@jahia/agentic 0.2.0 → 0.3.0

package/dist/claude/.claude/skills/jahia-jcr-sql2/SKILL.md

@@ -0,0 +1,258 @@
+---
+name: jahia-jcr-sql2
+description: JCR-SQL2 reference for Jahia queries. Use when building, reviewing, or debugging SQL2 statements for content listings, full-text search, sorting, pagination, or Java back-end query code.
+---
+
+# Skill: jahia-jcr-sql2
+
+Use this skill when you need the JCR-SQL2 language itself: selectors, path constraints, filters, ordering, full-text syntax, joins, pagination rules, and performance guardrails.
+
+---
+
+## When to use JCR-SQL2
+
+JCR-SQL2 is the standard Jahia query language for:
+
+- listing pages or content with filtering and sorting
+- querying a folder subtree
+- searching by property value, date, or reference
+- full-text search across indexed content
+- back-end Java code using `QueryManagerWrapper`
+- template-set listings that use `useJCRQuery` or the Page Builder query component
+
+---
+
+## Basic syntax
+
+### Select by node type
+
+```sql
+SELECT * FROM [jnt:page] AS page
+SELECT * FROM [jnt:content] AS content
+SELECT * FROM [jnt:file] AS file
+```
+
+The selector matches the named type and its subtypes.
+
+### Common node types
+
+| Type | Meaning |
+|------|---------|
+| `jnt:page` | pages |
+| `jnt:content` | editorial content |
+| `jnt:file` | files |
+| `jnt:virtualsite` | sites |
+| `jmix:searchable` | general searchable content |
+| `nt:base` | all nodes — avoid unless paired with a strict path |
+
+---
+
+## Path constraints
+
+### Recursive subtree
+
+```sql
+SELECT * FROM [jnt:page] AS page
+WHERE ISDESCENDANTNODE(page, '/sites/luxe/home')
+```
+
+### Direct children only
+
+```sql
+SELECT * FROM [jnt:page] AS page
+WHERE ISCHILDNODE(page, '/sites/luxe/home')
+```
+
+**Guardrail:** always constrain by path to avoid repository-wide scans.
+
+---
+
+## Property constraints
+
+### Exact match
+
+```sql
+WHERE page.[j:templateName] = 'home'
+WHERE node.[jcr:title] = 'My Title'
+```
+
+### Pattern match
+
+```sql
+WHERE node.[jcr:title] LIKE '%keyword%'
+WHERE node.[j:nodename] LIKE '%.png'
+```
+
+### Null checks
+
+```sql
+WHERE page.[jcr:title] IS NOT NULL
+```
+
+### Boolean
+
+```sql
+WHERE node.[j:published] = CAST('true' AS BOOLEAN)
+```
+
+### Date comparison
+
+```sql
+WHERE page.[jcr:lastModified] > CAST('2026-01-01T00:00:00.000Z' AS DATE)
+```
+
+Use the millisecond form `yyyy-MM-dd'T'HH:mm:ss.SSSX` for SQL2 date casts.
+
+### Multiple conditions
+
+```sql
+WHERE ISDESCENDANTNODE(page, '/sites/luxe')
+  AND page.[jcr:lastModified] > CAST('2026-01-01T00:00:00.000Z' AS DATE)
+```
+
+### OR conditions
+
+```sql
+WHERE node.[jcr:primaryType] = 'jnt:bigText'
+   OR node.[jcr:primaryType] = 'jnt:article'
+```
+
+---
+
+## Ordering
+
+```sql
+ORDER BY page.[jcr:lastModified] DESC
+ORDER BY page.[jcr:created] ASC
+ORDER BY node.[jcr:title]
+```
+
+Multiple columns:
+
+```sql
+ORDER BY page.[j:templateName] ASC, page.[jcr:lastModified] DESC
+```
+
+---
+
+## Full-text search
+
+### Search indexed content
+
+```sql
+WHERE CONTAINS(node.*, 'digital')
+```
+
+### Search one property
+
+```sql
+WHERE CONTAINS(node.[jcr:title], 'welcome')
+```
+
+### Expression syntax
+
+| Syntax | Meaning |
+|--------|---------|
+| `term` | must contain the term |
+| `term1 term2` | implicit AND |
+| `term1 OR term2` | either term |
+| `"exact phrase"` | exact phrase |
+| `-term` | exclude term |
+
+### Relevance sort
+
+```sql
+SELECT * FROM [jnt:content] AS n
+WHERE ISDESCENDANTNODE(n, '/sites/luxe')
+  AND CONTAINS(n.*, 'digital')
+ORDER BY SCORE(n) DESC
+```
+
+Combine full-text with path constraints for performance.
+
+---
+
+## Joins
+
+```sql
+SELECT * FROM [jnt:imageReferenceLink] AS img
+INNER JOIN [jnt:file] AS file
+ON img.[j:node] = file.[jcr:uuid]
+WHERE img.[j:node] = 'UUID'
+```
+
+Jahia supports inner joins, but keep them focused and path-constrained whenever possible.
+
+---
+
+## Using SQL2 in Jahia code
+
+### Template-set listing with `useJCRQuery`
+
+```tsx
+const posts = useJCRQuery({
+  query: `SELECT * FROM [namespace:blogPost] AS post
+          WHERE ISDESCENDANTNODE(post, '/sites/${siteKey}/contents/blog')
+          ORDER BY post.[publicationDate] DESC`,
+});
+```
+
+### Java back-end query execution
+
+```java
+QueryManagerWrapper qm = session.getWorkspace().getQueryManager();
+QueryWrapper query = qm.createQuery(sql2Statement, Query.JCR_SQL2);
+query.setLimit(limit);
+query.setOffset(offset);
+JCRNodeIteratorWrapper nodes = query.execute().getNodes();
+```
+
+**Guardrail:** never embed `LIMIT` or `OFFSET` inside the SQL2 string. Use `setLimit()` and `setOffset()`.
+
+---
+
+## Security and validation
+
+### Escape user input
+
+In Java back-end code, escape user-provided values with `JCRContentUtils.sqlEncode()` before interpolating them into a SQL2 string.
+
+```java
+String safeValue = JCRContentUtils.sqlEncode(userInput);
+```
+
+### Validate dynamic sort fields
+
+If a user can choose the sort field, validate it against a whitelist before interpolating it into `ORDER BY`.
+
+---
+
+## Performance best practices
+
+1. Always constrain by path.
+2. Use the most specific node type possible.
+3. Keep result sets small.
+4. Prefer indexed equality filters over broad `LIKE '%...%'` patterns.
+5. Use full-text sparingly on large trees.
+6. Sort on common indexed fields such as `jcr:lastModified` or `jcr:created`.
+7. Cap API result limits to a sane maximum.
+
+---
+
+## Quick checklist
+
+- [ ] Query has a path constraint
+- [ ] Node type is specific
+- [ ] Sort field is intentional and safe
+- [ ] Full-text is combined with a subtree path
+- [ ] Dates use `yyyy-MM-dd'T'HH:mm:ss.SSSX`
+- [ ] Java code uses `setLimit()` and `setOffset()` instead of inline SQL clauses
+
+---
+
+## Related skills
+
+- `/jahia-dev-query-content` — apply SQL2 inside Page Builder queries and JS module views
+- `/jahia-dev-define-content-type` — define the content types you will query
+- `/jahia-java-jcr` — implement back-end JCR logic around the query
+

