@elytracms/studio 0.0.85 → 0.0.87

package/dist/lib/ai/route-fetch.d.ts

@@ -0,0 +1,58 @@
+/**
+ * The AI route's response-shape guard (EC-514 rider): ONE wrapping `fetch` shared by
+ * both client call sites of the mounted route — the panel's chat transport
+ * (`useChat` + `DefaultChatTransport`, which accepts a `fetch` option) and the
+ * structured proxy in `createRouteProvider` — so "the route is not mounted at this
+ * path" is a typed, nameable failure at both, instead of whatever each transport
+ * makes of a page of HTML.
+ *
+ * Why this exists (measured, EC-514): with the EC-503 dev degrade active (studio
+ * `dist` missing → the Vite dev mount is skipped) a `POST /api/ai` falls through to
+ * the SPA shell — `200 text/html`. The chat transport treats a 200 as success and
+ * parses the HTML as an event stream; the HTML carries no `data:` lines, so the
+ * stream ends EMPTY and the panel shows the user's turn followed by nothing — no
+ * error note, no assistant turn. A silent failure, the exact state AGENTS.md §4
+ * forbids. The structured proxy's path is no better by construction: a 200 is
+ * `response.ok`, so it calls `response.json()` on `<!DOCTYPE …` — a parse error
+ * that names neither the path nor the cause.
+ *
+ * The contract this guard enforces is the route's OWN: `createAiRouteHandler` only
+ * ever answers `application/json` (every non-stream branch, `route.ts`
+ * `jsonResponse`) or the SDK's UI message stream (`text/event-stream`,
+ * `createUIMessageStreamResponse`). Anything else — an HTML shell, a host's 404
+ * page, a proxy's error page — was not produced by the route, so the request did
+ * not reach a mounted route at that path. Positive detection (what the route DOES
+ * answer) rather than a blocklist of page types, so a new kind of "something else"
+ * cannot slip past as success.
+ *
+ * Bundle discipline: imports nothing from `ai` / `@ai-sdk/*` (pinned in
+ * `bundle.test.ts`) — it is a plain `fetch` decorator.
+ */
+/** The bare media type of a `content-type` header (`text/html; charset=utf-8` → `text/html`). */
+export declare function mediaTypeOf(contentType: string | null | undefined): string | null;
+/** True when a response's content type is one the AI route itself produces. */
+export declare function isAiRouteAnswer(contentType: string | null | undefined): boolean;
+/**
+ * Thrown by {@link guardAiRouteFetch} when the answer at `endpoint` was not produced
+ * by the AI route — no route is mounted there (or something in front of it
+ * answered). Carries what a developer needs to act: the path, the status, and the
+ * content type that came back. The `message` is self-describing on purpose: the
+ * tool executor (`tools.ts`) surfaces `error.message` verbatim as a tool step's
+ * error text, and a bare "unavailable" there would hide the cause again.
+ */
+export declare class AiRouteNotMountedError extends Error {
+    readonly endpoint: string;
+    readonly status: number;
+    readonly contentType: string | null;
+    readonly name = "AiRouteNotMountedError";
+    constructor(endpoint: string, status: number, contentType: string | null);
+}
+/** Type guard for {@link AiRouteNotMountedError} (works across bundle copies — checks the name). */
+export declare function isAiRouteNotMountedError(error: unknown): error is AiRouteNotMountedError;
+/**
+ * Wrap a `fetch` so a response the AI route could not have produced throws
+ * {@link AiRouteNotMountedError} instead of being handed to a JSON/stream parser.
+ * Everything else — including the route's own error answers (401/429/502 JSON) —
+ * passes through unchanged for the existing handlers.
+ */
+export declare function guardAiRouteFetch(fetchImpl?: typeof fetch): typeof fetch;

package/dist/lib/ai/route-fetch.js

@@ -0,0 +1,98 @@
+/**
+ * The AI route's response-shape guard (EC-514 rider): ONE wrapping `fetch` shared by
+ * both client call sites of the mounted route — the panel's chat transport
+ * (`useChat` + `DefaultChatTransport`, which accepts a `fetch` option) and the
+ * structured proxy in `createRouteProvider` — so "the route is not mounted at this
+ * path" is a typed, nameable failure at both, instead of whatever each transport
+ * makes of a page of HTML.
+ *
+ * Why this exists (measured, EC-514): with the EC-503 dev degrade active (studio
+ * `dist` missing → the Vite dev mount is skipped) a `POST /api/ai` falls through to
+ * the SPA shell — `200 text/html`. The chat transport treats a 200 as success and
+ * parses the HTML as an event stream; the HTML carries no `data:` lines, so the
+ * stream ends EMPTY and the panel shows the user's turn followed by nothing — no
+ * error note, no assistant turn. A silent failure, the exact state AGENTS.md §4
+ * forbids. The structured proxy's path is no better by construction: a 200 is
+ * `response.ok`, so it calls `response.json()` on `<!DOCTYPE …` — a parse error
+ * that names neither the path nor the cause.
+ *
+ * The contract this guard enforces is the route's OWN: `createAiRouteHandler` only
+ * ever answers `application/json` (every non-stream branch, `route.ts`
+ * `jsonResponse`) or the SDK's UI message stream (`text/event-stream`,
+ * `createUIMessageStreamResponse`). Anything else — an HTML shell, a host's 404
+ * page, a proxy's error page — was not produced by the route, so the request did
+ * not reach a mounted route at that path. Positive detection (what the route DOES
+ * answer) rather than a blocklist of page types, so a new kind of "something else"
+ * cannot slip past as success.
+ *
+ * Bundle discipline: imports nothing from `ai` / `@ai-sdk/*` (pinned in
+ * `bundle.test.ts`) — it is a plain `fetch` decorator.
+ */
+/** Media types the mounted route answers with — JSON, or the SDK's UI message stream. */
+const ROUTE_MEDIA_TYPES = new Set(['application/json', 'text/event-stream']);
+/** The bare media type of a `content-type` header (`text/html; charset=utf-8` → `text/html`). */
+export function mediaTypeOf(contentType) {
+    if (!contentType)
+        return null;
+    const bare = contentType.split(';')[0]?.trim().toLowerCase() ?? '';
+    return bare.length > 0 ? bare : null;
+}
+/** True when a response's content type is one the AI route itself produces. */
+export function isAiRouteAnswer(contentType) {
+    const media = mediaTypeOf(contentType);
+    return media !== null && ROUTE_MEDIA_TYPES.has(media);
+}
+/**
+ * Thrown by {@link guardAiRouteFetch} when the answer at `endpoint` was not produced
+ * by the AI route — no route is mounted there (or something in front of it
+ * answered). Carries what a developer needs to act: the path, the status, and the
+ * content type that came back. The `message` is self-describing on purpose: the
+ * tool executor (`tools.ts`) surfaces `error.message` verbatim as a tool step's
+ * error text, and a bare "unavailable" there would hide the cause again.
+ */
+export class AiRouteNotMountedError extends Error {
+    endpoint;
+    status;
+    contentType;
+    name = 'AiRouteNotMountedError';
+    constructor(endpoint, status, contentType) {
+        super(`No AI route is mounted at ${endpoint}: the request was answered with ` +
+            `${contentType ?? 'no content type'} (HTTP ${status}) instead of the route's JSON or event stream.`);
+        this.endpoint = endpoint;
+        this.status = status;
+        this.contentType = contentType;
+    }
+}
+/** Type guard for {@link AiRouteNotMountedError} (works across bundle copies — checks the name). */
+export function isAiRouteNotMountedError(error) {
+    return (error instanceof AiRouteNotMountedError ||
+        (typeof error === 'object' &&
+            error !== null &&
+            error.name === 'AiRouteNotMountedError' &&
+            typeof error.endpoint === 'string'));
+}
+/** The path a `fetch` input names (string, `URL`, or `Request`). */
+function endpointOf(input) {
+    if (typeof input === 'string')
+        return input;
+    if (input instanceof URL)
+        return input.toString();
+    return input.url;
+}
+/**
+ * Wrap a `fetch` so a response the AI route could not have produced throws
+ * {@link AiRouteNotMountedError} instead of being handed to a JSON/stream parser.
+ * Everything else — including the route's own error answers (401/429/502 JSON) —
+ * passes through unchanged for the existing handlers.
+ */
+export function guardAiRouteFetch(fetchImpl = fetch) {
+    return async (input, init) => {
+        const response = await fetchImpl(input, init);
+        const contentType = response.headers.get('content-type');
+        if (!isAiRouteAnswer(contentType)) {
+            throw new AiRouteNotMountedError(endpointOf(input), response.status, contentType);
+        }
+        return response;
+    };
+}
+//# sourceMappingURL=route-fetch.js.map

