@elytracms/studio 0.0.45 → 0.0.46

package/dist/lib/ai/route.js.map

@@ -1 +1 @@
-{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../src/lib/ai/route.ts"],"names":[],"mappings":"AAwBA,SAAS,YAAY,CAAC,KAAc,EAAE,MAAc;IAClD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAOD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,CAAC,GAAG,KAA8C,CAAA;IACxD,OAAO,CACL,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;QACpE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAC9B,CAAA;AACH,CAAC;AAED,uFAAuF;AACvF,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAgD,CAAA;IAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACxF,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,QAA2B;QACrC,GAAG,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAA;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAA;IAEzD,SAAS,WAAW,CAAC,GAAW;QAC9B,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,EAAE,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YAChD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;QACjB,OAAO,MAAM,CAAC,KAAK,GAAG,YAAY,CAAA;IACpC,CAAC;IAED,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,gFAAgF;QAChF,IAAI,OAAyB,CAAA;QAC7B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QAEjE,aAAa;QACb,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAA;QAExF,4CAA4C;QAC5C,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QAEzF,0BAA0B;QAC1B,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QACrD,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAC/E,GAAG,CACJ,CAAA;QACH,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACjC,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAA;QAC/D,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAA;QACvD,CAAC;IACH,CAAC,CAAA;AACH,CAAC","sourcesContent":["/**\n * Server-route factory (EC-331): a streaming chat/completion endpoint the consuming\n * studio app mounts. Key custody = host route (never the browser, never Convex): the\n * `provider` holds the host-env key and this handler is a THIN model proxy — NO data\n * access, NO service credentials.\n *\n * Framework-agnostic on purpose: it returns a Web `Request → Response` handler the\n * host wires into whatever server entry it has (a TanStack Start server route, a\n * Convex `httpAction`, a plain fetch handler). The current demo studio builds as a\n * pure client SPA with server functions disabled (EC-234), so actually mounting this\n * is an EC-199 integration step; phase 1 ships the handler + its contract.\n *\n * Session-gated: `getSession` (host-wired, reading its own auth — this module never\n * touches `lib/auth`) must return a session for authenticated callers; anonymous\n * callers are rejected. Plus a soft, in-memory per-project rate counter (spend guard).\n */\nimport type {\n  AiChatMessage,\n  AiRouteHandler,\n  AiRouteHandlerOptions,\n  AiSession,\n  StreamChatRequest,\n} from './types'\n\nfunction jsonResponse(value: unknown, status: number): Response {\n  return new Response(JSON.stringify(value), {\n    status,\n    headers: { 'content-type': 'application/json' },\n  })\n}\n\ninterface RateBucket {\n  windowStart: number\n  count: number\n}\n\nfunction isChatMessage(value: unknown): value is AiChatMessage {\n  if (typeof value !== 'object' || value === null) return false\n  const m = value as { role?: unknown; content?: unknown }\n  return (\n    (m.role === 'system' || m.role === 'user' || m.role === 'assistant') &&\n    typeof m.content === 'string'\n  )\n}\n\n/** Parse a request body into a {@link StreamChatRequest}, or `null` when malformed. */\nfunction parseChatBody(body: unknown): StreamChatRequest | null {\n  if (typeof body !== 'object' || body === null) return null\n  const { messages, system } = body as { messages?: unknown; system?: unknown }\n  if (!Array.isArray(messages) || messages.length === 0 || !messages.every(isChatMessage)) {\n    return null\n  }\n  return {\n    messages: messages as AiChatMessage[],\n    ...(typeof system === 'string' ? { system } : {}),\n  }\n}\n\n/**\n * Build the mounted route handler. The returned function is a plain\n * `(Request) => Promise<Response>` — session-gated, soft-rate-limited, and a thin\n * proxy to `provider.streamChat`. Never throws to the caller: every failure is a\n * structured JSON response with an appropriate status.\n */\nexport function createAiRouteHandler(options: AiRouteHandlerOptions): AiRouteHandler {\n  const maxPerMinute = options.limits?.maxRequestsPerMinute\n  const buckets = new Map<string, RateBucket>()\n  const projectKey = options.projectKey ?? (() => 'global')\n\n  function rateLimited(key: string): boolean {\n    if (maxPerMinute === undefined || maxPerMinute <= 0) return false\n    const now = Date.now()\n    const bucket = buckets.get(key)\n    if (!bucket || now - bucket.windowStart >= 60_000) {\n      buckets.set(key, { windowStart: now, count: 1 })\n      return false\n    }\n    bucket.count += 1\n    return bucket.count > maxPerMinute\n  }\n\n  return async (request: Request): Promise<Response> => {\n    // 1. Session gate — reject anonymous callers (the route holds spend, not data).