@jini-ai/cms 0.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for describing the origin of the Work and
+      reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Support. While redistributing the Work or
+      Derivative Works thereof, You may choose to offer, and charge a
+      fee for, acceptance of support, warranty, indemnity, or other
+      liability obligations and/or rights consistent with this License.
+      However, in accepting such obligations, You may act only on Your
+      own behalf and on Your sole responsibility, not on behalf of any
+      other Contributor, and only if You agree to indemnify, defend,
+      and hold each Contributor harmless for any liability incurred by,
+      or claims asserted against, such Contributor by reason of your
+      accepting any such warranty or support.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Open Design contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,84 @@
+# `@jini-ai/cms`
+
+Content-model capability for Jini-hosted products.
+
+> **Status: placeholder.** No implementation yet. The package builds, typechecks, and has a green
+> suite so the first port commit lands on working infrastructure rather than discovering it is
+> broken. Created 2026-08-02.
+
+## Layers
+
+| subpath | runtime | contents |
+|---|---|---|
+| `.` / `./core` | universal | Content contracts and types, ports, pure domain services, kernel registries. No Express, no `node:*`, no DOM. |
+| `./server` | node | Concrete adapters for the ports in `/core`: SQLite/Postgres repositories, filesystem blob stores, image transformers. |
+
+`/server` depends on `/core`. The reverse is a boundary violation — if a core module wants
+something from `/server`, the dependency is backwards and the fix is a port (interface) in core,
+not a widened export.
+
+`./server` means *the Node-bound layer*, not *the HTTP server* — same convention as
+`@jini-ai/admin`. HTTP transport is out of scope; Jini has `@jini-ai/http-kit` and
+`@jini-ai/server`.
+
+## Why the split exists before there is any code to split
+
+The source of this port is an existing CMS runtime, and the boundary is drawn where a measured defect was.
+
+There, the content model and its HTTP composition root share one `src/` tree with nothing
+enforcing a boundary between them. Measured 2026-08-02:
+
+- **53 import edges point into the composition root.** 22 of them are domain modules importing a
+  454-line `RouteDeps` type whose first line is `import type { Express } from "express"`.
+- **Git history shows the cost:** no content module could be changed without also changing the
+  server. `features/theme` and `server` co-changed in 71% of commits touching the former;
+  `identity` and `server` in 45%.
+- **33 of 38 modules formed a single strongly-connected component** — none could be extracted
+  without dragging the other 32.
+
+The decomposition itself was sound (propagation cost 11%, a textbook Martin instability gradient,
+domain modules that essentially never co-change with each other). What was missing was
+*enforcement*. Full analysis: `ADS-memory/reports/refactors/2026-08-02-module-graph-analysis.md`
+in the originating repo.
+
+A package's `exports` map is precisely the enforcement a single `src/` tree cannot provide. A
+consumer of `@jini-ai/cms/core` physically cannot reach a Node adapter, and `/core` physically
+cannot import a transport type, because the module resolver refuses. Porting into this shape from
+the first commit means that failure mode cannot recur here.
+
+## Port inventory
+
+Not yet moved. Order matters for the first item only.
+
+**Kernel first** — the source repo's `src/core/{ports,commands,events,tools}` — because every domain module
+depends on it.
+
+**Then domain modules, in any order.** The source repo's git history shows domain modules essentially never
+co-change with each other, so each can be ported independently without coordination: `post`,
+`taxonomy`, `entries`, `content-types`, `media`, `seo`, `comments`, `forms`, `navigation`,
+`redirects`, `widgets`, `newsletter`, `members`.
+
+**Explicitly not ported:**
+
+- `src/server/**` — Express composition root; superseded by `@jini-ai/http-kit` / `@jini-ai/server`.
+- Admin UI — `@jini-ai/admin` already owns that surface.
+
+When porting tests, `git mv` them rather than re-authoring: re-authoring costs a full pass and
+still loses coverage.
+
+## Scripts
+
+```bash
+pnpm --filter @jini-ai/cms build
+pnpm --filter @jini-ai/cms typecheck
+pnpm --filter @jini-ai/cms test
+```
+
+## Notes for the first real commit
+
+- **Add coverage thresholds.** `vitest.config.ts` deliberately has none — on a placeholder they
+  would be either vacuously true or an immediate blocker. Set them against what the first ported
+  module actually measures. Siblings run 98–100%.