package/dist/lib/ai/route-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-fetch.js","sourceRoot":"","sources":["../../../src/lib/ai/route-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,yFAAyF;AACzF,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC,CAAA;AAEjG,iGAAiG;AACjG,MAAM,UAAU,WAAW,CAAC,WAAsC;IAChE,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAA;IAC7B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAA;IAClE,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;AACtC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,WAAsC;IACpE,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IACtC,OAAO,KAAK,KAAK,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAGpC;IACA;IACA;IAJO,IAAI,GAAG,wBAAwB,CAAA;IACjD,YACW,QAAgB,EAChB,MAAc,EACd,WAA0B;QAEnC,KAAK,CACH,6BAA6B,QAAQ,kCAAkC;YACrE,GAAG,WAAW,IAAI,iBAAiB,UAAU,MAAM,gDAAgD,CACtG,CAAA;QAPQ,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QACd,gBAAW,GAAX,WAAW,CAAe;IAMrC,CAAC;CACF;AAED,oGAAoG;AACpG,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,OAAO,CACL,KAAK,YAAY,sBAAsB;QACvC,CAAC,OAAO,KAAK,KAAK,QAAQ;YACxB,KAAK,KAAK,IAAI;YACb,KAA4B,CAAC,IAAI,KAAK,wBAAwB;YAC/D,OAAQ,KAAgC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAClE,CAAA;AACH,CAAC;AAED,oEAAoE;AACpE,SAAS,UAAU,CAAC,KAAwB;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,KAAK,YAAY,GAAG;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAA;IACjD,OAAO,KAAK,CAAC,GAAG,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAA0B,KAAK;IAC/D,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QACxD,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,sBAAsB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QACnF,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAA;AACH,CAAC","sourcesContent":["/**\n * The AI route's response-shape guard (EC-514 rider): ONE wrapping `fetch` shared by\n * both client call sites of the mounted route — the panel's chat transport\n * (`useChat` + `DefaultChatTransport`, which accepts a `fetch` option) and the\n * structured proxy in `createRouteProvider` — so \"the route is not mounted at this\n * path\" is a typed, nameable failure at both, instead of whatever each transport\n * makes of a page of HTML.\n *\n * Why this exists (measured, EC-514): with the EC-503 dev degrade active (studio\n * `dist` missing → the Vite dev mount is skipped) a `POST /api/ai` falls through to\n * the SPA shell — `200 text/html`. The chat transport treats a 200 as success and\n * parses the HTML as an event stream; the HTML carries no `data:` lines, so the\n * stream ends EMPTY and the panel shows the user's turn followed by nothing — no\n * error note, no assistant turn. A silent failure, the exact state AGENTS.md §4\n * forbids. The structured proxy's path is no better by construction: a 200 is\n * `response.ok`, so it calls `response.json()` on `<!DOCTYPE …` — a parse error\n * that names neither the path nor the cause.\n *\n * The contract this guard enforces is the route's OWN: `createAiRouteHandler` only\n * ever answers `application/json` (every non-stream branch, `route.ts`\n * `jsonResponse`) or the SDK's UI message stream (`text/event-stream`,\n * `createUIMessageStreamResponse`). Anything else — an HTML shell, a host's 404\n * page, a proxy's error page — was not produced by the route, so the request did\n * not reach a mounted route at that path. Positive detection (what the route DOES\n * answer) rather than a blocklist of page types, so a new kind of \"something else\"\n * cannot slip past as success.\n *\n * Bundle discipline: imports nothing from `ai` / `@ai-sdk/*` (pinned in\n * `bundle.test.ts`) — it is a plain `fetch` decorator.\n */\n\n/** Media types the mounted route answers with — JSON, or the SDK's UI message stream. */\nconst ROUTE_MEDIA_TYPES: ReadonlySet<string> = new Set(['application/json', 'text/event-stream'])\n\n/** The bare media type of a `content-type` header (`text/html; charset=utf-8` → `text/html`). */\nexport function mediaTypeOf(contentType: string | null | undefined): string | null {\n  if (!contentType) return null\n  const bare = contentType.split(';')[0]?.trim().toLowerCase() ?? ''\n  return bare.length > 0 ? bare : null\n}\n\n/** True when a response's content type is one the AI route itself produces. */\nexport function isAiRouteAnswer(contentType: string | null | undefined): boolean {\n  const media = mediaTypeOf(contentType)\n  return media !== null && ROUTE_MEDIA_TYPES.has(media)\n}\n\n/**\n * Thrown by {@link guardAiRouteFetch} when the answer at `endpoint` was not produced\n * by the AI route — no route is mounted there (or something in front of it\n * answered). Carries what a developer needs to act: the path, the status, and the\n * content type that came back. The `message` is self-describing on purpose: the\n * tool executor (`tools.ts`) surfaces `error.message` verbatim as a tool step's\n * error text, and a bare \"unavailable\" there would hide the cause again.\n */\nexport class AiRouteNotMountedError extends Error {\n  override readonly name = 'AiRouteNotMountedError'\n  constructor(\n    readonly endpoint: string,\n    readonly status: number,\n    readonly contentType: string | null,\n  ) {\n    super(\n      `No AI route is mounted at ${endpoint}: the request was answered with ` +\n        `${contentType ?? 'no content type'} (HTTP ${status}) instead of the route's JSON or event stream.`,\n    )\n  }\n}\n\n/** Type guard for {@link AiRouteNotMountedError} (works across bundle copies — checks the name). */\nexport function isAiRouteNotMountedError(error: unknown): error is AiRouteNotMountedError {\n  return (\n    error instanceof AiRouteNotMountedError ||\n    (typeof error === 'object' &&\n      error !== null &&\n      (error as { name?: unknown }).name === 'AiRouteNotMountedError' &&\n      typeof (error as { endpoint?: unknown }).endpoint === 'string')\n  )\n}\n\n/** The path a `fetch` input names (string, `URL`, or `Request`). */\nfunction endpointOf(input: RequestInfo | URL): string {\n  if (typeof input === 'string') return input\n  if (input instanceof URL) return input.toString()\n  return input.url\n}\n\n/**\n * Wrap a `fetch` so a response the AI route could not have produced throws\n * {@link AiRouteNotMountedError} instead of being handed to a JSON/stream parser.\n * Everything else — including the route's own error answers (401/429/502 JSON) —\n * passes through unchanged for the existing handlers.\n */\nexport function guardAiRouteFetch(fetchImpl: typeof fetch = fetch): typeof fetch {\n  return async (input, init) => {\n    const response = await fetchImpl(input, init)\n    const contentType = response.headers.get('content-type')\n    if (!isAiRouteAnswer(contentType)) {\n      throw new AiRouteNotMountedError(endpointOf(input), response.status, contentType)\n    }\n    return response\n  }\n}\n"]}

package/dist/lib/ai/route-provider.d.ts

@@ -1,31 +1,14 @@
-/**
- * `createRouteProvider` — the CLIENT-side {@link AiProvider} the studio runs in the
- * browser (EC-199). It is a thin proxy that forwards `generateStructured` to the
- * host's mounted {@link createAiRouteHandler} endpoint over `fetch`. The provider
- * KEY never touches the browser: the key-holding {@link createAnthropicProvider}
- * lives only inside the server route; the studio's `defineStudio({ ai: { provider } })`
- * gets this route provider (or the FakeProvider for a keyless playground), so the
- * whole authoring loop — `applyContentWithShape` included — proxies its model calls
- * through the session-gated route while the tools (search / list / apply) execute
- * client-side with the user's own session. It exposes NO `languageModel()` — the
- * conversational loop talks to the route's native chat branch directly (EC-334,
- * `useChat` + `DefaultChatTransport`), not through this provider; the provider
- * only NAMES that target ({@link AiChatTarget}) so endpoint + session headers are
- * configured once.
- *
- * Bundle-safe by construction: this module imports nothing from `ai` / `@ai-sdk/*`
- * (it only uses `fetch`), so it stays off the AI-SDK dependency edge the bundle test
- * pins — the route provider can sit on the studio critical path without pulling the
- * SDK. The capability gate passes: the route only ever fronts a gate-checked provider
- * (validated at the server mount), so the proxy declares both required capabilities.
- */
 import type { AiProvider } from './types.js';
 /** How extra request headers are supplied — a static set or a (possibly async) thunk. */
 export type RouteHeaders = HeadersInit | (() => HeadersInit | undefined | Promise<HeadersInit | undefined>);
 export interface RouteProviderOptions {
     /** The mounted route path/URL (default `/api/ai`). */
     endpoint?: string;
-    /** `fetch` implementation (default the global). Injected in tests. */
+    /**
+     * `fetch` implementation (default the global). Injected in tests. Always wrapped
+     * by {@link guardAiRouteFetch} (EC-514): an answer the route could not have
+     * produced — the SPA shell, a host 404 page — throws `AiRouteNotMountedError`.
+     */
     fetchImpl?: typeof fetch;
     /**
      * Extra headers per request — e.g. the studio session token the route's `getSession`

package/dist/lib/ai/route-provider.js

@@ -1,3 +1,25 @@
+/**
+ * `createRouteProvider` — the CLIENT-side {@link AiProvider} the studio runs in the
+ * browser (EC-199). It is a thin proxy that forwards `generateStructured` to the
+ * host's mounted {@link createAiRouteHandler} endpoint over `fetch`. The provider
+ * KEY never touches the browser: the key-holding {@link createAnthropicProvider}
+ * lives only inside the server route; the studio's `defineStudio({ ai: { provider } })`
+ * gets this route provider (or the FakeProvider for a keyless playground), so the
+ * whole authoring loop — `applyContentWithShape` included — proxies its model calls
+ * through the session-gated route while the tools (search / list / apply) execute
+ * client-side with the user's own session. It exposes NO `languageModel()` — the
+ * conversational loop talks to the route's native chat branch directly (EC-334,
+ * `useChat` + `DefaultChatTransport`), not through this provider; the provider
+ * only NAMES that target ({@link AiChatTarget}) so endpoint + session headers are
+ * configured once.
+ *
+ * Bundle-safe by construction: this module imports nothing from `ai` / `@ai-sdk/*`
+ * (it only uses `fetch`), so it stays off the AI-SDK dependency edge the bundle test
+ * pins — the route provider can sit on the studio critical path without pulling the
+ * SDK. The capability gate passes: the route only ever fronts a gate-checked provider
+ * (validated at the server mount), so the proxy declares both required capabilities.
+ */
+import { guardAiRouteFetch } from './route-fetch.js';
 /** Default mount path a consuming studio app exposes for {@link createAiRouteHandler}. */
 export const DEFAULT_AI_ENDPOINT = '/api/ai';
 /**
@@ -44,7 +66,7 @@ async function errorCode(response) {
  */
 export function createRouteProvider(options = {}) {
     const endpoint = options.endpoint ?? DEFAULT_AI_ENDPOINT;
-    const fetchImpl = options.fetchImpl ?? fetch;
+    const fetchImpl = guardAiRouteFetch(options.fetchImpl ?? fetch);
     async function post(body) {
         const extra = await resolveHeaders(options.headers);
         const headers = new Headers(extra);