package/dist/claude/CLAUDE.md

@@ -1,13 +1,11 @@
 # CLAUDE.md
 <!-- Generated by APM CLI -->
-<!-- Build ID: e1dda0152472 -->
-<!-- APM Version: 0.14.1 -->
+<!-- Build ID: 3e845c4f03a9 -->
 
 # Project Standards
 
 ## Global Instructions
 
-<!-- Source: local .apm/instructions/jahia.instructions.md -->
 # Jahia JavaScript Module Development
 
 ## Context
@@ -86,7 +84,3 @@ When Jahia is running at `http://localhost:8080` (default credentials: `root` /
 - **GraphQL playground**: http://localhost:8080/modules/graphql
 - **JCR browser**: http://localhost:8080/modules/tools/jcrBrowser.jsp
 - **Definitions browser**: http://localhost:8080/modules/tools/definitionsBrowser.jsp
-
----
-*This file was generated by APM CLI. Do not edit manually.*
-*To regenerate: `apm compile`*

package/dist/codex/.agents/skills/jahia/SKILL.md

@@ -1,13 +1,14 @@
 ---
 name: jahia
-description: Top-level entry point for ALL Jahia tasks. Detects whether the request is about building a module (dev) or managing content (CMS), and delegates to the right skill or combination. Start here if unsure which Jahia skill to use.
-allowed-tools: Bash, Read
+description: Top-level entry point for ALL Jahia tasks. Detects whether the request is about building a module (dev) or managing content (CMS via MCP tools), and delegates to the right skill or combination. Start here if unsure which Jahia skill to use.
 ---
 
 # Jahia — Universal Entry Point
 
 You are the top-level GPS for all Jahia work. Your job is to understand what the user wants to accomplish, then delegate to the right skill(s) — `/jahia-dev`, `/jahia-content`, or both in sequence.
 