+- **Delete the layer markers.** `CMS_CORE_LAYER` and `CMS_SERVER_LAYER` exist only to give the
+  entry points something real to resolve. They have no purpose once real exports land.
+- **Replace `src/core/__tests__/layers.test.ts`.** It proves the package wiring, not behavior.

package/dist/content-types/agent-tools.d.ts

@@ -0,0 +1,65 @@
+/**
+ * @file REQ-22/REQ-23 — the Collections content-types agent-tool catalog, instantiating
+ * a REQ-22 naming/callability convention (mirrors `features/database/agent-tools.ts`'s
+ * shape for this domain).
+ *
+ * Purpose:
+ * A static, in-process catalog describing every agent-callable tool this domain exposes and the
+ * permission/actor-class rule each one carries. `collections_content_type_list` (admin-UI-backend-
+ * gap closure, mirroring `routes/admin/content-types/list.ts`) and `collections_plan_cleanup` are
+ * both free reads (`admin.collections.read`, `sideEffects:'none'`) — the former lists the registry,
+ * the latter only recomputes and returns an eligibility plan. `collections_execute_cleanup` is the
+ * one destructive tool, gated to
+ * `admin.collections.manage` and restricted to `confirmer-must-equal-own-delegatedBy`. There is
+ * deliberately no `collections_confirm_cleanup` tool and no tool description implying an agent can
+ * perform the confirm() step — confirmation of a destructive cleanup is human-UI-only (mirrors
+ * the Database library's "Restore is a Recovery tool, not a Database tool" discipline: a lever an agent must
+ * never be handed directly).
+ *
+ * How it relates to the project:
+ * The server-side tool filter consumes this catalog to decide which tool names an agent
+ * session may even see; `authorize()` and the confirmation-token gateway (`core/gated-mutations`)
+ * enforce the actual permission/actor-class checks at call time — this module only declares the
+ * catalog shape, it performs no I/O and no enforcement itself.
+ *
+ * Architectural role:
+ * `features/content-types` domain logic. Performs no I/O and no enforcement. Depends only on this
+ * package's own `types.ts` (the field-kind enum) and `index-provisioning.ts` (the identifier
+ * grammar pattern) — imported so the published JSON Schemas cannot drift from the single sources
+ * of those two values, rather than restating either.
+ */
+export type AgentToolSideEffect = "none" | "mutates-durable-state" | "mints-token";
+export type AgentToolActorClassRule = "confirmer-must-equal-own-delegatedBy" | "user-only" | "none";
+export interface AgentToolDefinition {
+    name: string;
+    description: string;
+    sideEffects: AgentToolSideEffect;
+    authorization: {
+        permission: string;
+    };
+    actorClassRule?: AgentToolActorClassRule;
+    /**
+     * JSON Schema for this tool's `input`, published to the model via `ToolDescriptor.inputSchema`
+     * (`assistant/tool-registrations.ts`). Optional because the two cleanup entries are not wired to
+     * handlers yet and their input shape is not designed; `tool-registrations.ts` asserts that every
+     * tool it DOES wire has one.
+     *
+     * These schemas are hand-authored, and enforcement lives elsewhere — `field-defs.ts` for
+     * structure and `write-service.ts`'s CIC U-002-B1 chain for the domain rules. That is a
+     * deliberate two-artifact design, so the pair is pinned against drift by a fixture corpus in
+     * `__tests__/unit/agent-tools.schema-agreement.unit.test.ts`. The two values a schema would
+     * otherwise duplicate — the field-kind enum and the identifier grammar — are imported from their
+     * single sources rather than restated.
+     */
+    inputSchema?: Readonly<Record<string, unknown>>;
+}
+/**
+ * REQ-22/REQ-23 — the Collections content-types domain's fixed agent-tool catalog.
+ *
+ * `collections_content_type_list` is ordered first, mirroring `identity/agent-tools.ts`'s
+ * "read-tools-first" convention: a model cannot call `update_fields`/`deprecate`/`reactivate`/
+ * `tombstone` without a `key` and current `expectedVersion`, and this is the only way to learn
+ * either for a content type it did not itself just create.