package/dist/lib/ai/route-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"route-provider.js","sourceRoot":"","sources":["../../../src/lib/ai/route-provider.ts"],"names":[],"mappings":"AAiDA,0FAA0F;AAC1F,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAA;AAmB5C;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA2B;IAC3D,MAAM,SAAS,GAAI,QAA4C,EAAE,UAAU,CAAA;IAC3E,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAA;AAC1C,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAiC;IAC7D,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,OAAO,OAAO,EAAE,CAAA;IACnD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B;IACA;IAFX,YACW,MAAc,EACd,IAAY;QAErB,KAAK,CAAC,4BAA4B,MAAM,KAAK,IAAI,GAAG,CAAC,CAAA;QAH5C,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAGrB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAED,KAAK,UAAU,SAAS,CAAC,QAAkB;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAA;QAC3D,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAA;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,gBAAgB,CAAA;IACzB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAgC,EAAE;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,mBAAmB,CAAA;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAE5C,KAAK,UAAU,IAAI,CAAC,IAAa;QAC/B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACnD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;QAClC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;QAC/C,OAAO,SAAS,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,OAAO;QACzB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,UAAU,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAChG,YAAY,EAAE,GAA2B,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;QAE3F,KAAK,CAAC,kBAAkB,CACtB,OAAkC;YAElC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;YAC1D,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;YACpF,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAA;QAC5D,CAAC;KACF,CAAA;AACH,CAAC","sourcesContent":["/**\n * `createRouteProvider` — the CLIENT-side {@link AiProvider} the studio runs in the\n * browser (EC-199). It is a thin proxy that forwards `generateStructured` to the\n * host's mounted {@link createAiRouteHandler} endpoint over `fetch`. The provider\n * KEY never touches the browser: the key-holding {@link createAnthropicProvider}\n * lives only inside the server route; the studio's `defineStudio({ ai: { provider } })`\n * gets this route provider (or the FakeProvider for a keyless playground), so the\n * whole authoring loop — `applyContentWithShape` included — proxies its model calls\n * through the session-gated route while the tools (search / list / apply) execute\n * client-side with the user's own session. It exposes NO `languageModel()` — the\n * conversational loop talks to the route's native chat branch directly (EC-334,\n * `useChat` + `DefaultChatTransport`), not through this provider; the provider\n * only NAMES that target ({@link AiChatTarget}) so endpoint + session headers are\n * configured once.\n *\n * Bundle-safe by construction: this module imports nothing from `ai` / `@ai-sdk/*`\n * (it only uses `fetch`), so it stays off the AI-SDK dependency edge the bundle test\n * pins — the route provider can sit on the studio critical path without pulling the\n * SDK. The capability gate passes: the route only ever fronts a gate-checked provider\n * (validated at the server mount), so the proxy declares both required capabilities.\n */\nimport type {\n  AiProvider,\n  AiProviderCapabilities,\n  GenerateStructuredRequest,\n  GenerateStructuredResult,\n} from './types'\n\n/** How extra request headers are supplied — a static set or a (possibly async) thunk. */\nexport type RouteHeaders =\n  | HeadersInit\n  | (() => HeadersInit | undefined | Promise<HeadersInit | undefined>)\n\nexport interface RouteProviderOptions {\n  /** The mounted route path/URL (default `/api/ai`). */\n  endpoint?: string\n  /** `fetch` implementation (default the global). Injected in tests. */\n  fetchImpl?: typeof fetch\n  /**\n   * Extra headers per request — e.g. the studio session token the route's `getSession`\n   * checks. A thunk is re-evaluated on every call so a refreshed token is picked up.\n   */\n  headers?: RouteHeaders\n  /** Provider id recorded in provenance (default `route`). */\n  id?: string\n  /** Model id recorded in provenance (the downstream model, when the host fixes one). */\n  model?: string\n}\n\n/** Default mount path a consuming studio app exposes for {@link createAiRouteHandler}. */\nexport const DEFAULT_AI_ENDPOINT = '/api/ai'\n\n/**\n * The chat transport target (EC-334): where the panel's `useChat` posts its\n * native `{ messages, context }` requests, and which extra headers ride along\n * (the session token thunk). `createRouteProvider` exposes its own endpoint +\n * headers here, so the ONE configured provider is the single source of truth\n * for both the structured proxy and the chat transport.\n */\nexport interface AiChatTarget {\n  endpoint: string\n  headers?: RouteHeaders\n}\n\n/** An {@link AiProvider} that also names the chat transport target it fronts. */\nexport interface RouteAiProvider extends AiProvider {\n  readonly chatTarget: AiChatTarget\n}\n\n/**\n * The chat target behind a configured provider: the route provider's own\n * endpoint + headers, or the default mount path for any other provider (the\n * chat loop always talks to the mounted route — a missing mount fails loud as\n * a visible route error in the panel, never silently).\n */\nexport function resolveChatTarget(provider: AiProvider | null): AiChatTarget {\n  const candidate = (provider as Partial<RouteAiProvider> | null)?.chatTarget\n  if (candidate && typeof candidate.endpoint === 'string') return candidate\n  return { endpoint: DEFAULT_AI_ENDPOINT }\n}\n\nasync function resolveHeaders(headers: RouteHeaders | undefined): Promise<HeadersInit | undefined> {\n  if (typeof headers === 'function') return headers()\n  return headers\n}\n\n/** A structured error thrown when the route rejects (surfaced by the chat UI). */\nexport class AiRouteError extends Error {\n  constructor(\n    readonly status: number,\n    readonly code: string,\n  ) {\n    super(`AI route request failed (${status}: ${code})`)\n    this.name = 'AiRouteError'\n  }\n}\n\nasync function errorCode(response: Response): Promise<string> {\n  try {\n    const body = (await response.json()) as { error?: unknown }\n    return typeof body.error === 'string' ? body.error : 'request-failed'\n  } catch {\n    return 'request-failed'\n  }\n}\n\n/**\n * Build a route-backed {@link AiProvider}. Deterministic given a deterministic route\n * (so the FakeProvider mounted behind the route drives the whole client loop in the\n * playground). Never holds a key; never imports the AI SDK.\n */\nexport function createRouteProvider(options: RouteProviderOptions = {}): RouteAiProvider {\n  const endpoint = options.endpoint ?? DEFAULT_AI_ENDPOINT\n  const fetchImpl = options.fetchImpl ?? fetch\n\n  async function post(body: unknown): Promise<Response> {\n    const extra = await resolveHeaders(options.headers)\n    const headers = new Headers(extra)\n    headers.set('content-type', 'application/json')\n    return fetchImpl(endpoint, { method: 'POST', headers, body: JSON.stringify(body) })\n  }\n\n  return {\n    id: options.id ?? 'route',\n    ...(options.model !== undefined ? { model: options.model } : {}),\n    chatTarget: { endpoint, ...(options.headers !== undefined ? { headers: options.headers } : {}) },\n    capabilities: (): AiProviderCapabilities => ({ toolCalling: true, structuredOutput: true }),\n\n    async generateStructured(\n      request: GenerateStructuredRequest,\n    ): Promise<GenerateStructuredResult> {\n      const response = await post({ kind: 'generate', request })\n      if (!response.ok) throw new AiRouteError(response.status, await errorCode(response))\n      return (await response.json()) as GenerateStructuredResult\n    },\n  }\n}\n"]}
+{"version":3,"file":"route-provider.js","sourceRoot":"","sources":["../../../src/lib/ai/route-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAiCjD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAA;AAmB5C;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA2B;IAC3D,MAAM,SAAS,GAAI,QAA4C,EAAE,UAAU,CAAA;IAC3E,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAA;AAC1C,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAiC;IAC7D,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,OAAO,OAAO,EAAE,CAAA;IACnD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B;IACA;IAFX,YACW,MAAc,EACd,IAAY;QAErB,KAAK,CAAC,4BAA4B,MAAM,KAAK,IAAI,GAAG,CAAC,CAAA;QAH5C,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAGrB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAED,KAAK,UAAU,SAAS,CAAC,QAAkB;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAA;QAC3D,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAA;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,gBAAgB,CAAA;IACzB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAgC,EAAE;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,mBAAmB,CAAA;IACxD,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAA;IAE/D,KAAK,UAAU,IAAI,CAAC,IAAa;QAC/B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACnD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;QAClC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;QAC/C,OAAO,SAAS,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,OAAO;QACzB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,UAAU,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAChG,YAAY,EAAE,GAA2B,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;QAE3F,KAAK,CAAC,kBAAkB,CACtB,OAAkC;YAElC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;YAC1D,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;YACpF,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAA;QAC5D,CAAC;KACF,CAAA;AACH,CAAC","sourcesContent":["/**\n * `createRouteProvider` — the CLIENT-side {@link AiProvider} the studio runs in the\n * browser (EC-199). It is a thin proxy that forwards `generateStructured` to the\n * host's mounted {@link createAiRouteHandler} endpoint over `fetch`. The provider\n * KEY never touches the browser: the key-holding {@link createAnthropicProvider}\n * lives only inside the server route; the studio's `defineStudio({ ai: { provider } })`\n * gets this route provider (or the FakeProvider for a keyless playground), so the\n * whole authoring loop — `applyContentWithShape` included — proxies its model calls\n * through the session-gated route while the tools (search / list / apply) execute\n * client-side with the user's own session. It exposes NO `languageModel()` — the\n * conversational loop talks to the route's native chat branch directly (EC-334,\n * `useChat` + `DefaultChatTransport`), not through this provider; the provider\n * only NAMES that target ({@link AiChatTarget}) so endpoint + session headers are\n * configured once.\n *\n * Bundle-safe by construction: this module imports nothing from `ai` / `@ai-sdk/*`\n * (it only uses `fetch`), so it stays off the AI-SDK dependency edge the bundle test\n * pins — the route provider can sit on the studio critical path without pulling the\n * SDK. The capability gate passes: the route only ever fronts a gate-checked provider\n * (validated at the server mount), so the proxy declares both required capabilities.\n */\nimport { guardAiRouteFetch } from './route-fetch'\nimport type {\n  AiProvider,\n  AiProviderCapabilities,\n  GenerateStructuredRequest,\n  GenerateStructuredResult,\n} from './types'\n\n/** How extra request headers are supplied — a static set or a (possibly async) thunk. */\nexport type RouteHeaders =\n  | HeadersInit\n  | (() => HeadersInit | undefined | Promise<HeadersInit | undefined>)\n\nexport interface RouteProviderOptions {\n  /** The mounted route path/URL (default `/api/ai`). */\n  endpoint?: string\n  /**\n   * `fetch` implementation (default the global). Injected in tests. Always wrapped\n   * by {@link guardAiRouteFetch} (EC-514): an answer the route could not have\n   * produced — the SPA shell, a host 404 page — throws `AiRouteNotMountedError`.\n   */\n  fetchImpl?: typeof fetch\n  /**\n   * Extra headers per request — e.g. the studio session token the route's `getSession`\n   * checks. A thunk is re-evaluated on every call so a refreshed token is picked up.\n   */\n  headers?: RouteHeaders\n  /** Provider id recorded in provenance (default `route`). */\n  id?: string\n  /** Model id recorded in provenance (the downstream model, when the host fixes one). */\n  model?: string\n}\n\n/** Default mount path a consuming studio app exposes for {@link createAiRouteHandler}. */\nexport const DEFAULT_AI_ENDPOINT = '/api/ai'\n\n/**\n * The chat transport target (EC-334): where the panel's `useChat` posts its\n * native `{ messages, context }` requests, and which extra headers ride along\n * (the session token thunk). `createRouteProvider` exposes its own endpoint +\n * headers here, so the ONE configured provider is the single source of truth\n * for both the structured proxy and the chat transport.\n */\nexport interface AiChatTarget {\n  endpoint: string\n  headers?: RouteHeaders\n}\n\n/** An {@link AiProvider} that also names the chat transport target it fronts. */\nexport interface RouteAiProvider extends AiProvider {\n  readonly chatTarget: AiChatTarget\n}\n\n/**\n * The chat target behind a configured provider: the route provider's own\n * endpoint + headers, or the default mount path for any other provider (the\n * chat loop always talks to the mounted route — a missing mount fails loud as\n * a visible route error in the panel, never silently).\n */\nexport function resolveChatTarget(provider: AiProvider | null): AiChatTarget {\n  const candidate = (provider as Partial<RouteAiProvider> | null)?.chatTarget\n  if (candidate && typeof candidate.endpoint === 'string') return candidate\n  return { endpoint: DEFAULT_AI_ENDPOINT }\n}\n\nasync function resolveHeaders(headers: RouteHeaders | undefined): Promise<HeadersInit | undefined> {\n  if (typeof headers === 'function') return headers()\n  return headers\n}\n\n/** A structured error thrown when the route rejects (surfaced by the chat UI). */\nexport class AiRouteError extends Error {\n  constructor(\n    readonly status: number,\n    readonly code: string,\n  ) {\n    super(`AI route request failed (${status}: ${code})`)\n    this.name = 'AiRouteError'\n  }\n}\n\nasync function errorCode(response: Response): Promise<string> {\n  try {\n    const body = (await response.json()) as { error?: unknown }\n    return typeof body.error === 'string' ? body.error : 'request-failed'\n  } catch {\n    return 'request-failed'\n  }\n}\n\n/**\n * Build a route-backed {@link AiProvider}. Deterministic given a deterministic route\n * (so the FakeProvider mounted behind the route drives the whole client loop in the\n * playground). Never holds a key; never imports the AI SDK.\n */\nexport function createRouteProvider(options: RouteProviderOptions = {}): RouteAiProvider {\n  const endpoint = options.endpoint ?? DEFAULT_AI_ENDPOINT\n  const fetchImpl = guardAiRouteFetch(options.fetchImpl ?? fetch)\n\n  async function post(body: unknown): Promise<Response> {\n    const extra = await resolveHeaders(options.headers)\n    const headers = new Headers(extra)\n    headers.set('content-type', 'application/json')\n    return fetchImpl(endpoint, { method: 'POST', headers, body: JSON.stringify(body) })\n  }\n\n  return {\n    id: options.id ?? 'route',\n    ...(options.model !== undefined ? { model: options.model } : {}),\n    chatTarget: { endpoint, ...(options.headers !== undefined ? { headers: options.headers } : {}) },\n    capabilities: (): AiProviderCapabilities => ({ toolCalling: true, structuredOutput: true }),\n\n    async generateStructured(\n      request: GenerateStructuredRequest,\n    ): Promise<GenerateStructuredResult> {\n      const response = await post({ kind: 'generate', request })\n      if (!response.ok) throw new AiRouteError(response.status, await errorCode(response))\n      return (await response.json()) as GenerateStructuredResult\n    },\n  }\n}\n"]}

package/dist/lib/ai/route.js

@@ -50,10 +50,13 @@ export function createAiRouteHandler(options) {
     const maxPerMinute = options.limits?.maxRequestsPerMinute;
     const buckets = new Map();
     const projectKey = options.projectKey ?? (() => 'global');
+    // EC-602: the ONLY clock read in this module — injected, never `Date.now()` in
+    // the decision below.
+    const clock = options.now ?? Date.now;
     function rateLimited(key) {
         if (maxPerMinute === undefined || maxPerMinute <= 0)
             return false;
-        const now = Date.now();
+        const now = clock();
         const bucket = buckets.get(key);
         if (!bucket || now - bucket.windowStart >= 60_000) {
             buckets.set(key, { windowStart: now, count: 1 });