+> **Content operations use MCP tools** via the `jahia` MCP server. Never call Jahia's GraphQL API directly for content creation, querying, or structure discovery — use the MCP tools instead.
+
 ---
 
 ## Step 1 — Classify the request
@@ -62,8 +63,8 @@ Use these recipes as starting points when the task maps to a known pattern.
 ```
 1. /jahia-dev-build-component       → define the content type + create the view
 2. /jahia-dev-create-page-template  → (if a new page layout is needed)
-3. /jahia-content-create-content    → populate the section with real or dummy content
-4. /jahia-content-move-content      → (if existing content needs to be reorganized)
+3. /jahia-content-create-content    → create the site if needed, then populate the section with content
+4. /jahia-content-organize          → (if existing content needs to be reorganized)
 ```
 
 ### "Add an article to the site"
@@ -71,7 +72,8 @@ Use these recipes as starting points when the task maps to a known pattern.
 1. Check the CND — does the article content type exist?
    → Yes: jump to step 2
    → No: /jahia-dev-define-content-type + /jahia-dev-create-view first
-2. /jahia-content-create-content    → create the article node + set properties + publish
+2. /jahia-content-create-content    → create the article node + set properties
+3. /jahia-content-publish           → publish it to LIVE
 ```
 
 ### "Redesign the layout of a page"
@@ -88,8 +90,9 @@ Use these recipes as starting points when the task maps to a known pattern.
 2. /jahia-dev-start-local           → start Jahia locally
 3. /jahia-dev-build-component       → build content types + views (repeat per component)
 4. /jahia-dev-create-page-template  → create page templates
-5. /jahia-content-create-content    → populate with articles, pages, folders
-6. /jahia-dev-review                → catch issues before shipping
+5. /jahia-content-create-content    → use `site.templateSets` + `site.create`, then add pages and content
+6. /jahia-content-publish           → publish the site content
+7. /jahia-dev-review                → catch issues before shipping
 ```
 
 ---
@@ -124,11 +127,16 @@ Always print this at the end so the user can jump anywhere:
 ### 📝 Content Management  (/jahia-content and sub-skills)
 /jahia-content                       Detect site state, route to content operations ← start here
 /jahia-content-explore-structure     Map content types, properties, enums & mixins on an unknown site
-/jahia-content-query-content         Query and audit content via GraphQL
-/jahia-content-create-content        Create nodes, folders, articles, bulk-populate
-/jahia-content-move-content          Restructure the content tree: move, rename, reorder
+/jahia-content-query-content         Query and audit content via MCP tools
+/jahia-content-create-content        Create sites, pages, nodes, folders, and articles
+/jahia-content-media-upload          Upload files and images into Jahia media storage
+/jahia-content-organize              Restructure the tree: move, copy, rename, reorder, delete
+/jahia-content-move-content          Focused move/reorder/delete workflow for an existing branch
+/jahia-content-translate-content     Translate i18n content and page titles
+/jahia-content-publish               Publish, unpublish, and inspect publication status
 ### 📚 Knowledge Reference
 /jahia-dev-java              OSGi DS, CND definitions, JSP rendering, Drools rules, Content Editor/jContent UI
+/jahia-jcr-sql2              JCR-SQL2 syntax, filtering, full-text, joins, and pagination guardrails
 /jahia-dev-apis              GraphQL, JCR Java/REST API, OAuth/SAML, personal tokens, HTML filtering, CSP
 /jahia-dev-ops               Docker Compose, Kubernetes, health monitoring, Karaf, provisioning YAML API
 /jahia-dev-properties        jahia.properties and OSGi .cfg configuration keys reference

package/dist/codex/.agents/skills/jahia-content/SKILL.md

@@ -1,139 +1,157 @@
 ---
 name: jahia-content
-description: Entry point for managing content on a running Jahia website via the GraphQL API. Detects the current site state and routes to the right sub-skill. Use for any task involving creating, querying, moving, updating, or publishing JCR content.
+description: Entry point for creating sites, authoring pages, querying content, reorganizing nodes, uploading media, translating, and publishing a Jahia website via MCP tools.
 ---
 
 # Jahia Content — Content Management GPS
 
-You are the entry point for managing content on a live Jahia instance. Your job is to understand what the user needs, assess the current site state, and route to the right sub-skill.
+You are the entry point for content work on a live Jahia instance. Understand the request, assess the site state, and route to the right content skill.
+
+> **Never call Jahia's GraphQL API directly for content operations.** Use only MCP tools via the `jahia` MCP server. If a capability is missing, report it — do not work around with curl/GraphQL.
 