\n    let session: AiSession | null\n    try {\n      session = await options.getSession(request)\n    } catch {\n      return jsonResponse({ error: 'unauthorized' }, 401)\n    }\n    if (!session) return jsonResponse({ error: 'unauthorized' }, 401)\n\n    // 2. Method.\n    if (request.method !== 'POST') return jsonResponse({ error: 'method-not-allowed' }, 405)\n\n    // 3. Soft per-project rate / spend counter.\n    if (rateLimited(projectKey(request))) return jsonResponse({ error: 'rate-limited' }, 429)\n\n    // 4. Body → chat request.\n    let body: unknown\n    try {\n      body = await request.json()\n    } catch {\n      return jsonResponse({ error: 'invalid-json' }, 400)\n    }\n    const chat = parseChatBody(body)\n    if (!chat) {\n      return jsonResponse(\n        { error: 'invalid-request', message: 'expected { messages: AiChatMessage[] }' },\n        400,\n      )\n    }\n\n    // 5. Thin proxy to the provider stream.\n    if (!options.provider.streamChat) {\n      return jsonResponse({ error: 'provider-cannot-stream' }, 501)\n    }\n    try {\n      return await options.provider.streamChat(chat)\n    } catch {\n      return jsonResponse({ error: 'provider-error' }, 502)\n    }\n  }\n}\n"]}
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../src/lib/ai/route.ts"],"names":[],"mappings":"AAmCA,SAAS,YAAY,CAAC,KAAc,EAAE,MAAc;IAClD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAOD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,CAAC,GAAG,KAA8C,CAAA;IACxD,OAAO,CACL,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;QACpE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAC9B,CAAA;AACH,CAAC;AAED,uFAAuF;AACvF,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAgD,CAAA;IAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACxF,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,QAA2B;QACrC,GAAG,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAA;AACH,CAAC;AAKD,2FAA2F;AAC3F,SAAS,iBAAiB,CAAC,IAAa;IACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,OAAO,GAAI,IAA8B,CAAC,OAAO,CAAA;IACvD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAChE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAiD,CAAA;IAC5E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC5F,OAAO,OAAoC,CAAA;AAC7C,CAAC;AAED,wFAAwF;AACxF,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,IAAI,GAAI,IAA2B,CAAC,IAAI,CAAA;IAC9C,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAA;IACvD,IAAI,KAAK,CAAC,OAAO,CAAE,IAA+B,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAA;IAC3E,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAA;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAA;IAEzD,SAAS,WAAW,CAAC,GAAW;QAC9B,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,EAAE,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YAChD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;QACjB,OAAO,MAAM,CAAC,KAAK,GAAG,YAAY,CAAA;IACpC,CAAC;IAED,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,gFAAgF;QAChF,IAAI,OAAyB,CAAA;QAC7B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QAEjE,aAAa;QACb,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAA;QAExF,4CAA4C;QAC5C,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QAEzF,2CAA2C;QAC3C,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QACrD,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAE3B,+EAA+E;QAC/E,iEAAiE;QACjE,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;YACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAC/E,GAAG,CACJ,CAAA;YACH,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;gBAClE,OAAO,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAA;YACvD,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,MAAM,IAAI,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACzD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAC/E,GAAG,CACJ,CAAA;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACjC,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAA;QAC/D,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAA;QACvD,CAAC;IACH,CAAC,CAAA;AACH,CAAC","sourcesContent":["/**\n * Server-route factory (EC-331): a streaming chat/completion endpoint the consuming\n * studio app mounts. Key custody = host route (never the browser, never Convex): the\n * `provider` holds the host-env key and this handler is a THIN model proxy — NO data\n * access, NO service credentials.