package/dist/lib/ai/route.js.map

@@ -1 +1 @@
-{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../src/lib/ai/route.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAE7C,SAAS,YAAY,CAAC,KAAc,EAAE,MAAc;IAClD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAcD,2FAA2F;AAC3F,SAAS,iBAAiB,CAAC,IAAa;IACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,OAAO,GAAI,IAA8B,CAAC,OAAO,CAAA;IACvD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAChE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAiD,CAAA;IAC5E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC5F,OAAO,OAAoC,CAAA;AAC7C,CAAC;AAKD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IAClE,MAAM,QAAQ,GACZ,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC,CAAC,OAAO,CAAC;QACX,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC;YACjF,CAAC,CAAE,OAAoB;YACvB,CAAC,CAAC,IAAI,CAAA;IACZ,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;IAC3C,MAAM,MAAM,GAAG,QAAQ;SACpB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;SACvC,IAAI,CAAC,MAAM,CAAC,CAAA;IACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAA;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAA;IAEzD,SAAS,WAAW,CAAC,GAAW;QAC9B,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,EAAE,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YAChD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;QACjB,OAAO,MAAM,CAAC,KAAK,GAAG,YAAY,CAAA;IACpC,CAAC;IAED,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,gFAAgF;QAChF,+EAA+E;QAC/E,IAAI,OAAyB,CAAA;QAC7B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QAEjE,aAAa;QACb,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAA;QAExF,4CAA4C;QAC5C,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QAEzF,2CAA2C;QAC3C,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QACrD,CAAC;QAED,+EAA+E;QAC/E,iEAAiE;QACjE,IAAK,IAA2B,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;YACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAC/E,GAAG,CACJ,CAAA;YACH,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;gBAClE,OAAO,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAA;YACvD,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,MAAM,WAAW,GAAI,IAA+B,CAAC,QAAQ,CAAA;QAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,YAAY,CACjB;gBACE,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,qEAAqE;aAC/E,EACD,GAAG,CACJ,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAG,oBAAoB,CAAE,IAA8B,CAAC,OAAO,CAAC,CAAA;QAC/E,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAC7E,GAAG,CACJ,CAAA;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACpC,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAA;QAC/D,CAAC;QAED,+EAA+E;QAC/E,6EAA6E;QAC7E,yEAAyE;QACzE,MAAM,EACJ,kBAAkB,EAClB,sBAAsB,EACtB,UAAU,EACV,6BAA6B,EAC7B,iBAAiB,GAClB,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QAEtB,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,QAAQ,CAAA;QACZ,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,kBAAkB,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAA;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,oCAAoC,EAAE,EAC3E,GAAG,CACJ,CAAA;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAA;YACpD,MAAM,MAAM,GAAG,UAAU,CAAC;gBACxB,KAAK;gBACL,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,QAAQ,EAAE,MAAM,sBAAsB,CAAC,QAAQ,CAAC;gBAChD,sEAAsE;gBACtE,0EAA0E;gBAC1E,sEAAsE;gBACtE,oDAAoD;gBACpD,KAAK,EAAE,mBAAmB;aAC3B,CAAC,CAAA;YACF,OAAO,6BAA6B,CAAC;gBACnC,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;aACjF,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAA;QACvD,CAAC;IACH,CAAC,CAAA;AACH,CAAC","sourcesContent":["/**\n * Server-route factory (EC-331): the session-gated endpoint the consuming studio\n * app mounts. Key custody = host route (never the browser, never Convex): the\n * `provider` holds the host-env key and this handler is a THIN model proxy — NO data\n * access, NO service credentials, NO server-side tool execution.\n *\n * Framework-agnostic on purpose: it returns a Web `Request → Response` handler the\n * host wires into whatever server entry it has (`createAiDevPlugin` in dev,\n * `toNodeHandler` on a Vercel Node function, any fetch handler).\n *\n * Session-gated: `getSession` (host-wired, reading its own auth — this module never\n * touches `lib/auth`) must return a session for authenticated callers; anonymous\n * callers are rejected with 401 BEFORE any stream byte. Plus a soft, in-memory\n * per-project rate counter (spend guard) — also the backstop for the SDK's\n * client-driven tool-call continuations, each of which is a fresh request here.\n *\n * The route serves TWO model operations — both thin proxies, neither with any data\n * access:\n *   - `{ kind: 'generate', request }` → `provider.generateStructured` (JSON) — the\n *     proxy `applyContentWithShape` / `translateDocument` run CLIENT-side against,\n *     so the key never touches the browser;\n *   - `{ messages: UIMessage[], context? }` (EC-334, kind-less — the shape the AI\n *     SDK's `DefaultChatTransport` posts) → the SDK's native streaming chat\n *     protocol: `validateUIMessages` → `streamText` over\n *     `provider.languageModel()` with {@link chatToolDefinitions} declared WITHOUT\n *     `execute` (every tool call forwards to the client, which executes it against\n *     the operations layer with the user's own session) →\n *     `createUIMessageStreamResponse` + `toUIMessageStream` (the non-deprecated\n *     pair — `result.toUIMessageStreamResponse()` dies in SDK v8). The `system`\n *     prompt is assembled from the request's `context` sections; conversation\n *     history rides natively in `messages`.\n *\n * BREAKING (EC-334, ratified): the legacy `{ kind: 'chat', messages:\n * AiChatMessage[] }` wire is gone — route factory and client ship lockstep in\n * `@elytracms/studio`, so consumers re-mount the same factory on upgrade.\n */\nimport type { AiRouteHandler, AiRouteHandlerOptions, AiSession, GenerateStructuredRequest } from './types'\nimport { chatToolDefinitions } from './tools'\n\nfunction jsonResponse(value: unknown, status: number): Response {\n  return new Response(JSON.stringify(value), {\n    status,\n    headers: { 'content-type': 'application/json' },\n  })\n}\n\ninterface RateBucket {\n  windowStart: number\n  count: number\n}\n\n/**\n * The wire discriminator for the structured-generation branch. The native chat\n * branch (EC-334) is deliberately kind-less: the SDK's `DefaultChatTransport`\n * posts `{ messages, … }` with no `kind`.\n */\nexport type AiRouteKind = 'generate'\n\n/** Structurally validate a {@link GenerateStructuredRequest}, or `null` when malformed. */\nfunction parseGenerateBody(body: unknown): GenerateStructuredRequest | null {\n  if (typeof body !== 'object' || body === null) return null\n  const request = (body as { request?: unknown }).request\n  if (typeof request !== 'object' || request === null) return null\n  const { prompt, schema } = request as { prompt?: unknown; schema?: unknown }\n  if (typeof prompt !== 'string' || typeof schema !== 'object' || schema === null) return null\n  return request as GenerateStructuredRequest\n}\n\n/** The outcome of folding the request `context` into a system prompt. */\nexport type AssembledSystem = { ok: true; system?: string } | { ok: false }\n\n/**\n * Fold the request-body `context` into the system prompt (EC-334). The client sends\n * `context` as one string or ordered string sections (collections-catalog summary,\n * client-resolved knowledge, EC-378's current-document block) — the route only\n * ASSEMBLES them; it resolves no data itself (zero-data-access proxy). Malformed\n * context is a structural 400, never silently dropped (validation-first).\n */\nexport function assembleSystemPrompt(context: unknown): AssembledSystem {\n  if (context === undefined || context === null) return { ok: true }\n  const sections =\n    typeof context === 'string'\n      ? [context]\n      : Array.isArray(context) && context.every((section) => typeof section === 'string')\n        ? (context as string[])\n        : null\n  if (sections === null) return { ok: false }\n  const system = sections\n    .map((section) => section.trim())\n    .filter((section) => section.length > 0)\n    .join('\\n\\n')\n  return { ok: true, ...(system.length > 0 ? { system } : {}) }\n}\n\n/**\n * Build the mounted route handler. The returned function is a plain\n * `(Request) => Promise<Response>` — session-gated, soft-rate-limited, and a thin\n * proxy to the provider. Never throws to the caller: every failure is a structured\n * JSON response with an appropriate status.\n */\nexport function createAiRouteHandler(options: AiRouteHandlerOptions): AiRouteHandler {\n  const maxPerMinute = options.limits?.maxRequestsPerMinute\n  const buckets = new Map<string, RateBucket>()\n  const projectKey = options.projectKey ?? (() => 'global')\n\n  function rateLimited(key: string): boolean {\n    if (maxPerMinute === undefined || maxPerMinute <= 0) return false\n    const now = Date.now()\n    const bucket = buckets.get(key)\n    if (!bucket || now - bucket.windowStart >= 60_000) {\n      buckets.set(key, { windowStart: now, count: 1 })\n      return false\n    }\n    bucket.count += 1\n    return bucket.count > maxPerMinute\n  }\n\n  return async (request: Request): Promise<Response> => {\n    // 1. Session gate — reject anonymous callers (the route holds spend, not data).\n    //    Position is FROZEN: the 401 must precede any stream byte (EC-371/EC-334).\n    let session: AiSession | null\n    try {\n      session = await options.getSession(request)\n    } catch {\n      return jsonResponse({ error: 'unauthorized' }, 401)\n    }\n    if (!session) return jsonResponse({ error: 'unauthorized' }, 401)\n\n    // 2. Method.\n    if (request.method !== 'POST') return jsonResponse({ error: 'method-not-allowed' }, 405)\n\n    // 3. Soft per-project rate / spend counter.\n    if (rateLimited(projectKey(request))) return jsonResponse({ error: 'rate-limited' }, 429)\n\n    // 4. Body → the requested model operation.\n    let body: unknown\n    try {\n      body = await request.json()\n    } catch {\n      return jsonResponse({ error: 'invalid-json' }, 400)\n    }\n    if (typeof body !== 'object' || body === null) {\n      return jsonResponse({ error: 'invalid-json' }, 400)\n    }\n\n    // 5a. Structured generation — the thin proxy that lets `applyContentWithShape`\n    //     run client-side without the key ever reaching the browser.\n    if ((body as { kind?: unknown }).kind === 'generate') {\n      const generate = parseGenerateBody(body)\n      if (!generate) {\n        return jsonResponse(\n          { error: 'invalid-request', message: 'expected { kind: \"generate\", request }' },\n          400,\n        )\n      }\n      try {\n        const result = await options.provider.generateStructured(generate)\n        return jsonResponse(result, 200)\n      } catch {\n        return jsonResponse({ error: 'provider-error' }, 502)\n      }\n    }\n\n    // 5b. Native chat branch (EC-334): `{ messages: UIMessage[], context? }`.\n    const rawMessages = (body as { messages?: unknown }).messages\n    if (!Array.isArray(rawMessages) || rawMessages.length === 0) {\n      return jsonResponse(\n        {\n          error: 'invalid-request',\n          message: 'expected { kind: \"generate\", request } or { messages: UIMessage[] }',\n        },\n        400,\n      )\n    }\n\n    const assembled = assembleSystemPrompt((body as { context?: unknown }).context)\n    if (!assembled.ok) {\n      return jsonResponse(\n        { error: 'invalid-request', message: 'context must be a string or string[]' },\n        400,\n      )\n    }\n\n    if (!options.provider.languageModel) {\n      return jsonResponse({ error: 'provider-cannot-stream' }, 501)\n    }\n\n    // The SDK loads lazily INSIDE the handler (the anthropic-provider discipline):\n    // the client-imported barrel re-exports this module, and a static edge would\n    // put the AI SDK on the studio critical path (pinned in bundle.test.ts).\n    const {\n      validateUIMessages,\n      convertToModelMessages,\n      streamText,\n      createUIMessageStreamResponse,\n      toUIMessageStream,\n    } = await import('ai')\n\n    // Structural UIMessage validation (id/role/parts). Tool parts validate by\n    // shape — deep input validation belongs to the client executor (slice 2).\n    let messages\n    try {\n      messages = await validateUIMessages({ messages: rawMessages })\n    } catch {\n      return jsonResponse(\n        { error: 'invalid-request', message: 'expected { messages: UIMessage[] }' },\n        400,\n      )\n    }\n\n    try {\n      const model = await options.provider.languageModel()\n      const result = streamText({\n        model,\n        ...(assembled.system !== undefined ? { system: assembled.system } : {}),\n        messages: await convertToModelMessages(messages),\n        // No `execute` on any tool — the SDK forwards each call to the client\n        // (ratified trust boundary). Continuation is therefore client-driven: one\n        // tool round-trip per REQUEST, throttled by the rate limit above; the\n        // per-turn step cap lands client-side with slice 2.\n        tools: chatToolDefinitions,\n      })\n      return createUIMessageStreamResponse({\n        stream: toUIMessageStream({ stream: result.stream, originalMessages: messages }),\n      })\n    } catch {\n      return jsonResponse({ error: 'provider-error' }, 502)\n    }\n  }\n}\n"]}