+ */
+export declare const contentTypesAgentToolCatalog: AgentToolDefinition[];
+//# sourceMappingURL=agent-tools.d.ts.map

package/dist/content-types/agent-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools.d.ts","sourceRoot":"","sources":["../../src/content-types/agent-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAKH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,uBAAuB,GAAG,aAAa,CAAC;AAEnF,MAAM,MAAM,uBAAuB,GAAG,sCAAsC,GAAG,WAAW,GAAG,MAAM,CAAC;AAEpG,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,mBAAmB,CAAC;IACjC,aAAa,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,cAAc,CAAC,EAAE,uBAAuB,CAAC;IACzC;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACjD;AA2DD;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,EAAE,mBAAmB,EA+E7D,CAAC"}

package/dist/content-types/agent-tools.js

@@ -0,0 +1,172 @@
+/**
+ * @file REQ-22/REQ-23 — the Collections content-types agent-tool catalog, instantiating
+ * a REQ-22 naming/callability convention (mirrors `features/database/agent-tools.ts`'s
+ * shape for this domain).
+ *
+ * Purpose:
+ * A static, in-process catalog describing every agent-callable tool this domain exposes and the
+ * permission/actor-class rule each one carries. `collections_content_type_list` (admin-UI-backend-
+ * gap closure, mirroring `routes/admin/content-types/list.ts`) and `collections_plan_cleanup` are
+ * both free reads (`admin.collections.read`, `sideEffects:'none'`) — the former lists the registry,
+ * the latter only recomputes and returns an eligibility plan. `collections_execute_cleanup` is the
+ * one destructive tool, gated to
+ * `admin.collections.manage` and restricted to `confirmer-must-equal-own-delegatedBy`. There is
+ * deliberately no `collections_confirm_cleanup` tool and no tool description implying an agent can
+ * perform the confirm() step — confirmation of a destructive cleanup is human-UI-only (mirrors
+ * the Database library's "Restore is a Recovery tool, not a Database tool" discipline: a lever an agent must
+ * never be handed directly).
+ *
+ * How it relates to the project:
+ * The server-side tool filter consumes this catalog to decide which tool names an agent
+ * session may even see; `authorize()` and the confirmation-token gateway (`core/gated-mutations`)
+ * enforce the actual permission/actor-class checks at call time — this module only declares the
+ * catalog shape, it performs no I/O and no enforcement itself.
+ *
+ * Architectural role:
+ * `features/content-types` domain logic. Performs no I/O and no enforcement. Depends only on this
+ * package's own `types.ts` (the field-kind enum) and `index-provisioning.ts` (the identifier
+ * grammar pattern) — imported so the published JSON Schemas cannot drift from the single sources
+ * of those two values, rather than restating either.
+ */
+import { IDENTIFIER_GRAMMAR_PATTERN } from "./index-provisioning.js";
+import { CONTENT_TYPE_FIELD_KINDS } from "./types.js";
+/** One entry of a `fields` array, as published to the model. Mirrors what `field-defs.ts` enforces. */
+const FIELD_DEF_SCHEMA = {
+    type: "object",
+    additionalProperties: false,
+    required: ["name", "kind", "required", "queryable"],
+    properties: {
+        name: {
+            type: "string",
+            pattern: IDENTIFIER_GRAMMAR_PATTERN,
+            description: "Field name. Lowercase letters, digits and underscores; must start with a letter; max 64 characters.",
+        },
+        kind: {
+            type: "string",
+            enum: [...CONTENT_TYPE_FIELD_KINDS],
+            description: "One of the five supported storage kinds. No other value is accepted.",
+        },
+        required: { type: "boolean", description: "Whether an entry must supply this field. Must be a real boolean, not a string." },
+        queryable: {
+            type: "boolean",
+            description: "Whether this field gets a queryable index. Must be a real boolean, not a string. At most 20 queryable fields per content type.",
+        },
+    },
+};
+/** The input shape of the one read tool this catalog carries — it takes no arguments. */
+const NO_INPUT_SCHEMA = {
+    type: "object",
+    additionalProperties: false,
+    required: [],
+    properties: {},
+};
+/** The `fields` property shared by `define` and `update_fields`. */
+const FIELDS_SCHEMA = {
+    type: "array",
+    maxItems: 500,
+    items: FIELD_DEF_SCHEMA,
+    description: "The COMPLETE field list. Both tools that accept it replace the whole schema — omitted fields are dropped, not preserved.",
+};
+/** `expectedVersion` — present on every tool that mutates an existing content type (OCC). */
+const EXPECTED_VERSION_SCHEMA = {
+    type: "integer",
+    description: "The content type's current `version`, for optimistic concurrency. Read it first; a stale value is rejected with VersionConflictError rather than overwriting.",
+};
+/** The input schema shared by the three lifecycle transitions, which take exactly `{key, expectedVersion}`. */
+const LIFECYCLE_INPUT_SCHEMA = {
+    type: "object",
+    additionalProperties: false,
+    required: ["key", "expectedVersion"],
+    properties: {
+        key: { type: "string", pattern: IDENTIFIER_GRAMMAR_PATTERN, description: "The content type's key." },
+        expectedVersion: EXPECTED_VERSION_SCHEMA,
+    },
+};
+/**
+ * REQ-22/REQ-23 — the Collections content-types domain's fixed agent-tool catalog.