\n *\n * Framework-agnostic on purpose: it returns a Web `Request → Response` handler the\n * host wires into whatever server entry it has (a TanStack Start server route, a\n * Convex `httpAction`, a plain fetch handler). The current demo studio builds as a\n * pure client SPA with server functions disabled (EC-234), so actually mounting this\n * is an EC-199 integration step; phase 1 ships the handler + its contract.\n *\n * Session-gated: `getSession` (host-wired, reading its own auth — this module never\n * touches `lib/auth`) must return a session for authenticated callers; anonymous\n * callers are rejected. Plus a soft, in-memory per-project rate counter (spend guard).\n *\n * EC-199: the route serves TWO model operations — both thin proxies, neither with any\n * data access — discriminated by the request body's `kind`:\n *   - `{ kind: 'chat', messages, system? }`  → `provider.streamChat` (text stream);\n *   - `{ kind: 'generate', request }`         → `provider.generateStructured` (JSON).\n * The structured mode is what lets `applyContentWithShape` run CLIENT-side against a\n * {@link createRouteProvider} whose key never touches the browser — the creation flow's\n * whole authoring loop proxies its model calls here while the tools (search/list/apply)\n * execute in the client with the user's own session. A body with `messages` and no\n * `kind` is still treated as a chat request (back-compat with the phase-1 contract).\n */\nimport type {\n  AiChatMessage,\n  AiRouteHandler,\n  AiRouteHandlerOptions,\n  AiSession,\n  GenerateStructuredRequest,\n  StreamChatRequest,\n} from './types'\n\nfunction jsonResponse(value: unknown, status: number): Response {\n  return new Response(JSON.stringify(value), {\n    status,\n    headers: { 'content-type': 'application/json' },\n  })\n}\n\ninterface RateBucket {\n  windowStart: number\n  count: number\n}\n\nfunction isChatMessage(value: unknown): value is AiChatMessage {\n  if (typeof value !== 'object' || value === null) return false\n  const m = value as { role?: unknown; content?: unknown }\n  return (\n    (m.role === 'system' || m.role === 'user' || m.role === 'assistant') &&\n    typeof m.content === 'string'\n  )\n}\n\n/** Parse a request body into a {@link StreamChatRequest}, or `null` when malformed. */\nfunction parseChatBody(body: unknown): StreamChatRequest | null {\n  if (typeof body !== 'object' || body === null) return null\n  const { messages, system } = body as { messages?: unknown; system?: unknown }\n  if (!Array.isArray(messages) || messages.length === 0 || !messages.every(isChatMessage)) {\n    return null\n  }\n  return {\n    messages: messages as AiChatMessage[],\n    ...(typeof system === 'string' ? { system } : {}),\n  }\n}\n\n/** The wire discriminator selecting which model operation the route proxies. */\nexport type AiRouteKind = 'chat' | 'generate'\n\n/** Structurally validate a {@link GenerateStructuredRequest}, or `null` when malformed. */\nfunction parseGenerateBody(body: unknown): GenerateStructuredRequest | null {\n  if (typeof body !== 'object' || body === null) return null\n  const request = (body as { request?: unknown }).request\n  if (typeof request !== 'object' || request === null) return null\n  const { prompt, schema } = request as { prompt?: unknown; schema?: unknown }\n  if (typeof prompt !== 'string' || typeof schema !== 'object' || schema === null) return null\n  return request as GenerateStructuredRequest\n}\n\n/** The `kind` a body selects: explicit `kind`, else `messages` ⇒ chat (back-compat). */\nfunction bodyKind(body: unknown): AiRouteKind | null {\n  if (typeof body !== 'object' || body === null) return null\n  const kind = (body as { kind?: unknown }).kind\n  if (kind === 'chat' || kind === 'generate') return kind\n  if (Array.isArray((body as { messages?: unknown }).messages)) return 'chat'\n  return null\n}\n\n/**\n * Build the mounted route handler. The returned function is a plain\n * `(Request) => Promise<Response>` — session-gated, soft-rate-limited, and a thin\n * proxy to `provider.streamChat`. Never throws to the caller: every failure is a\n * structured JSON response with an appropriate status.\n */\nexport function createAiRouteHandler(options: AiRouteHandlerOptions): AiRouteHandler {\n  const maxPerMinute = options.limits?.maxRequestsPerMinute\n  const buckets = new Map<string, RateBucket>()\n  const projectKey = options.projectKey ?? (() => 'global')\n\n  function rateLimited(key: string): boolean {\n    if (maxPerMinute === undefined || maxPerMinute <= 0) return false\n    const now = Date.now()\n    const bucket = buckets.get(key)\n    if (!bucket || now - bucket.windowStart >= 60_000) {\n      buckets.set(key, { windowStart: now, count: 1 })\n      return false\n    }\n    bucket.count += 1\n    return bucket.count > maxPerMinute\n  }\n\n  return async (request: Request): Promise<Response> => {\n    // 1. Session gate — reject anonymous callers (the route holds spend, not data).