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../src/lib/ai/route.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAE7C,SAAS,YAAY,CAAC,KAAc,EAAE,MAAc;IAClD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAcD,2FAA2F;AAC3F,SAAS,iBAAiB,CAAC,IAAa;IACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,OAAO,GAAI,IAA8B,CAAC,OAAO,CAAA;IACvD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAChE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAiD,CAAA;IAC5E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC5F,OAAO,OAAoC,CAAA;AAC7C,CAAC;AAKD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IAClE,MAAM,QAAQ,GACZ,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC,CAAC,OAAO,CAAC;QACX,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC;YACjF,CAAC,CAAE,OAAoB;YACvB,CAAC,CAAC,IAAI,CAAA;IACZ,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;IAC3C,MAAM,MAAM,GAAG,QAAQ;SACpB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;SACvC,IAAI,CAAC,MAAM,CAAC,CAAA;IACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAA;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAA;IACzD,+EAA+E;IAC/E,sBAAsB;IACtB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IAErC,SAAS,WAAW,CAAC,GAAW;QAC9B,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACjE,MAAM,GAAG,GAAG,KAAK,EAAE,CAAA;QACnB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,EAAE,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YAChD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;QACjB,OAAO,MAAM,CAAC,KAAK,GAAG,YAAY,CAAA;IACpC,CAAC;IAED,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,gFAAgF;QAChF,+EAA+E;QAC/E,IAAI,OAAyB,CAAA;QAC7B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QAEjE,aAAa;QACb,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAA;QAExF,4CAA4C;QAC5C,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QAEzF,2CAA2C;QAC3C,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QACrD,CAAC;QAED,+EAA+E;QAC/E,iEAAiE;QACjE,IAAK,IAA2B,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;YACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAC/E,GAAG,CACJ,CAAA;YACH,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;gBAClE,OAAO,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAA;YACvD,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,MAAM,WAAW,GAAI,IAA+B,CAAC,QAAQ,CAAA;QAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,YAAY,CACjB;gBACE,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,qEAAqE;aAC/E,EACD,GAAG,CACJ,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAG,oBAAoB,CAAE,IAA8B,CAAC,OAAO,CAAC,CAAA;QAC/E,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAC7E,GAAG,CACJ,CAAA;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACpC,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAA;QAC/D,CAAC;QAED,+EAA+E;QAC/E,6EAA6E;QAC7E,yEAAyE;QACzE,MAAM,EACJ,kBAAkB,EAClB,sBAAsB,EACtB,UAAU,EACV,6BAA6B,EAC7B,iBAAiB,GAClB,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QAEtB,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,QAAQ,CAAA;QACZ,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,kBAAkB,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAA;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,oCAAoC,EAAE,EAC3E,GAAG,CACJ,CAAA;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAA;YACpD,MAAM,MAAM,GAAG,UAAU,CAAC;gBACxB,KAAK;gBACL,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,QAAQ,EAAE,MAAM,sBAAsB,CAAC,QAAQ,CAAC;gBAChD,sEAAsE;gBACtE,0EAA0E;gBAC1E,sEAAsE;gBACtE,oDAAoD;gBACpD,KAAK,EAAE,mBAAmB;aAC3B,CAAC,CAAA;YACF,OAAO,6BAA6B,CAAC;gBACnC,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;aACjF,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAA;QACvD,CAAC;IACH,CAAC,CAAA;AACH,CAAC","sourcesContent":["/**\n * Server-route factory (EC-331): the session-gated endpoint the consuming studio\n * app mounts. Key custody = host route (never the browser, never Convex): the\n * `provider` holds the host-env key and this handler is a THIN model proxy — NO data\n * access, NO service credentials, NO server-side tool execution.\n *\n * Framework-agnostic on purpose: it returns a Web `Request → Response` handler the\n * host wires into whatever server entry it has (`createAiDevPlugin` in dev,\n * `toNodeHandler` on a Vercel Node function, any fetch handler).\n *\n * Session-gated: `getSession` (host-wired, reading its own auth — this module never\n * touches `lib/auth`) must return a session for authenticated callers; anonymous\n * callers are rejected with 401 BEFORE any stream byte. Plus a soft, in-memory\n * per-project rate counter (spend guard) — also the backstop for the SDK's\n * client-driven tool-call continuations, each of which is a fresh request here.\n *\n * The route serves TWO model operations — both thin proxies, neither with any data\n * access:\n *   - `{ kind: 'generate', request }` → `provider.generateStructured` (JSON) — the\n *     proxy `applyContentWithShape` / `translateDocument` run CLIENT-side against,\n *     so the key never touches the browser;\n *   - `{ messages: UIMessage[], context? }` (EC-334, kind-less — the shape the AI\n *     SDK's `DefaultChatTransport` posts) → the SDK's native streaming chat\n *     protocol: `validateUIMessages` → `streamText` over\n *     `provider.languageModel()` with {@link chatToolDefinitions} declared WITHOUT\n *     `execute` (every tool call forwards to the client, which executes it against\n *     the operations layer with the user's own session) →\n *     `createUIMessageStreamResponse` + `toUIMessageStream` (the non-deprecated\n *     pair — `result.toUIMessageStreamResponse()` dies in SDK v8). The `system`\n *     prompt is assembled from the request's `context` sections; conversation\n *     history rides natively in `messages`.\n *\n * BREAKING (EC-334, ratified): the legacy `{ kind: 'chat', messages:\n * AiChatMessage[] }` wire is gone — route factory and client ship lockstep in\n * `@elytracms/studio`, so consumers re-mount the same factory on upgrade.\n */\nimport type { AiRouteHandler, AiRouteHandlerOptions, AiSession, GenerateStructuredRequest } from './types'\nimport { chatToolDefinitions } from './tools'\n\nfunction jsonResponse(value: unknown, status: number): Response {\n  return new Response(JSON.stringify(value), {\n    status,\n    headers: { 'content-type': 'application/json' },\n  })\n}\n\ninterface RateBucket {\n  windowStart: number\n  count: number\n}\n\n/**\n * The wire discriminator for the structured-generation branch. The native chat\n * branch (EC-334) is deliberately kind-less: the SDK's `DefaultChatTransport`\n * posts `{ messages, … }` with no `kind`.\n */\nexport type AiRouteKind = 'generate'\n\n/** Structurally validate a {@link GenerateStructuredRequest}, or `null` when malformed. */\nfunction parseGenerateBody(body: unknown): GenerateStructuredRequest | null {\n  if (typeof body !== 'object' || body === null) return null\n  const request = (body as { request?: unknown }).request\n  if (typeof request !== 'object' || request === null) return null\n  const { prompt, schema } = request as { prompt?: unknown; schema?: unknown }\n  if (typeof prompt !== 'string' || typeof schema !== 'object' || schema === null) return null\n  return request as GenerateStructuredRequest\n}\n\n/** The outcome of folding the request `context` into a system prompt. */\nexport type AssembledSystem = { ok: true; system?: string } | { ok: false }\n\n/**\n * Fold the request-body `context` into the system prompt (EC-334). The client sends\n * `context` as one string or ordered string sections (collections-catalog summary,\n * client-resolved knowledge, EC-378's current-document block) — the route only\n * ASSEMBLES them; it resolves no data itself (zero-data-access proxy). Malformed\n * context is a structural 400, never silently dropped (validation-first).\n */\nexport function assembleSystemPrompt(context: unknown): AssembledSystem {\n  if (context === undefined || context === null) return { ok: true }\n  const sections =\n    typeof context === 'string'\n      ? [context]\n      : Array.isArray(context) && context.every((section) => typeof section === 'string')\n        ? (context as string[])\n        : null\n  if (sections === null) return { ok: false }\n  const system = sections\n    .map((section) => section.trim())\n    .filter((section) => section.length > 0)\n    .join('\\n\\n')\n  return { ok: true, ...(system.length > 0 ? { system } : {}) }\n}\n\n/**\n * Build the mounted route handler. The returned function is a plain\n * `(Request) => Promise<Response>` — session-gated, soft-rate-limited, and a thin\n * proxy to the provider. Never throws to the caller: every failure is a structured\n * JSON response with an appropriate status.\n */\nexport function createAiRouteHandler(options: AiRouteHandlerOptions): AiRouteHandler {\n  const maxPerMinute = options.limits?.maxRequestsPerMinute\n  const buckets = new Map<string, RateBucket>()\n  const projectKey = options.projectKey ?? (() => 'global')\n  // EC-602: the ONLY clock read in this module — injected, never `Date.now()` in\n  // the decision below.\n  const clock = options.now ?? Date.now\n\n  function rateLimited(key: string): boolean {\n    if (maxPerMinute === undefined || maxPerMinute <= 0) return false\n    const now = clock()\n    const bucket = buckets.get(key)\n    if (!bucket || now - bucket.windowStart >= 60_000) {\n      buckets.set(key, { windowStart: now, count: 1 })\n      return false\n    }\n    bucket.count += 1\n    return bucket.count > maxPerMinute\n  }\n\n  return async (request: Request): Promise<Response> => {\n    // 1. Session gate — reject anonymous callers (the route holds spend, not data).\n    //    Position is FROZEN: the 401 must precede any stream byte (EC-371/EC-334).\n    let session: AiSession | null\n    try {\n      session = await options.getSession(request)\n    } catch {\n      return jsonResponse({ error: 'unauthorized' }, 401)\n    }\n    if (!session) return jsonResponse({ error: 'unauthorized' }, 401)\n\n    // 2. Method.\n    if (request.method !== 'POST') return jsonResponse({ error: 'method-not-allowed' }, 405)\n\n    // 3. Soft per-project rate / spend counter.\n    if (rateLimited(projectKey(request))) return jsonResponse({ error: 'rate-limited' }, 429)\n\n    // 4. Body → the requested model operation.\n    let body: unknown\n    try {\n      body = await request.json()\n    } catch {\n      return jsonResponse({ error: 'invalid-json' }, 400)\n    }\n    if (typeof body !== 'object' || body === null) {\n      return jsonResponse({ error: 'invalid-json' }, 400)\n    }\n\n    // 5a. Structured generation — the thin proxy that lets `applyContentWithShape`\n    //     run client-side without the key ever reaching the browser.\n    if ((body as { kind?: unknown }).kind === 'generate') {\n      const generate = parseGenerateBody(body)\n      if (!generate) {\n        return jsonResponse(\n          { error: 'invalid-request', message: 'expected { kind: \"generate\", request }' },\n          400,\n        )\n      }\n      try {\n        const result = await options.provider.generateStructured(generate)\n        return jsonResponse(result, 200)\n      } catch {\n        return jsonResponse({ error: 'provider-error' }, 502)\n      }\n    }\n\n    // 5b. Native chat branch (EC-334): `{ messages: UIMessage[], context? }`.\n    const rawMessages = (body as { messages?: unknown }).messages\n    if (!Array.isArray(rawMessages) || rawMessages.length === 0) {\n      return jsonResponse(\n        {\n          error: 'invalid-request',\n          message: 'expected { kind: \"generate\", request } or { messages: UIMessage[] }',\n        },\n        400,\n      )\n    }\n\n    const assembled = assembleSystemPrompt((body as { context?: unknown }).context)\n    if (!assembled.ok) {\n      return jsonResponse(\n        { error: 'invalid-request', message: 'context must be a string or string[]' },\n        400,\n      )\n    }\n\n    if (!options.provider.languageModel) {\n      return jsonResponse({ error: 'provider-cannot-stream' }, 501)\n    }\n\n    // The SDK loads lazily INSIDE the handler (the anthropic-provider discipline):\n    // the client-imported barrel re-exports this module, and a static edge would\n    // put the AI SDK on the studio critical path (pinned in bundle.test.ts).\n    const {\n      validateUIMessages,\n      convertToModelMessages,\n      streamText,\n      createUIMessageStreamResponse,\n      toUIMessageStream,\n    } = await import('ai')\n\n    // Structural UIMessage validation (id/role/parts). Tool parts validate by\n    // shape — deep input validation belongs to the client executor (slice 2).\n    let messages\n    try {\n      messages = await validateUIMessages({ messages: rawMessages })\n    } catch {\n      return jsonResponse(\n        { error: 'invalid-request', message: 'expected { messages: UIMessage[] }' },\n        400,\n      )\n    }\n\n    try {\n      const model = await options.provider.languageModel()\n      const result = streamText({\n        model,\n        ...(assembled.system !== undefined ? { system: assembled.system } : {}),\n        messages: await convertToModelMessages(messages),\n        // No `execute` on any tool — the SDK forwards each call to the client\n        // (ratified trust boundary). Continuation is therefore client-driven: one\n        // tool round-trip per REQUEST, throttled by the rate limit above; the\n        // per-turn step cap lands client-side with slice 2.\n        tools: chatToolDefinitions,\n      })\n      return createUIMessageStreamResponse({\n        stream: toUIMessageStream({ stream: result.stream, originalMessages: messages }),\n      })\n    } catch {\n      return jsonResponse({ error: 'provider-error' }, 502)\n    }\n  }\n}\n"]}