+ *
+ * `collections_content_type_list` is ordered first, mirroring `identity/agent-tools.ts`'s
+ * "read-tools-first" convention: a model cannot call `update_fields`/`deprecate`/`reactivate`/
+ * `tombstone` without a `key` and current `expectedVersion`, and this is the only way to learn
+ * either for a content type it did not itself just create.
+ */
+export const contentTypesAgentToolCatalog = [
+    {
+        name: "collections_content_type_list",
+        description: "Lists every content type registered in the workspace — active, deprecated, and tombstoned alike — with its key, label, status, version, and fields. Read-only. Call this before update_fields/deprecate/reactivate/tombstone to find a content type's key and current version.",
+        sideEffects: "none",
+        authorization: { permission: "admin.collections.read" },
+        inputSchema: NO_INPUT_SCHEMA,
+    },
+    {
+        name: "collections_plan_cleanup",
+        description: "Recomputes and returns the destructive-removal eligibility plan for a tombstoned content type. Read-only; performs no removal.",
+        sideEffects: "none",
+        authorization: { permission: "admin.collections.read" },
+    },
+    {
+        name: "collections_execute_cleanup",
+        description: "Executes the destructive, atomic removal of a tombstoned content type and all of its scoped rows, using a previously redeemed token.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.collections.manage" },
+        actorClassRule: "confirmer-must-equal-own-delegatedBy",
+    },
+    {
+        name: "collections_content_type_define",
+        description: "Registers a new operator-defined content type in the registry.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.collections.manage" },
+        inputSchema: {
+            type: "object",
+            additionalProperties: false,
+            required: ["key", "label", "fields"],
+            properties: {
+                key: {
+                    type: "string",
+                    pattern: IDENTIFIER_GRAMMAR_PATTERN,
+                    description: "Permanent identifier for the content type. Cannot be changed later. 'post' and 'page' are permanently reserved and will be rejected.",
+                },
+                label: { type: "string", description: "Human-readable display name shown in the admin UI." },
+                fields: FIELDS_SCHEMA,
+            },
+        },
+    },
+    {
+        name: "collections_content_type_update_fields",
+        description: "Full-replaces a content type's field schema.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.collections.manage" },
+        inputSchema: {
+            type: "object",
+            additionalProperties: false,
+            required: ["key", "fields", "expectedVersion"],
+            properties: {
+                key: { type: "string", pattern: IDENTIFIER_GRAMMAR_PATTERN, description: "The content type's key." },
+                fields: FIELDS_SCHEMA,
+                expectedVersion: EXPECTED_VERSION_SCHEMA,
+            },
+        },
+    },
+    {
+        name: "collections_content_type_deprecate",
+        description: "Deprecates an active content type, blocking new entry creation only.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.collections.manage" },
+        inputSchema: LIFECYCLE_INPUT_SCHEMA,
+    },
+    {
+        name: "collections_content_type_reactivate",
+        description: "Reactivates a deprecated content type back to active.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.collections.manage" },
+        inputSchema: LIFECYCLE_INPUT_SCHEMA,
+    },
+    {
+        name: "collections_content_type_tombstone",
+        description: "Tombstones a deprecated content type and tears down its provisioned queryable-field indexes.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.collections.manage" },
+        inputSchema: LIFECYCLE_INPUT_SCHEMA,
+    },
+];
+//# sourceMappingURL=agent-tools.js.map