\n    let session: AiSession | null\n    try {\n      session = await options.getSession(request)\n    } catch {\n      return jsonResponse({ error: 'unauthorized' }, 401)\n    }\n    if (!session) return jsonResponse({ error: 'unauthorized' }, 401)\n\n    // 2. Method.\n    if (request.method !== 'POST') return jsonResponse({ error: 'method-not-allowed' }, 405)\n\n    // 3. Soft per-project rate / spend counter.\n    if (rateLimited(projectKey(request))) return jsonResponse({ error: 'rate-limited' }, 429)\n\n    // 4. Body → the requested model operation.\n    let body: unknown\n    try {\n      body = await request.json()\n    } catch {\n      return jsonResponse({ error: 'invalid-json' }, 400)\n    }\n\n    const kind = bodyKind(body)\n\n    // 5a. Structured generation — the thin proxy that lets `applyContentWithShape`\n    //     run client-side without the key ever reaching the browser.\n    if (kind === 'generate') {\n      const generate = parseGenerateBody(body)\n      if (!generate) {\n        return jsonResponse(\n          { error: 'invalid-request', message: 'expected { kind: \"generate\", request }' },\n          400,\n        )\n      }\n      try {\n        const result = await options.provider.generateStructured(generate)\n        return jsonResponse(result, 200)\n      } catch {\n        return jsonResponse({ error: 'provider-error' }, 502)\n      }\n    }\n\n    // 5b. Chat stream (default / back-compat).\n    const chat = kind === 'chat' ? parseChatBody(body) : null\n    if (!chat) {\n      return jsonResponse(\n        { error: 'invalid-request', message: 'expected { messages: AiChatMessage[] }' },\n        400,\n      )\n    }\n    if (!options.provider.streamChat) {\n      return jsonResponse({ error: 'provider-cannot-stream' }, 501)\n    }\n    try {\n      return await options.provider.streamChat(chat)\n    } catch {\n      return jsonResponse({ error: 'provider-error' }, 502)\n    }\n  }\n}\n"]}

package/dist/lib/ai/tools.d.ts

@@ -0,0 +1,65 @@
+/**
+ * The narrow tool set the creation flow's model works against (EC-199).
+ *
+ * Per the ratified AD, tools execute CLIENT-side against the operations layer with
+ * the user's own session — this module only declares their SHAPES (the model-facing
+ * planner schema) and the reader interface the studio binds to operations. The engine
+ * never gains a write path: `searchDocuments` / `listAssets` are reads that gather the
+ * real ids a proposal may reference (a relation id is otherwise structurally
+ * impossible — see `buildTargetShape`), and `createDocument` is the terminal action
+ * that runs `applyContentWithShape` and yields a reviewable proposal. `updateFields`
+ * and `translate` are deliberately NOT here — they are later slices (EC-332 / post-v1).
+ */
+import type { JsonSchema } from '@elytracms/core/cms-core';
+/** A document the model may reference as a relation target (from a `searchDocuments` read). */
+export interface DocumentSearchResult {
+    id: string;
+    title?: string;
+}
+/** An asset the model may reference (from a `listAssets` read). */
+export interface AssetSearchResult {
+    id: string;
+    title?: string;
+}
+/**
+ * The client-side, operations-backed readers the orchestrator calls. The studio binds
+ * these to the user's authenticated operations client; tests bind an in-memory fake.
+ * Reads only — there is no write tool (apply is a separate, human-gated draft write).
+ */
+export interface CreateFlowTools {
+    searchDocuments(input: {
+        collection: string;
+        query?: string;
+        limit?: number;
+    }): Promise<DocumentSearchResult[]>;
+    listAssets(input: {
+        query?: string;
+        limit?: number;
+    }): Promise<AssetSearchResult[]>;
+}
+/** One planned step the model returns — the discriminated tool/action union. */
+export type PlannerAction = {
+    action: 'searchDocuments';
+    collection: string;
+    query?: string;
+} | {
+    action: 'listAssets';
+    query?: string;
+} | {
+    action: 'createDocument';
+    collection: string;
+    instruction?: string;
+} | {
+    action: 'respond';
+    message: string;
+};
+/** The schema name the planner call carries — how a FakeProvider tells plan vs. author. */
+export declare const PLANNER_SCHEMA_NAME = "create_flow_action";
+/**
+ * The structured-output schema for ONE planning step. `action` is a closed enum and
+ * `collection` is leashed to the known collection ids, so the model can neither invent
+ * an action nor target a collection that does not exist.
