an invitation")
+      };
+      spec.paths[`${path}/{id}/change-password`] = {
+        post: {
+          tags: ["Authentication"],
+          summary: `Change a ${labels.singular} password`,
+          parameters: [
+            {
+              name: "id",
+              in: "path",
+              required: true,
+              schema: { type: "string" }
+            }
+          ],
+          responses: { 200: { description: "Password changed" } }
+        }
+      };
+    }
+    if (collection.workflow) {
+      spec.paths[`${path}/{id}/transitions/{transition}`] = {
+        post: {
+          tags: ["Workflows"],
+          summary: `Transition ${labels.singular} workflow`,
+          parameters: [
+            {
+              name: "id",
+              in: "path",
+              required: true,
+              schema: { type: "string" }
+            },
+            {
+              name: "transition",
+              in: "path",
+              required: true,
+              schema: {
+                type: "string",
+                enum: collection.workflow.transitions.map((item) => item.name)
+              }
+            }
+          ],
+          requestBody: {
+            content: {
+              "application/json": {
+                schema: {
+                  $ref: "#/components/schemas/WorkflowTransitionRequest"
+                }
+              }
+            }
+          },
+          responses: {
+            200: {
+              description: "Transition applied",
+              content: {
+                "application/json": {
+                  schema: { $ref: `#/components/schemas/${slug}` }
+                }
+              }
+            },
+            400: { description: "Required transition input is missing" },
+            403: { description: "Transition capability denied" },
+            409: { description: "Invalid state or stale revision" }
+          }
+        }
+      };
+      spec.paths[`${path}/{id}/workflow-history`] = {
+        get: {
+          tags: ["Workflows"],
+          summary: `Get ${labels.singular} workflow history`,
+          parameters: [
+            {
+              name: "id",
+              in: "path",
+              required: true,
+              schema: { type: "string" }
+            },
+            {
+              name: "limit",
+              in: "query",
+              schema: { type: "integer", default: 50, maximum: 100 }
+            }
+          ],
+          responses: {
+            200: {
+              description: "Workflow transition history",
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    properties: {
+                      docs: {
+                        type: "array",
+                        items: {
+                          $ref: "#/components/schemas/WorkflowHistoryEntry"
+                        }
+                      },
+                      total: { type: "integer" },
+                      limit: { type: "integer" },
+                      page: { type: "integer" }
+                    }
+                  }
+                }
+              }
+            },
+            403: { description: "Collection read access denied" }
+          }
+        }
+      };
+    }
+  }
+  for (const global of config.globals) {
+    const slug = global.slug;
+    const path = `/api/globals/${slug}`;
+    spec.paths[path] = {
+      get: {
+        tags: ["Globals"],
+        summary: `Get ${global.label || slug}`,
+        responses: {
+          200: {
+            description: "Success",
+            content: {
+              "application/json": {
+                schema: { $ref: `#/components/schemas/${slug}` }
+              }
+            }
+          }
+        }
+      },
+      patch: {
+        tags: ["Globals"],
+        summary: `Update ${global.label || slug}`,
+        requestBody: {
+          required: true,
+          content: {
+            "application/json": {
+              schema: { $ref: `#/components/schemas/${slug}` }
+            }
+          }
+        },
+        responses: {
+          200: {
+            description: "Updated",
+            content: {
+              "application/json": {
+                schema: { $ref: `#/components/schemas/${slug}` }
+              }
+            }
+          }
+        }
+      }
+    };
+    spec.paths[`${path}/seed`] = {
+      post: {
+        tags: ["Globals"],
+        summary: `Seed ${global.label || slug}`,
+        responses: { 200: { description: "Seeded global" } }
+      }
+    };
+  }
+  if (config.storage) {
+    spec.paths["/api/media/{filename}"] = {
+      get: {
+        tags: ["Media"],
+        summary: "Serve a stored file",
+        security: [],
+        parameters: [
+          {
+            name: "filename",
+            in: "path",
+            required: true,
+            schema: { type: "string" }
+          }
+        ],
+        responses: {