package/dist/lib/ai/shape.d.ts

@@ -40,7 +40,8 @@ export interface BuildTargetShapeInput {
 }
 /**
  * Build the leash-aware target shape from a collection + candidates. Deterministic;
- * never throws. Reuses `collectionJsonSchema` as the base, then rewrites relations /
- * rich text and strips excluded fields.
+ * never throws. Reuses `collectionJsonSchema` as the base (its `required` list), then
+ * gives every property its writer form (EC-556) or its id-enum leash, and strips
+ * excluded fields.
  */
 export declare function buildTargetShape(input: BuildTargetShapeInput): TargetShape;

package/dist/lib/ai/shape.js

@@ -42,27 +42,16 @@
  * accepts): a `date` property is `type: 'string'` + `format: 'date-time'` rather than
  * the `['string','number']` union the general projection carries, because the model is
  * asked to author an ISO instant (EC-472) and some providers reject a union `type`.
+ *
+ * EC-556 — the projection is VALIDATOR-facing (the value at rest: asset/relation
+ * envelopes, the v2 rich-text object). Every property here is its WRITER form
+ * (`writerFieldSchema`), derived from that projection at every depth — a bare asset
+ * id, a `{ collection, id }` reference, a markdown string — so an asset, relation or
+ * rich-text SUBFIELD of an `object` is told the same form as a top-level one. The
+ * top-level relation/asset id enums (EC-381) override the writer form there.
  */
-import { collectionJsonSchema, fieldJsonSchema, resolveLabel } from '@elytracms/core/cms-core';
-import { MARKDOWN_PROSE_DESCRIPTION } from '@elytracms/core/rich-text';
-import { constraintSentence, stripRedundantPattern, toModelFacingSchema } from './constraints.js';
-/**
- * A rich-text field's model-facing schema (EC-379): a MARKDOWN string, MERGED over
- * the field's own constraint projection (EC-473 — it used to replace it, silently
- * dropping a declared `min`/`max`/`pattern`). The description carries the allowed
- * subset (from the engine converter — one source of truth), so the model has
- * something concrete to aim at; the engine converts the markdown into the
- * `{ version, doc }` storage envelope at proposal-build time and rejects
- * out-of-subset constructs with explicit issues.
- */
-function richTextMarkdownSchema(field) {
-    const constraints = stripRedundantPattern(fieldJsonSchema(field));
-    return {
-        ...constraints,
-        type: 'string',
-        description: `Rich text, written as ${MARKDOWN_PROSE_DESCRIPTION} Write genuine, publishable prose.`,
-    };
-}
+import { collectionJsonSchema, resolveLabel } from '@elytracms/core/cms-core';
+import { constraintSentence, toModelFacingSchema, writerFieldSchema } from './constraints.js';
 /**
  * A field's model-facing description: resolved label + optional `ai.hint` + the
  * constraint clause (EC-473). The constraints are stated in PROSE because that is
@@ -78,8 +67,9 @@ function describe(field, locale) {
 }
 /**
  * Build the leash-aware target shape from a collection + candidates. Deterministic;
- * never throws. Reuses `collectionJsonSchema` as the base, then rewrites relations /
- * rich text and strips excluded fields.
+ * never throws. Reuses `collectionJsonSchema` as the base (its `required` list), then
+ * gives every property its writer form (EC-556) or its id-enum leash, and strips
+ * excluded fields.
  */
 export function buildTargetShape(input) {
     const base = collectionJsonSchema(input.collection);
@@ -145,8 +135,10 @@ export function buildTargetShape(input) {
             properties[field.name] = field.multiple ? { type: 'array', items: idSchema } : idSchema;
             assetFields.push({ fieldName: field.name, multiple: field.multiple, candidateIds: ids });
         }
-        else if (field.type === 'richText') {
-            properties[field.name] = richTextMarkdownSchema(field);
+        else {
+            // EC-556: the writer form at every depth (rich text → markdown, EC-379 / D2;
+            // nested asset / relation → the bare forms the write-time lens wraps).
+            properties[field.name] = writerFieldSchema(field);
         }
         const prop = properties[field.name];
         if (prop) {