+ */
+export declare function plannerSchema(collectionIds: readonly string[]): JsonSchema;
+/** Coerce a raw structured-output object into a {@link PlannerAction}; `null` if unusable. */
+export declare function parsePlannerAction(raw: unknown): PlannerAction | null;

package/dist/lib/ai/tools.js

@@ -0,0 +1,63 @@
+/** The schema name the planner call carries — how a FakeProvider tells plan vs. author. */
+export const PLANNER_SCHEMA_NAME = 'create_flow_action';
+/**
+ * The structured-output schema for ONE planning step. `action` is a closed enum and
+ * `collection` is leashed to the known collection ids, so the model can neither invent
+ * an action nor target a collection that does not exist.
+ */
+export function plannerSchema(collectionIds) {
+    return {
+        type: 'object',
+        properties: {
+            action: {
+                type: 'string',
+                enum: ['searchDocuments', 'listAssets', 'createDocument', 'respond'],
+                description: 'searchDocuments: find real ids for a relation target before creating. ' +
+                    'listAssets: find real asset ids. createDocument: author the document once ' +
+                    'you have what you need. respond: reply without creating anything.',
+            },
+            collection: {
+                type: 'string',
+                ...(collectionIds.length > 0 ? { enum: [...collectionIds] } : {}),
+                description: 'Target collection id (for searchDocuments / createDocument).',
+            },
+            query: { type: 'string', description: 'Optional search text (searchDocuments / listAssets).' },
+            instruction: {
+                type: 'string',
+                description: 'What to write, refining the user request (createDocument).',
+            },
+            message: { type: 'string', description: 'Assistant reply text (respond).' },
+        },
+        required: ['action'],
+        additionalProperties: false,
+    };
+}
+/** Coerce a raw structured-output object into a {@link PlannerAction}; `null` if unusable. */
+export function parsePlannerAction(raw) {
+    if (typeof raw !== 'object' || raw === null)
+        return null;
+    const value = raw;
+    const action = value.action;
+    const str = (k) => typeof value[k] === 'string' && value[k].length > 0 ? value[k] : undefined;
+    switch (action) {
+        case 'searchDocuments': {
+            const collection = str('collection');
+            if (!collection)
+                return null;
+            return { action, collection, ...(str('query') ? { query: str('query') } : {}) };
+        }
+        case 'listAssets':
+            return { action, ...(str('query') ? { query: str('query') } : {}) };
+        case 'createDocument': {
+            const collection = str('collection');
+            if (!collection)
+                return null;
+            return { action, collection, ...(str('instruction') ? { instruction: str('instruction') } : {}) };
+        }
+        case 'respond':
+            return { action, message: str('message') ?? '' };
+        default:
+            return null;
+    }
+}
+//# sourceMappingURL=tools.js.map

package/dist/lib/ai/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/lib/ai/tools.ts"],"names":[],"mappings":"AA+CA,2FAA2F;AAC3F,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAA;AAEvD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,aAAgC;IAC5D,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,CAAC;gBACpE,WAAW,EACT,wEAAwE;oBACxE,4EAA4E;oBAC5E,mEAAmE;aACtE;YACD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,WAAW,EAAE,8DAA8D;aAC5E;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sDAAsD,EAAE;YAC9F,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,4DAA4D;aAC1E;YACD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;SAC5E;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,oBAAoB,EAAE,KAAK;KAC5B,CAAA;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACxD,MAAM,KAAK,GAAG,GAA8B,CAAA;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC3B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAsB,EAAE,CAC5C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAK,KAAK,CAAC,CAAC,CAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAY,CAAC,CAAC,CAAC,SAAS,CAAA;IACpG,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,CAAA;YACpC,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAA;YAC5B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QAClF,CAAC;QACD,KAAK,YAAY;YACf,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QACtE,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,CAAA;YACpC,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAA;YAC5B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,aAAa,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QACpG,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAA;QAClD;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC","sourcesContent":["/**\n * The narrow tool set the creation flow's model works against (EC-199).