package/dist/content-types/agent-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools.js","sourceRoot":"","sources":["../../src/content-types/agent-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AA4BtD,uGAAuG;AACvG,MAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC;IACnD,UAAU,EAAE;QACV,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,0BAA0B;YACnC,WAAW,EAAE,qGAAqG;SACnH;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,GAAG,wBAAwB,CAAC;YACnC,WAAW,EAAE,sEAAsE;SACpF;QACD,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gFAAgF,EAAE;QAC5H,SAAS,EAAE;YACT,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,gIAAgI;SAC9I;KACF;CACO,CAAC;AAEX,yFAAyF;AACzF,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,EAAE;CACN,CAAC;AAEX,oEAAoE;AACpE,MAAM,aAAa,GAAG;IACpB,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,GAAG;IACb,KAAK,EAAE,gBAAgB;IACvB,WAAW,EAAE,0HAA0H;CAC/H,CAAC;AAEX,6FAA6F;AAC7F,MAAM,uBAAuB,GAAG;IAC9B,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,+JAA+J;CACpK,CAAC;AAEX,+GAA+G;AAC/G,MAAM,sBAAsB,GAAG;IAC7B,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,CAAC;IACpC,UAAU,EAAE;QACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACpG,eAAe,EAAE,uBAAuB;KACzC;CACO,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAA0B;IACjE;QACE,IAAI,EAAE,+BAA+B;QACrC,WAAW,EACT,gRAAgR;QAClR,WAAW,EAAE,MAAM;QACnB,aAAa,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAAE;QACvD,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,gIAAgI;QAC7I,WAAW,EAAE,MAAM;QACnB,aAAa,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAAE;KACxD;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,sIAAsI;QACnJ,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,0BAA0B,EAAE;QACzD,cAAc,EAAE,sCAAsC;KACvD;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,WAAW,EAAE,gEAAgE;QAC7E,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,0BAA0B,EAAE;QACzD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;YACpC,UAAU,EAAE;gBACV,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,0BAA0B;oBACnC,WAAW,EAAE,sIAAsI;iBACpJ;gBACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oDAAoD,EAAE;gBAC5F,MAAM,EAAE,aAAa;aACtB;SACF;KACF;IACD;QACE,IAAI,EAAE,wCAAwC;QAC9C,WAAW,EAAE,8CAA8C;QAC3D,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,0BAA0B,EAAE;QACzD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,iBAAiB,CAAC;YAC9C,UAAU,EAAE;gBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,yBAAyB,EAAE;gBACpG,MAAM,EAAE,aAAa;gBACrB,eAAe,EAAE,uBAAuB;aACzC;SACF;KACF;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EAAE,sEAAsE;QACnF,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,0BAA0B,EAAE;QACzD,WAAW,EAAE,sBAAsB;KACpC;IACD;QACE,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EAAE,uDAAuD;QACpE,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,0BAA0B,EAAE;QACzD,WAAW,EAAE,sBAAsB;KACpC;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EAAE,8FAA8F;QAC3G,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,0BAA0B,EAAE;QACzD,WAAW,EAAE,sBAAsB;KACpC;CACF,CAAC"}

package/dist/content-types/cleanup.d.ts

@@ -0,0 +1,118 @@
+import type { ClockPort } from "../core/ports.js";
+import { CleanupNotEligibleError } from "./errors.js";
+import type { AuthorizeFn } from "./write-service.js";
+import type { Result } from "./types.js";
+/**
+ * @file REQ-20/REQ-21 — the destructive cleanup ceremony, instantiating the
+ * gated-mutation gateway (`domain="collections"`, `action="cleanup"`) around a tombstoned content
+ * type's final, irreversible removal (the disable -> tombstone -> cleanup
+ * lifecycle).
+ *
+ * Purpose:
+ * `planCleanup` is the eligibility gate (C-405): a content type must be `status='tombstone'`, its
+ * retention window (30 days since `tombstonedAt`, inclusive) must have elapsed, and an
+ * `exportReference` must be present — checked in that fixed order, stopping at the first failure
+ * (behavior.spec.md §2.3), before the actual gated-mutation `plan()` is ever reached. `executeCleanup`
+ * forwards straight to the gated-mutation gateway's own `execute()` (token redemption, actor-class
+ * check, plan-staleness re-check all live there — this module does not re-implement them) and
+ * only performs the actual multi-table removal after the gateway confirms the token; a rejected
+ * gateway call never triggers any local removal (EC-10, INV-07).