+          200: { description: "Stored file bytes" },
+          404: { description: "File not found" }
+        }
+      }
+    };
+  }
+  return spec;
+}
+function collectionToSchema(collection) {
+  const { properties, required } = fieldsToProperties(collection.fields);
+  return {
+    type: "object",
+    properties: {
+      id: { type: "string" },
+      createdAt: { type: "string", format: "date-time" },
+      updatedAt: { type: "string", format: "date-time" },
+      ...collection.workflow ? { _workflow: { $ref: "#/components/schemas/WorkflowMetadata" } } : {},
+      ...properties
+    },
+    required: ["id", ...required]
+  };
+}
+function globalToSchema(global) {
+  const { properties, required } = fieldsToProperties(global.fields);
+  return {
+    type: "object",
+    properties,
+    required
+  };
+}
+function fieldsToProperties(fields) {
+  const props = {};
+  const required = [];
+  for (const field of fields) {
+    if (field.type === "row") {
+      const nested = fieldsToProperties(field.fields || []);
+      Object.assign(props, nested.properties);
+      required.push(...nested.required);
+      continue;
+    }
+    if (!field.name) continue;
+    props[field.name] = fieldToSchema(field);
+    if (field.required) {
+      required.push(field.name);
+    }
+  }
+  return { properties: props, required };
+}
+function fieldToSchema(field) {
+  let schema = {};
+  switch (field.type) {
+    case "text":
+    case "textarea":
+    case "email":
+      schema = { type: "string" };
+      break;
+    case "url":
+      schema = {
+        oneOf: [
+          { type: "string" },
+          { type: "object", additionalProperties: true }
+        ]
+      };
+      break;
+    case "icon":
+      schema = { type: "string" };
+      break;
+    case "number":
+      schema = { type: "number" };
+      break;
+    case "boolean":
+      schema = { type: "boolean" };
+      break;
+    case "date":
+      schema = { type: "string", format: "date" };
+      break;
+    case "datetime":
+      schema = { type: "string", format: "date-time" };
+      break;
+    case "time":
+      schema = { type: "string", format: "time" };
+      break;
+    case "select":
+    case "radio":
+      schema = {
+        type: "string",
+        enum: Array.isArray(field.options) ? field.options.map((o) => typeof o === "string" ? o : o.value) : void 0
+      };
+      break;
+    case "multiSelect":
+      schema = {
+        type: "array",
+        items: {
+          type: "string",
+          enum: Array.isArray(field.options) ? field.options.map((o) => typeof o === "string" ? o : o.value) : void 0
+        }
+      };
+      break;
+    case "relationship":
+    case "image": {
+      const valueSchema = {
+        type: "string",
+        description: `ID of a ${field.relationTo} record`
+      };
+      schema = field.hasMany ? { type: "array", items: valueSchema } : valueSchema;
+      break;
+    }
+    case "join":
+      schema = {
+        type: "array",
+        readOnly: true,
+        items: { type: "object", additionalProperties: true }
+      };
+      break;
+    case "object": {
+      const { properties, required } = fieldsToProperties(field.fields || []);
+      schema = { type: "object", properties, required };
+      break;
+    }
+    case "array": {
+      const { properties, required } = fieldsToProperties(field.fields || []);
+      schema = {
+        type: "array",
+        items: { type: "object", properties, required }
+      };
+      break;
+    }
+    case "json":
+    case "richText":
+      schema = { type: "object", additionalProperties: true };
+      break;
+    case "blocks":
+      schema = {
+        type: "array",
+        items: {
+          oneOf: field.blocks?.map((block) => {
+            const { properties, required } = fieldsToProperties(block.fields);
+            return {
+              type: "object",
+              properties: {
+                blockType: { type: "string", enum: [block.slug] },
+                ...properties
+              },
+              required: ["blockType", ...required]
+            };
+          })
+        }
+      };
+      break;
+    default:
+      schema = { type: "string" };
+  }
+  if (field.label) schema.description = field.label;
+  return schema;
+}
+
 // src/index.ts
 function defineCollection(config) {
   return config;
@@ -1663,6 +1684,7 @@ function defineConfig(config) {
   LIFECYCLE_EVENT_NAMES,
   WORKFLOW_HISTORY_COLLECTION,
   availableWorkflowTransitions,
+  canViewWorkflowDraft,
   createLifecycleEvent,
   createWorkflowDocument,
   defineCollection,
@@ -1672,8 +1694,7 @@ function defineConfig(config) {
   dispatchPendingLifecycleEvents,
   executeFieldAfterRead,
   executeFieldBeforeChange,
-  generateAIPrompt,
-  generateFreshSetupPrompt,
+  generateOpenApi,
   initializeWorkflowDocument,
   materializeWorkflowDocument,
   normalizeConfig,