\n *\n * Per the ratified AD, tools execute CLIENT-side against the operations layer with\n * the user's own session — this module only declares their SHAPES (the model-facing\n * planner schema) and the reader interface the studio binds to operations. The engine\n * never gains a write path: `searchDocuments` / `listAssets` are reads that gather the\n * real ids a proposal may reference (a relation id is otherwise structurally\n * impossible — see `buildTargetShape`), and `createDocument` is the terminal action\n * that runs `applyContentWithShape` and yields a reviewable proposal. `updateFields`\n * and `translate` are deliberately NOT here — they are later slices (EC-332 / post-v1).\n */\nimport type { JsonSchema } from '@elytracms/core/cms-core'\n\n/** A document the model may reference as a relation target (from a `searchDocuments` read). */\nexport interface DocumentSearchResult {\n  id: string\n  title?: string\n}\n\n/** An asset the model may reference (from a `listAssets` read). */\nexport interface AssetSearchResult {\n  id: string\n  title?: string\n}\n\n/**\n * The client-side, operations-backed readers the orchestrator calls. The studio binds\n * these to the user's authenticated operations client; tests bind an in-memory fake.\n * Reads only — there is no write tool (apply is a separate, human-gated draft write).\n */\nexport interface CreateFlowTools {\n  searchDocuments(input: {\n    collection: string\n    query?: string\n    limit?: number\n  }): Promise<DocumentSearchResult[]>\n  listAssets(input: { query?: string; limit?: number }): Promise<AssetSearchResult[]>\n}\n\n/** One planned step the model returns — the discriminated tool/action union. */\nexport type PlannerAction =\n  | { action: 'searchDocuments'; collection: string; query?: string }\n  | { action: 'listAssets'; query?: string }\n  | { action: 'createDocument'; collection: string; instruction?: string }\n  | { action: 'respond'; message: string }\n\n/** The schema name the planner call carries — how a FakeProvider tells plan vs. author. */\nexport const PLANNER_SCHEMA_NAME = 'create_flow_action'\n\n/**\n * The structured-output schema for ONE planning step. `action` is a closed enum and\n * `collection` is leashed to the known collection ids, so the model can neither invent\n * an action nor target a collection that does not exist.\n */\nexport function plannerSchema(collectionIds: readonly string[]): JsonSchema {\n  return {\n    type: 'object',\n    properties: {\n      action: {\n        type: 'string',\n        enum: ['searchDocuments', 'listAssets', 'createDocument', 'respond'],\n        description:\n          'searchDocuments: find real ids for a relation target before creating. ' +\n          'listAssets: find real asset ids. createDocument: author the document once ' +\n          'you have what you need. respond: reply without creating anything.',\n      },\n      collection: {\n        type: 'string',\n        ...(collectionIds.length > 0 ? { enum: [...collectionIds] } : {}),\n        description: 'Target collection id (for searchDocuments / createDocument).',\n      },\n      query: { type: 'string', description: 'Optional search text (searchDocuments / listAssets).' },\n      instruction: {\n        type: 'string',\n        description: 'What to write, refining the user request (createDocument).',\n      },\n      message: { type: 'string', description: 'Assistant reply text (respond).' },\n    },\n    required: ['action'],\n    additionalProperties: false,\n  }\n}\n\n/** Coerce a raw structured-output object into a {@link PlannerAction}; `null` if unusable. */\nexport function parsePlannerAction(raw: unknown): PlannerAction | null {\n  if (typeof raw !== 'object' || raw === null) return null\n  const value = raw as Record<string, unknown>\n  const action = value.action\n  const str = (k: string): string | undefined =>\n    typeof value[k] === 'string' && (value[k] as string).length > 0 ? (value[k] as string) : undefined\n  switch (action) {\n    case 'searchDocuments': {\n      const collection = str('collection')\n      if (!collection) return null\n      return { action, collection, ...(str('query') ? { query: str('query')! } : {}) }\n    }\n    case 'listAssets':\n      return { action, ...(str('query') ? { query: str('query')! } : {}) }\n    case 'createDocument': {\n      const collection = str('collection')\n      if (!collection) return null\n      return { action, collection, ...(str('instruction') ? { instruction: str('instruction')! } : {}) }\n    }\n    case 'respond':\n      return { action, message: str('message') ?? '' }\n    default:\n      return null\n  }\n}\n"]}

package/dist/lib/ai-panel.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The AI assistant panel's open/closed state (EC-199) — a framework-free module
+ * store, like the ambient locale (`lib/locale`). Module-level on purpose: the toggle
+ * lives in the workspace header (`StudioShell`) while the panel mounts deep in the CMS
+ * area (the view resolver's subtree) — two disjoint React subtrees that must share one
+ * open state without threading a provider through everything between them. The choice
+ * persists across sessions (best-effort, like the rail collapse preference).