package/dist/lib/ai/shape.js.map

@@ -1 +1 @@
-{"version":3,"file":"shape.js","sourceRoot":"","sources":["../../../src/lib/ai/shape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAE9F,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AACtE,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AA6C9F;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAC,KAAe;IAC7C,MAAM,WAAW,GAAG,qBAAqB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAA;IACjE,OAAO;QACL,GAAG,WAAW;QACd,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,yBAAyB,0BAA0B,oCAAoC;KACrG,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,KAAe,EAAE,MAAe;IAChD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAA;IACnE,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,EAAE,IAAI,CAAA;IAC3B,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1D,CAAA;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACnD,MAAM,UAAU,GAA+B;QAC7C,GAAG,CAAE,IAAI,CAAC,UAAyC,IAAI,EAAE,CAAC;KAC3D,CAAA;IACD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,eAAe,GAAa,EAAE,CAAA;IACpC,MAAM,cAAc,GAA0B,EAAE,CAAA;IAChD,MAAM,WAAW,GAAuB,EAAE,CAAA;IAE1C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,SAAS;YAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAErD,IAAI,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACzB,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC7B,SAAQ;QACV,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;YACvD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,4EAA4E;gBAC5E,2DAA2D;gBAC3D,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC7B,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACvC,MAAM,KAAK,GAAG,UAAU;iBACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBACrD,IAAI,CAAC,IAAI,CAAC,CAAA;YACb,MAAM,QAAQ,GAAe;gBAC3B,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,GAAG;gBACT,WAAW,EAAE,kBAAkB,KAAK,EAAE;aACvC,CAAA;YACD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;YACvF,cAAc,CAAC,IAAI,CAAC;gBAClB,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,YAAY,EAAE,GAAG;aAClB,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAClC,2EAA2E;YAC3E,sEAAsE;YACtE,2EAA2E;YAC3E,qEAAqE;YACrE,MAAM,UAAU,GAAG,KAAK,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;YAC5D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC7B,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACvC,MAAM,KAAK,GAAG,UAAU;iBACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBACrD,IAAI,CAAC,IAAI,CAAC,CAAA;YACb,MAAM,QAAQ,GAAe;gBAC3B,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,GAAG;gBACT,WAAW,EAAE,gDAAgD,KAAK,6BAA6B;aAChG,CAAA;YACD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;YACvF,WAAW,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1F,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACrC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAA;QACxD,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,IAAI,EAAE,CAAC;YACT,2EAA2E;YAC3E,8EAA8E;YAC9E,4EAA4E;YAC5E,yCAAyC;YACzC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;YAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;YAC1C,8EAA8E;YAC9E,8EAA8E;YAC9E,4CAA4C;YAC5C,MAAM,IAAI,GAAe,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAA;YACnE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;gBACpF,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;gBAC7C,IAAI,CAAC,WAAW;oBACd,QAAQ,KAAK,SAAS;wBACpB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,WAAW,KAAK,SAAS;4BACzB,CAAC,CAAC,GAAG,QAAQ,MAAM,WAAW,EAAE;4BAChC,CAAC,CAAC,QAAQ,CAAA;YAClB,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAqB,CAAC,CAAC,CAAC,EAAE,CAAA;IAClF,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;IAE/F,MAAM,MAAM,GAAe;QACzB,IAAI,EAAE,QAAQ;QACd,UAAU;QACV,oBAAoB,EAAE,KAAK;QAC3B,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,CAAA;AAC3E,CAAC","sourcesContent":["/**\n * Target-shape derivation for `applyContentWithShape` (EC-331).\n *\n * Reuses the existing collection→JSON-Schema derivation (`collectionJsonSchema`,\n * cms-core) rather than writing a new one, then applies the three leashes the AI\n * engine adds on top:\n *\n *  - `ai.exclude` fields are removed entirely (the model never sees them → cannot\n *    write them).\n *  - relation fields become an ENUM over the provided candidate ids (or are omitted\n *    when no candidates exist) — so a hallucinated relation id is not representable\n *    as valid structured output.\n *  - asset/image fields become an ENUM over the searched library asset ids (or are\n *    omitted when none were searched) — EC-381, the SAME leash as relations: a\n *    proposed asset id must be a real, `listAssets`-returned library asset, and a\n *    create shape with no searched assets simply has no asset property (empty beats\n *    wrong; the assistant never generates or uploads).\n *  - rich-text fields are MARKDOWN STRINGS (EC-379): the description names the\n *    allowed subset, and the engine converts md → the `{ version, doc }` storage\n *    envelope at proposal-build time. The field's `allow` config leashes component\n *    EMBEDS only — markdown cannot express an embed, so the leash is satisfied by\n *    construction (and still enforced downstream by `validateRichTextEmbeds`).\n *\n * Localized fields stay flat in the shape (the model authors one locale at a time);\n * the engine routes their values under `localized[locale]`.\n *\n * EC-473 — the shape now consumes the ONE constraint projection, so a rule declared\n * in config actually reaches the model:\n *\n *  - `collectionJsonSchema` merges declarative rules with the fragment derived from\n *    a schema-form `validation.validate`, so `{ min: 2 }` and `z.string().min(2)`\n *    arrive identically (and a declared DATE RANGE arrives at all — it previously\n *    reached no consumer whatsoever);\n *  - a rich-text field no longer OVERWRITES its constraints: the markdown schema is\n *    merged over them instead of replacing them (measured drift, EC-474 §2);\n *  - a `pattern` is dropped wherever a `format` explains the same thing (a\n *    200-character email regex teaches a model nothing and costs real tokens);\n *  - a field whose projection is knowingly partial (`schemaComplete: false`) SAYS SO\n *    in its description rather than presenting the partial rule as the whole rule.\n *\n * EC-505 — one further narrowing of what the model is TOLD (never of what the engine\n * accepts): a `date` property is `type: 'string'` + `format: 'date-time'` rather than\n * the `['string','number']` union the general projection carries, because the model is\n * asked to author an ISO instant (EC-472) and some providers reject a union `type`.\n */\nimport { collectionJsonSchema, fieldJsonSchema, resolveLabel } from '@elytracms/core/cms-core'\nimport type { CollectionDef, FieldDef, JsonSchema } from '@elytracms/core/cms-core'\nimport { MARKDOWN_PROSE_DESCRIPTION } from '@elytracms/core/rich-text'\nimport { constraintSentence, stripRedundantPattern, toModelFacingSchema } from './constraints'\nimport type { AssetCandidates, RelationCandidates } from './types'\n\n/** A relation field's resolved candidate set — how the engine maps ids → reference envelopes. */\nexport interface TargetRelationField {\n  fieldName: string\n  /** The relation's target collection id. */\n  target: string\n  multiple: boolean\n  /** The allowed candidate ids (the enum the model chose from). */\n  candidateIds: string[]\n}\n\n/** An asset field's resolved candidate set — how the engine maps ids → asset envelopes (EC-381). */\nexport interface TargetAssetField {\n  fieldName: string\n  multiple: boolean\n  /** The allowed library asset ids (the enum the model chose from). */\n  candidateIds: string[]\n}\n\n/** The derived target shape + the metadata the engine needs to post-process the output. */\nexport interface TargetShape {\n  /** The JSON Schema the structured output must satisfy. */\n  schema: JsonSchema\n  /** Field names removed by `ai.exclude` (untouchable). */\n  excluded: string[]\n  /** Field names whose values route under `localized[locale]`. */\n  localizedFields: string[]\n  /** Relation fields with their candidate enums. */\n  relationFields: TargetRelationField[]\n  /** Asset fields with their candidate enums (EC-381). */\n  assetFields: TargetAssetField[]\n}\n\nexport interface BuildTargetShapeInput {\n  collection: CollectionDef\n  /** Relation candidate ids by field — a relation field with none is omitted from the shape. */\n  candidates?: RelationCandidates\n  /** Asset candidate ids by field — an asset field with none is omitted from the shape (EC-381). */\n  assetCandidates?: AssetCandidates\n  /** UI locale for resolving field labels into descriptions. */\n  locale?: string\n}\n\n/**\n * A rich-text field's model-facing schema (EC-379): a MARKDOWN string, MERGED over\n * the field's own constraint projection (EC-473 — it used to replace it, silently\n * dropping a declared `min`/`max`/`pattern`). The description carries the allowed\n * subset (from the engine converter — one source of truth), so the model has\n * something concrete to aim at; the engine converts the markdown into the\n * `{ version, doc }` storage envelope at proposal-build time and rejects\n * out-of-subset constructs with explicit issues.\n */\nfunction richTextMarkdownSchema(field: FieldDef): JsonSchema {\n  const constraints = stripRedundantPattern(fieldJsonSchema(field))\n  return {\n    ...constraints,\n    type: 'string',\n    description: `Rich text, written as ${MARKDOWN_PROSE_DESCRIPTION} Write genuine, publishable prose.`,\n  }\n}\n\n/**\n * A field's model-facing description: resolved label + optional `ai.hint` + the\n * constraint clause (EC-473). The constraints are stated in PROSE because that is\n * what a model acts on — the same facts also ride as JSON-Schema keywords for the\n * structured-output validator, which is a different reader.\n */\nfunction describe(field: FieldDef, locale?: string): string | undefined {\n  const label = resolveLabel(field.form?.label, locale) ?? field.name\n  const hint = field.ai?.hint\n  const constraints = constraintSentence(field)\n  const parts = [label, hint, constraints].filter(\n    (p): p is string => typeof p === 'string' && p.length > 0,\n  )\n  return parts.length > 0 ? parts.join(' — ') : undefined\n}\n\n/**\n * Build the leash-aware target shape from a collection + candidates. Deterministic;\n * never throws. Reuses `collectionJsonSchema` as the base, then rewrites relations /\n * rich text and strips excluded fields.\n */\nexport function buildTargetShape(input: BuildTargetShapeInput): TargetShape {\n  const base = collectionJsonSchema(input.collection)\n  const properties: Record<string, JsonSchema> = {\n    ...((base.properties as Record<string, JsonSchema>) ?? {}),\n  }\n  const excluded: string[] = []\n  const localizedFields: string[] = []\n  const relationFields: TargetRelationField[] = []\n  const assetFields: TargetAssetField[] = []\n\n  for (const field of input.collection.fields) {\n    if (field.localized) localizedFields.push(field.name)\n\n    if (field.ai?.exclude) {\n      excluded.push(field.name)\n      delete properties[field.name]\n      continue\n    }\n\n    if (field.type === 'relation') {\n      const candidates = input.candidates?.[field.name] ?? []\n      if (candidates.length === 0) {\n        // No candidate ids ⇒ omit the field: the model cannot emit a relation value\n        // at all, so a hallucinated id is structurally impossible.\n        delete properties[field.name]\n        continue\n      }\n      const ids = candidates.map((c) => c.id)\n      const label = candidates\n        .map((c) => (c.label ? `${c.id} (${c.label})` : c.id))\n        .join(', ')\n      const idSchema: JsonSchema = {\n        type: 'string',\n        enum: ids,\n        description: `Choose one of: ${label}`,\n      }\n      properties[field.name] = field.multiple ? { type: 'array', items: idSchema } : idSchema\n      relationFields.push({\n        fieldName: field.name,\n        target: field.target,\n        multiple: field.multiple,\n        candidateIds: ids,\n      })\n    } else if (field.type === 'asset') {\n      // EC-381 — same leash as relations: an asset field is an enum over the ids\n      // the model actually searched in the media library (`listAssets`). No\n      // searched assets ⇒ omit the field, so the proposal simply leaves it empty\n      // (an invented / to-be-uploaded id is structurally unrepresentable).\n      const candidates = input.assetCandidates?.[field.name] ?? []\n      if (candidates.length === 0) {\n        delete properties[field.name]\n        continue\n      }\n      const ids = candidates.map((c) => c.id)\n      const label = candidates\n        .map((c) => (c.label ? `${c.id} (${c.label})` : c.id))\n        .join(', ')\n      const idSchema: JsonSchema = {\n        type: 'string',\n        enum: ids,\n        description: `Choose an EXISTING library asset id, one of: ${label}. Leave empty if none fits.`,\n      }\n      properties[field.name] = field.multiple ? { type: 'array', items: idSchema } : idSchema\n      assetFields.push({ fieldName: field.name, multiple: field.multiple, candidateIds: ids })\n    } else if (field.type === 'richText') {\n      properties[field.name] = richTextMarkdownSchema(field)\n    }\n\n    const prop = properties[field.name]\n    if (prop) {\n      // EC-473: a `pattern` next to a `format` is 200+ characters that teach the\n      // model nothing — the format (and the prose constraints below) say it better.\n      // EC-505: and a `date`'s `['string','number']` union becomes the ISO string\n      // the model is actually asked to author.\n      const stripped = toModelFacingSchema(prop)\n      const desc = describe(field, input.locale)\n      // Preserve an existing description (e.g. relation enum / rich-text note), but\n      // append the constraint clause to it — the enum leash and the value rules are\n      // different facts and the model needs both.\n      const next: JsonSchema = stripped === prop ? prop : { ...stripped }\n      if (desc !== undefined) {\n        const existing = typeof next.description === 'string' ? next.description : undefined\n        const constraints = constraintSentence(field)\n        next.description =\n          existing === undefined\n            ? desc\n            : constraints !== undefined\n              ? `${existing} — ${constraints}`\n              : existing\n      }\n      properties[field.name] = next\n    }\n  }\n\n  const requiredIn = Array.isArray(base.required) ? (base.required as string[]) : []\n  const required = requiredIn.filter((n) => !excluded.includes(n) && properties[n] !== undefined)\n\n  const schema: JsonSchema = {\n    type: 'object',\n    properties,\n    additionalProperties: false,\n    ...(required.length > 0 ? { required } : {}),\n  }\n  return { schema, excluded, localizedFields, relationFields, assetFields }\n}\n"]}