 ---
 
-## Step 1 — Verify Jahia is reachable
+## Step 1 — Verify the MCP connection
+
+Confirm the `jahia` MCP server is available:
 
-```bash
-curl -s -o /dev/null -w "%{http_code}" http://localhost:8080/cms/login
+```
+tool: site.list
 ```
 
-- `200` → Jahia is running ✅
-- Anything else → Jahia is not running. Tell the user: **"Please start Jahia first (use `/jahia-dev-start-local` if needed)."**
+If this fails, Jahia or the MCP connection is not ready.
 
 ---
 
-## Step 2 — Detect site state
+## Step 2 — Detect the site state
 
-Run both checks in parallel to understand what's currently in the CMS:
+Run these checks to understand what exists already:
 
 ### A. List available sites
-```bash
-curl -s -u root:root1234 \
-  -H "Content-Type: application/json" \
-  -H "Origin: http://localhost:8080" \
-  -X POST http://localhost:8080/modules/graphql \
-  -d '{"query":"{ jcr { nodeByPath(path: \"/sites\") { children { nodes { name } } } } }"}'
+
+```
+tool: site.list
 ```
 
-### B. List top-level content folders
-```bash
-curl -s -u root:root1234 \
-  -H "Content-Type: application/json" \
-  -H "Origin: http://localhost:8080" \
-  -X POST http://localhost:8080/modules/graphql \
-  -d '{"query":"{ jcr { nodeByPath(path: \"/sites/mySite/contents\") { children { nodes { name primaryNodeType { name } } } } } }"}'
+### B. Discover installed template sets for new site creation
+
+```
+tool: site.templateSets
+args: {}
 ```
 
-> Replace `mySite` with the actual site key if different.
+### C. If a site exists, list its pages
+
+```
+tool: page.list
+args: { "siteKey": "SITE_KEY" }
+```
 
 ---
 
-## Step 3 — Report site state
+## Step 3 — Report the CMS state
+
+Summarize what you found:
 
 ```
-🌐 Jahia:          ✅ running at http://localhost:8080
-📁 Sites:          <list site keys>
-📂 Content root:   <list folder names under /contents>
+🌐 Jahia MCP:       ✅ connected
+📁 Sites:           <site keys>
+🧱 Template sets:   <installed template sets>
+📄 Pages:           <page titles and templates for the chosen site>
 ```
 
 ---
 
 ## Step 4 — Route to the right sub-skill
 
-Use the task description to pick the right skill(s):
-
-| What the user wants to do | Skill |
-|---------------------------|-------|
-| Explore an unknown site's content types, property names, enum values, mixins | **`/jahia-content-explore-structure`** |
-| Find out what content exists, audit the tree, run a search | **`/jahia-content-query-content`** |
-| Create pages, articles, tutorials, folders, populate a site | **`/jahia-content-create-content`** |
-| Move, rename, restructure content into sub-folders | **`/jahia-content-move-content`** |
-| Translate existing content to another language | **`/jahia-content-translate-content`** |
-| Publish content to the live site | Use `publish` mutation (see below) |
-| Delete content | Use `deleteNode` mutation (see below) |
-| Do several of the above in sequence | Run the skills in order — start with **explore-structure** if site is unfamiliar, then create or move |
+| User intent | Skill |
+|-------------|-------|
+| Explore an unknown site, map areas, inspect types and properties | `/jahia-content-explore-structure` |
+| Create a brand-new site before authoring content | `/jahia-content-create-content` using `site.templateSets` and `site.create` |
+| Create pages, content, or structured trees on an existing site | `/jahia-content-create-content` |
+| Upload files and images to `/sites/<siteKey>/files` | `/jahia-content-media-upload` |
+| Find, inspect, or audit existing content | `/jahia-content-query-content` |
+| Move, copy, rename, reorder, or delete content | `/jahia-content-organize` |
+| Translate content to another locale | `/jahia-content-translate-content` |
+| Publish, unpublish, or check readiness | `/jahia-content-publish` |
+| Do several of the above in sequence | Start with `/jahia-content-explore-structure` if the site is unfamiliar |
 
 ---
 
-## Step 5 — Direct patterns for one-off operations
+## Direct MCP patterns
 
-Use these when the task is simple enough to not need a full sub-skill.
+### Create a site before authoring pages
 
-### Publish a node (and all its children)
-```bash
-curl -s -u root:root1234 \
-  -H "Content-Type: application/json" \
-  -H "Origin: http://localhost:8080" \
-  -X POST http://localhost:8080/modules/graphql \
-  -d '{"query":"mutation { jcr { mutateNode(pathOrId: \"/sites/mySite/contents/articles\") { publish(languages: [\"en\"]) } } }"}'
 ```
+tool: site.templateSets
+args: {}
+
+tool: site.create
+args: {
+  "siteKey": "brandSite",
+  "title": "Brand Site",
+  "templateSet": "digitall",
+  "defaultLanguage": "en",
+  "languages": ["en", "fr"],
+  "serverName": "brand.local"
+}
+```
+
+### Publish a page or subtree
 