+ *
+ * This module imports NO AI runtime — it is just a boolean store, safe to import from
+ * the always-mounted shell. The heavy chat panel stays behind its own lazy boundary.
+ */
+export declare const AI_PANEL_STORAGE_KEY = "elytra-ai-panel-open";
+/** Whether the AI panel is currently open. */
+export declare function isAiPanelOpen(): boolean;
+/** Open/close the panel (persisted best-effort). */
+export declare function setAiPanelOpen(next: boolean): void;
+/** Toggle the panel. */
+export declare function toggleAiPanel(): void;
+/** React binding — the header toggle and the CMS-area panel both read this. */
+export declare function useAiPanelOpen(): boolean;

package/dist/lib/ai-panel.js

@@ -0,0 +1,48 @@
+import { useSyncExternalStore } from 'react';
+import { createBooleanPreference } from './local-preference';
+/**
+ * The AI assistant panel's open/closed state (EC-199) — a framework-free module
+ * store, like the ambient locale (`lib/locale`). Module-level on purpose: the toggle
+ * lives in the workspace header (`StudioShell`) while the panel mounts deep in the CMS
+ * area (the view resolver's subtree) — two disjoint React subtrees that must share one
+ * open state without threading a provider through everything between them. The choice
+ * persists across sessions (best-effort, like the rail collapse preference).
+ *
+ * This module imports NO AI runtime — it is just a boolean store, safe to import from
+ * the always-mounted shell. The heavy chat panel stays behind its own lazy boundary.
+ */
+export const AI_PANEL_STORAGE_KEY = 'elytra-ai-panel-open';
+const openPreference = createBooleanPreference(AI_PANEL_STORAGE_KEY, false);
+let open = openPreference.read();
+const listeners = new Set();
+function emit() {
+    for (const listener of listeners)
+        listener();
+}
+/** Whether the AI panel is currently open. */
+export function isAiPanelOpen() {
+    return open;
+}
+/** Open/close the panel (persisted best-effort). */
+export function setAiPanelOpen(next) {
+    if (next === open)
+        return;
+    open = next;
+    openPreference.store(next);
+    emit();
+}
+/** Toggle the panel. */
+export function toggleAiPanel() {
+    setAiPanelOpen(!open);
+}
+function subscribe(listener) {
+    listeners.add(listener);
+    return () => {
+        listeners.delete(listener);
+    };
+}
+/** React binding — the header toggle and the CMS-area panel both read this. */
+export function useAiPanelOpen() {
+    return useSyncExternalStore(subscribe, isAiPanelOpen, isAiPanelOpen);
+}
+//# sourceMappingURL=ai-panel.js.map

package/dist/lib/ai-panel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-panel.js","sourceRoot":"","sources":["../../src/lib/ai-panel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAA;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAE5D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAA;AAE1D,MAAM,cAAc,GAAG,uBAAuB,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA;AAE3E,IAAI,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,CAAA;AAChC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAA;AAEvC,SAAS,IAAI;IACX,KAAK,MAAM,QAAQ,IAAI,SAAS;QAAE,QAAQ,EAAE,CAAA;AAC9C,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAA;AACb,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAM;IACzB,IAAI,GAAG,IAAI,CAAA;IACX,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,EAAE,CAAA;AACR,CAAC;AAED,wBAAwB;AACxB,MAAM,UAAU,aAAa;IAC3B,cAAc,CAAC,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC;AAED,SAAS,SAAS,CAAC,QAAoB;IACrC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACvB,OAAO,GAAG,EAAE;QACV,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC5B,CAAC,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc;IAC5B,OAAO,oBAAoB,CAAC,SAAS,EAAE,aAAa,EAAE,aAAa,CAAC,CAAA;AACtE,CAAC","sourcesContent":["import { useSyncExternalStore } from 'react'\nimport { createBooleanPreference } from './local-preference'\n\n/**\n * The AI assistant panel's open/closed state (EC-199) — a framework-free module\n * store, like the ambient locale (`lib/locale`). Module-level on purpose: the toggle\n * lives in the workspace header (`StudioShell`) while the panel mounts deep in the CMS\n * area (the view resolver's subtree) — two disjoint React subtrees that must share one\n * open state without threading a provider through everything between them. The choice\n * persists across sessions (best-effort, like the rail collapse preference).