+{"version":3,"file":"shape.js","sourceRoot":"","sources":["../../../src/lib/ai/shape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAE7E,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AA6C1F;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,KAAe,EAAE,MAAe;IAChD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAA;IACnE,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,EAAE,IAAI,CAAA;IAC3B,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1D,CAAA;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACnD,MAAM,UAAU,GAA+B;QAC7C,GAAG,CAAE,IAAI,CAAC,UAAyC,IAAI,EAAE,CAAC;KAC3D,CAAA;IACD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,eAAe,GAAa,EAAE,CAAA;IACpC,MAAM,cAAc,GAA0B,EAAE,CAAA;IAChD,MAAM,WAAW,GAAuB,EAAE,CAAA;IAE1C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,SAAS;YAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAErD,IAAI,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACzB,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC7B,SAAQ;QACV,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;YACvD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,4EAA4E;gBAC5E,2DAA2D;gBAC3D,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC7B,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACvC,MAAM,KAAK,GAAG,UAAU;iBACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBACrD,IAAI,CAAC,IAAI,CAAC,CAAA;YACb,MAAM,QAAQ,GAAe;gBAC3B,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,GAAG;gBACT,WAAW,EAAE,kBAAkB,KAAK,EAAE;aACvC,CAAA;YACD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;YACvF,cAAc,CAAC,IAAI,CAAC;gBAClB,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,YAAY,EAAE,GAAG;aAClB,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAClC,2EAA2E;YAC3E,sEAAsE;YACtE,2EAA2E;YAC3E,qEAAqE;YACrE,MAAM,UAAU,GAAG,KAAK,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;YAC5D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC7B,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACvC,MAAM,KAAK,GAAG,UAAU;iBACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBACrD,IAAI,CAAC,IAAI,CAAC,CAAA;YACb,MAAM,QAAQ,GAAe;gBAC3B,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,GAAG;gBACT,WAAW,EAAE,gDAAgD,KAAK,6BAA6B;aAChG,CAAA;YACD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;YACvF,WAAW,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1F,CAAC;aAAM,CAAC;YACN,6EAA6E;YAC7E,uEAAuE;YACvE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACnD,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,IAAI,EAAE,CAAC;YACT,2EAA2E;YAC3E,8EAA8E;YAC9E,4EAA4E;YAC5E,yCAAyC;YACzC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;YAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;YAC1C,8EAA8E;YAC9E,8EAA8E;YAC9E,4CAA4C;YAC5C,MAAM,IAAI,GAAe,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAA;YACnE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;gBACpF,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;gBAC7C,IAAI,CAAC,WAAW;oBACd,QAAQ,KAAK,SAAS;wBACpB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,WAAW,KAAK,SAAS;4BACzB,CAAC,CAAC,GAAG,QAAQ,MAAM,WAAW,EAAE;4BAChC,CAAC,CAAC,QAAQ,CAAA;YAClB,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAqB,CAAC,CAAC,CAAC,EAAE,CAAA;IAClF,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;IAE/F,MAAM,MAAM,GAAe;QACzB,IAAI,EAAE,QAAQ;QACd,UAAU;QACV,oBAAoB,EAAE,KAAK;QAC3B,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,CAAA;AAC3E,CAAC","sourcesContent":["/**\n * Target-shape derivation for `applyContentWithShape` (EC-331).\n *\n * Reuses the existing collection→JSON-Schema derivation (`collectionJsonSchema`,\n * cms-core) rather than writing a new one, then applies the three leashes the AI\n * engine adds on top:\n *\n *  - `ai.exclude` fields are removed entirely (the model never sees them → cannot\n *    write them).\n *  - relation fields become an ENUM over the provided candidate ids (or are omitted\n *    when no candidates exist) — so a hallucinated relation id is not representable\n *    as valid structured output.\n *  - asset/image fields become an ENUM over the searched library asset ids (or are\n *    omitted when none were searched) — EC-381, the SAME leash as relations: a\n *    proposed asset id must be a real, `listAssets`-returned library asset, and a\n *    create shape with no searched assets simply has no asset property (empty beats\n *    wrong; the assistant never generates or uploads).\n *  - rich-text fields are MARKDOWN STRINGS (EC-379): the description names the\n *    allowed subset, and the engine converts md → the `{ version, doc }` storage\n *    envelope at proposal-build time. The field's `allow` config leashes component\n *    EMBEDS only — markdown cannot express an embed, so the leash is satisfied by\n *    construction (and still enforced downstream by `validateRichTextEmbeds`).\n *\n * Localized fields stay flat in the shape (the model authors one locale at a time);\n * the engine routes their values under `localized[locale]`.\n *\n * EC-473 — the shape now consumes the ONE constraint projection, so a rule declared\n * in config actually reaches the model:\n *\n *  - `collectionJsonSchema` merges declarative rules with the fragment derived from\n *    a schema-form `validation.validate`, so `{ min: 2 }` and `z.string().min(2)`\n *    arrive identically (and a declared DATE RANGE arrives at all — it previously\n *    reached no consumer whatsoever);\n *  - a rich-text field no longer OVERWRITES its constraints: the markdown schema is\n *    merged over them instead of replacing them (measured drift, EC-474 §2);\n *  - a `pattern` is dropped wherever a `format` explains the same thing (a\n *    200-character email regex teaches a model nothing and costs real tokens);\n *  - a field whose projection is knowingly partial (`schemaComplete: false`) SAYS SO\n *    in its description rather than presenting the partial rule as the whole rule.\n *\n * EC-505 — one further narrowing of what the model is TOLD (never of what the engine\n * accepts): a `date` property is `type: 'string'` + `format: 'date-time'` rather than\n * the `['string','number']` union the general projection carries, because the model is\n * asked to author an ISO instant (EC-472) and some providers reject a union `type`.\n *\n * EC-556 — the projection is VALIDATOR-facing (the value at rest: asset/relation\n * envelopes, the v2 rich-text object). Every property here is its WRITER form\n * (`writerFieldSchema`), derived from that projection at every depth — a bare asset\n * id, a `{ collection, id }` reference, a markdown string — so an asset, relation or\n * rich-text SUBFIELD of an `object` is told the same form as a top-level one. The\n * top-level relation/asset id enums (EC-381) override the writer form there.\n */\nimport { collectionJsonSchema, resolveLabel } from '@elytracms/core/cms-core'\nimport type { CollectionDef, FieldDef, JsonSchema } from '@elytracms/core/cms-core'\nimport { constraintSentence, toModelFacingSchema, writerFieldSchema } from './constraints'\nimport type { AssetCandidates, RelationCandidates } from './types'\n\n/** A relation field's resolved candidate set — how the engine maps ids → reference envelopes. */\nexport interface TargetRelationField {\n  fieldName: string\n  /** The relation's target collection id. */\n  target: string\n  multiple: boolean\n  /** The allowed candidate ids (the enum the model chose from). */\n  candidateIds: string[]\n}\n\n/** An asset field's resolved candidate set — how the engine maps ids → asset envelopes (EC-381). */\nexport interface TargetAssetField {\n  fieldName: string\n  multiple: boolean\n  /** The allowed library asset ids (the enum the model chose from). */\n  candidateIds: string[]\n}\n\n/** The derived target shape + the metadata the engine needs to post-process the output. */\nexport interface TargetShape {\n  /** The JSON Schema the structured output must satisfy. */\n  schema: JsonSchema\n  /** Field names removed by `ai.exclude` (untouchable). */\n  excluded: string[]\n  /** Field names whose values route under `localized[locale]`. */\n  localizedFields: string[]\n  /** Relation fields with their candidate enums. */\n  relationFields: TargetRelationField[]\n  /** Asset fields with their candidate enums (EC-381). */\n  assetFields: TargetAssetField[]\n}\n\nexport interface BuildTargetShapeInput {\n  collection: CollectionDef\n  /** Relation candidate ids by field — a relation field with none is omitted from the shape. */\n  candidates?: RelationCandidates\n  /** Asset candidate ids by field — an asset field with none is omitted from the shape (EC-381). */\n  assetCandidates?: AssetCandidates\n  /** UI locale for resolving field labels into descriptions. */\n  locale?: string\n}\n\n/**\n * A field's model-facing description: resolved label + optional `ai.hint` + the\n * constraint clause (EC-473). The constraints are stated in PROSE because that is\n * what a model acts on — the same facts also ride as JSON-Schema keywords for the\n * structured-output validator, which is a different reader.\n */\nfunction describe(field: FieldDef, locale?: string): string | undefined {\n  const label = resolveLabel(field.form?.label, locale) ?? field.name\n  const hint = field.ai?.hint\n  const constraints = constraintSentence(field)\n  const parts = [label, hint, constraints].filter(\n    (p): p is string => typeof p === 'string' && p.length > 0,\n  )\n  return parts.length > 0 ? parts.join(' — ') : undefined\n}\n\n/**\n * Build the leash-aware target shape from a collection + candidates. Deterministic;\n * never throws. Reuses `collectionJsonSchema` as the base (its `required` list), then\n * gives every property its writer form (EC-556) or its id-enum leash, and strips\n * excluded fields.\n */\nexport function buildTargetShape(input: BuildTargetShapeInput): TargetShape {\n  const base = collectionJsonSchema(input.collection)\n  const properties: Record<string, JsonSchema> = {\n    ...((base.properties as Record<string, JsonSchema>) ?? {}),\n  }\n  const excluded: string[] = []\n  const localizedFields: string[] = []\n  const relationFields: TargetRelationField[] = []\n  const assetFields: TargetAssetField[] = []\n\n  for (const field of input.collection.fields) {\n    if (field.localized) localizedFields.push(field.name)\n\n    if (field.ai?.exclude) {\n      excluded.push(field.name)\n      delete properties[field.name]\n      continue\n    }\n\n    if (field.type === 'relation') {\n      const candidates = input.candidates?.[field.name] ?? []\n      if (candidates.length === 0) {\n        // No candidate ids ⇒ omit the field: the model cannot emit a relation value\n        // at all, so a hallucinated id is structurally impossible.\n        delete properties[field.name]\n        continue\n      }\n      const ids = candidates.map((c) => c.id)\n      const label = candidates\n        .map((c) => (c.label ? `${c.id} (${c.label})` : c.id))\n        .join(', ')\n      const idSchema: JsonSchema = {\n        type: 'string',\n        enum: ids,\n        description: `Choose one of: ${label}`,\n      }\n      properties[field.name] = field.multiple ? { type: 'array', items: idSchema } : idSchema\n      relationFields.push({\n        fieldName: field.name,\n        target: field.target,\n        multiple: field.multiple,\n        candidateIds: ids,\n      })\n    } else if (field.type === 'asset') {\n      // EC-381 — same leash as relations: an asset field is an enum over the ids\n      // the model actually searched in the media library (`listAssets`). No\n      // searched assets ⇒ omit the field, so the proposal simply leaves it empty\n      // (an invented / to-be-uploaded id is structurally unrepresentable).\n      const candidates = input.assetCandidates?.[field.name] ?? []\n      if (candidates.length === 0) {\n        delete properties[field.name]\n        continue\n      }\n      const ids = candidates.map((c) => c.id)\n      const label = candidates\n        .map((c) => (c.label ? `${c.id} (${c.label})` : c.id))\n        .join(', ')\n      const idSchema: JsonSchema = {\n        type: 'string',\n        enum: ids,\n        description: `Choose an EXISTING library asset id, one of: ${label}. Leave empty if none fits.`,\n      }\n      properties[field.name] = field.multiple ? { type: 'array', items: idSchema } : idSchema\n      assetFields.push({ fieldName: field.name, multiple: field.multiple, candidateIds: ids })\n    } else {\n      // EC-556: the writer form at every depth (rich text → markdown, EC-379 / D2;\n      // nested asset / relation → the bare forms the write-time lens wraps).\n      properties[field.name] = writerFieldSchema(field)\n    }\n\n    const prop = properties[field.name]\n    if (prop) {\n      // EC-473: a `pattern` next to a `format` is 200+ characters that teach the\n      // model nothing — the format (and the prose constraints below) say it better.\n      // EC-505: and a `date`'s `['string','number']` union becomes the ISO string\n      // the model is actually asked to author.\n      const stripped = toModelFacingSchema(prop)\n      const desc = describe(field, input.locale)\n      // Preserve an existing description (e.g. relation enum / rich-text note), but\n      // append the constraint clause to it — the enum leash and the value rules are\n      // different facts and the model needs both.\n      const next: JsonSchema = stripped === prop ? prop : { ...stripped }\n      if (desc !== undefined) {\n        const existing = typeof next.description === 'string' ? next.description : undefined\n        const constraints = constraintSentence(field)\n        next.description =\n          existing === undefined\n            ? desc\n            : constraints !== undefined\n              ? `${existing} — ${constraints}`\n              : existing\n      }\n      properties[field.name] = next\n    }\n  }\n\n  const requiredIn = Array.isArray(base.required) ? (base.required as string[]) : []\n  const required = requiredIn.filter((n) => !excluded.includes(n) && properties[n] !== undefined)\n\n  const schema: JsonSchema = {\n    type: 'object',\n    properties,\n    additionalProperties: false,\n    ...(required.length > 0 ? { required } : {}),\n  }\n  return { schema, excluded, localizedFields, relationFields, assetFields }\n}\n"]}

package/dist/lib/ai/types.d.ts

@@ -242,6 +242,14 @@ export interface AiRouteHandlerOptions {
     limits?: AiLimits;
     /** Derive the per-project rate-bucket key from a request (default: one global bucket). */
     projectKey?: (request: Request) => string;
+    /**
+     * Millisecond clock the rate window is decided against (default `Date.now`).
+     * Injected so the 60 s boundary is testable with a fixed clock (EC-602, the
+     * AGENTS.md §4 determinism rule). Milliseconds rather than the house ISO
+     * `Clock` (`@elytracms/core/determinism`): that one stamps records; this one
+     * does window arithmetic.
+     */
+    now?: () => number;
 }
 /** The mounted route handler: a framework-agnostic Web `Request → Response`. */
 export type AiRouteHandler = (request: Request) => Promise<Response>;