-### Publish all content at once
-```bash
-curl -s -u root:root1234 \
-  -H "Content-Type: application/json" \
-  -H "Origin: http://localhost:8080" \
-  -X POST http://localhost:8080/modules/graphql \
-  -d '{"query":"mutation { jcr { mutateNodesByQuery(query: \"SELECT * FROM [jnt:content] WHERE ISDESCENDANTNODE(\u0027/sites/mySite/contents\u0027)\", queryLanguage: SQL2) { publish(languages: [\"en\"]) } } }"}'
 ```
+tool: publication.publish
+args: {
+  "path": "/sites/SITE_KEY/home/about",
+  "languages": ["en"]
+}
+```
+
+### Unpublish a page or subtree
 
-### Delete a node
-```bash
-curl -s -u root:root1234 \
-  -H "Content-Type: application/json" \
-  -H "Origin: http://localhost:8080" \
-  -X POST http://localhost:8080/modules/graphql \
-  -d '{"query":"mutation { jcr { mutateNode(pathOrId: \"/sites/mySite/contents/articles/old-article\") { delete } } }"}'
+```
+tool: publication.unpublish
+args: {
+  "path": "/sites/SITE_KEY/home/about",
+  "languages": ["en"]
+}
 ```
 
-### Update a property on an existing node
-```bash
-curl -s -u root:root1234 \
-  -H "Content-Type: application/json" \
-  -H "Origin: http://localhost:8080" \
-  -X POST http://localhost:8080/modules/graphql \
-  -d '{"query":"mutation { jcr { mutateNode(pathOrId: \"/sites/mySite/contents/articles/my-article\") { mutateProperty(name: \"jcr:title\") { setValue(language: \"en\", value: \"Updated Title\") } } } }"}'
+### Delete a published node correctly
+
+```
+tool: content.markForDeletion
+args: { "path": "/sites/SITE_KEY/home/old-page" }
+
+tool: publication.publish
+args: {
+  "path": "/sites/SITE_KEY/home/old-page",
+  "languages": ["en"]
+}
 ```
 
 ---
 
-## Step 6 — Print the full CMS skill map
-
-Always print this at the end so the user can navigate anywhere:
+## Full skill map
 
 ```
-## Jahia Content Skills
-
-/jahia-content-explore-structure    Map content types, properties, enums, mixins on an unknown site ← start here
-/jahia-content-query-content        List, inspect, and search content via GraphQL
-/jahia-content-create-content       Create nodes, folders, articles, and bulk-populate a site
-/jahia-content-move-content         Restructure the content tree: move, rename, reorder nodes
-/jahia-content-translate-content    Translate existing nodes to a new language and publish
+/jahia-content-explore-structure   Map sites, template sets, pages, areas, and content definitions
+/jahia-content-create-content      Create sites, pages, content nodes, and structured trees
+/jahia-content-media-upload        Upload media and reference it from content
+/jahia-content-query-content       List, inspect, and search content via MCP tools
+/jahia-content-organize            Move, copy, rename, reorder, mark for deletion, and delete content
+/jahia-content-move-content        Focused move/reorder/delete workflow for an existing content tree
+/jahia-content-translate-content   Translate i18n content and page titles
+/jahia-content-publish             Check publication status, publish, unpublish, and handle workflow
 ```
 
 ---
 
-## Critical rules (always enforce)
+## Critical rules
+
+- Always use MCP tools — never GraphQL directly
+- Use `site.templateSets` and `site.create` when the requested site does not exist yet
+- Always pass `locale` to content creation and update calls
+- Always publish after creating, moving, deleting, or translating content
+- Always explore with `/jahia-content-explore-structure` before authoring on an unfamiliar site
 
-- Always include `-H "Origin: http://localhost:8080"` in every curl — omitting it causes `Permission denied`
-- Always use `language: "en"` (or the site's language) for `i18n` properties (`jcr:title` on folders with `mix:title`, richtext body, etc.)
-- Always publish after creating or moving content — JCR writes to the **default workspace** only; live visitors see the **live workspace**
-- Mandatory fields (e.g. `body`) must be set **before** other properties on the same node in a new locale