\n *\n * This module imports NO AI runtime — it is just a boolean store, safe to import from\n * the always-mounted shell. The heavy chat panel stays behind its own lazy boundary.\n */\nexport const AI_PANEL_STORAGE_KEY = 'elytra-ai-panel-open'\n\nconst openPreference = createBooleanPreference(AI_PANEL_STORAGE_KEY, false)\n\nlet open = openPreference.read()\nconst listeners = new Set<() => void>()\n\nfunction emit(): void {\n  for (const listener of listeners) listener()\n}\n\n/** Whether the AI panel is currently open. */\nexport function isAiPanelOpen(): boolean {\n  return open\n}\n\n/** Open/close the panel (persisted best-effort). */\nexport function setAiPanelOpen(next: boolean): void {\n  if (next === open) return\n  open = next\n  openPreference.store(next)\n  emit()\n}\n\n/** Toggle the panel. */\nexport function toggleAiPanel(): void {\n  setAiPanelOpen(!open)\n}\n\nfunction subscribe(listener: () => void): () => void {\n  listeners.add(listener)\n  return () => {\n    listeners.delete(listener)\n  }\n}\n\n/** React binding — the header toggle and the CMS-area panel both read this. */\nexport function useAiPanelOpen(): boolean {\n  return useSyncExternalStore(subscribe, isAiPanelOpen, isAiPanelOpen)\n}\n"]}

package/dist/lib/i18n/messages.en.js

@@ -366,6 +366,9 @@ export const EN_MESSAGES = {
     'cms.version.compareVersionLabel': msg('Compare v{version}'),
     'cms.version.switchToDraftToRestore': msg('Switch to Draft to restore'),
     'cms.version.restore': msg('Restore'),
+    // EC-199 provenance — a subtle marker on versions recorded from AI-authored content.
+    'cms.version.aiAuthored': msg('AI', 'Short badge marking an AI-authored version.'),
+    'cms.version.aiAuthoredTitle': msg('Authored with the AI assistant'),
     // EC-317 — descriptor lane, unified/side-by-side toggle, truncation, zebra.
     'cms.version.fieldColumnHeader': msg('Field'),
     'cms.version.viewSideBySide': msg('Side by side'),
@@ -806,5 +809,36 @@ export const EN_MESSAGES = {
     'richText.slash.text': msg('Text'),
     'richText.slash.empty': msg('No matching blocks'),
     'richText.slash.componentsGroup': msg('Components'),
+    // ─────────────────────────────────────────────────────────────────────────
+    // EC-199 — AI assistant chat panel + creation flow
+    // ─────────────────────────────────────────────────────────────────────────
+    'ai.panel.title': msg('Assistant'),
+    'ai.panel.toggle': msg('Toggle the AI assistant'),
+    'ai.panel.close': msg('Close the assistant'),
+    'ai.panel.loading': msg('Loading the assistant…'),
+    'ai.panel.working': msg('Working…'),
+    'ai.panel.placeholder': msg('Ask the assistant to create content…'),
+    'ai.panel.send': msg('Send'),
+    'ai.panel.emptyTitle': msg('Create content with AI'),
+    'ai.panel.emptyHint': msg('Describe what you want to create — for example, “Write a blog post about our new opening hours.” The assistant drafts it for you to review.'),
+    'ai.panel.unavailable': msg('The assistant is not available in this project.'),
+    'ai.step.search': msg('Looked up {collection} — {count} found', 'Tool status line. {count} is a number.'),
+    'ai.step.listAssets': msg('Browsed assets — {count} found'),
+    'ai.step.drafting': msg('Drafting the {collection}…'),
+    'ai.proposal.title': msg('Proposed {collection}'),
+    'ai.proposal.reviewHint': msg('Review the draft, then apply it or discard it.'),
+    'ai.proposal.apply': msg('Apply as draft'),
+    'ai.proposal.discard': msg('Discard'),
+    'ai.proposal.applied': msg('Applied as draft'),
+    'ai.proposal.discarded': msg('Discarded'),
+    'ai.proposal.discardedNote': msg('This proposal was discarded.'),
+    'ai.proposal.open': msg('Open document'),
+    'ai.proposal.unavailable': msg('This proposal can no longer be shown.'),
+    'ai.proposal.diffBefore': msg('Empty'),
+    'ai.proposal.diffAfter': msg('Proposed'),
+    'ai.proposal.diffUnified': msg('Proposed content'),
+    'ai.error.route': msg('The assistant is unavailable right now. Please try again.'),
+    'ai.error.generic': msg('Something went wrong. Please try again.'),
+    'ai.error.applyFailed': msg('The draft could not be applied.'),
 };
 //# sourceMappingURL=messages.en.js.map