+ *
+ * How it relates to the project:
+ * `deps.gateway` in `planCleanup`/`executeCleanup` is intentionally two different narrow port
+ * shapes (`plan`-only, `execute`-only) rather than one shared gateway interface — each function
+ * only ever calls the one method it needs, matching how a real gated-mutation gateway's `core/gated-mutations`
+ * composition would be split per call site.
+ *
+ * Architectural role:
+ * `features/content-types` domain logic, composing `write-service.ts`'s `AuthorizeFn` shape.
+ */
+export interface CleanupEligibilityCheckRepoPort {
+    findByKey(params: {
+        workspaceId: string;
+        key: string;
+    }): Promise<{
+        status: "active" | "deprecated" | "tombstone";
+        tombstonedAt: string | null;
+    } | null>;
+}
+export interface PlanCleanupGatewayPort {
+    plan(input: {
+        principalId: string;
+        workspaceId: string;
+        contentTypeKey: string;
+        domain: "collections";
+        action: "cleanup";
+    }): Promise<Result<{
+        planId: string;
+        planHash: string;
+    }, unknown>>;
+}
+export interface PlanCleanupRequired {
+    deps: {
+        repo: CleanupEligibilityCheckRepoPort;
+        gateway: PlanCleanupGatewayPort;
+        clock: ClockPort;
+        authorize: AuthorizeFn;
+    };
+    input: {
+        workspaceId: string;
+        actorId: string;
+        contentTypeKey: string;
+        exportReference: string;
+    };
+}
+/**
+ * REQ-20 — the fixed-order eligibility gate: `status==='tombstone'` -> retention window elapsed
+ * (>=30 days since `tombstonedAt`, inclusive lower bound) -> `exportReference` present. Only once
+ * all three pass does this call reach the real `gateway.plan()`.
+ *
+ * @complexity O(1) — one repo read, one date diff, one delegated gateway call at most.
+ * @overallScore 100
+ */
+export declare function planCleanup(required: PlanCleanupRequired): Promise<Result<{
+    planId: string;
+    planHash: string;
+}, CleanupNotEligibleError>>;
+export interface ExecuteCleanupGatewayPort {
+    execute(input: {
+        principalId: string;
+        principalKind: string;
+        confirmationToken: string;
+        contentTypeKey: string;
+    }): Promise<Result<unknown, unknown>>;
+}
+export interface CleanupRemovalRepoPort {
+    removeContentTypeAndAllScopedRows(params: {
+        contentTypeKey: string;
+    }): Promise<{
+        removedEntryCount: number;
+    }>;
+    transaction<T>(fn: () => Promise<T>): Promise<T>;
+}
+export interface ExecuteCleanupRequired {
+    deps: {
+        repo: CleanupRemovalRepoPort;
+        gateway: ExecuteCleanupGatewayPort;
+    };
+    input: {
+        principalId: string;
+        principalKind: string;
+        confirmationToken: string;
+        contentTypeKey: string;
+    };
+}
+/**
+ * REQ-21/INV-07 — forwards straight to the gated-mutation gateway's own `execute()`; only once
+ * that confirms (token redeemed, actor-class checked, plan still fresh) does this function perform
+ * the actual atomic multi-table removal. A gateway rejection (expired/already-redeemed token,
+ * stale plan) is forwarded verbatim and no local removal is ever attempted (EC-10).
+ *
+ * @complexity O(1) plus one delegated gateway call and, on success, one same-tx multi-table
+ * removal.
+ * @overallScore 100
+ */
+export declare function executeCleanup(required: ExecuteCleanupRequired): Promise<Result<{
+    removedEntryCount: number;
+}, unknown>>;
+//# sourceMappingURL=cleanup.d.ts.map

package/dist/content-types/cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../src/content-types/cleanup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,WAAW,+BAA+B;IAC9C,SAAS,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,QAAQ,GAAG,YAAY,GAAG,WAAW,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CACzJ;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,KAAK,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,aAAa,CAAC;QACtB,MAAM,EAAE,SAAS,CAAC;KACnB,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,OAAO,CAAC,CAAC,CAAC;CACpE;AAID,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE;QAAE,IAAI,EAAE,+BAA+B,CAAC;QAAC,OAAO,EAAE,sBAAsB,CAAC;QAAC,KAAK,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,WAAW,CAAA;KAAE,CAAC;IAC3H,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;CAClG;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAAE,uBAAuB,CAAC,CAAC,CAkChF;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,KAAK,EAAE;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,sBAAsB;IACrC,iCAAiC,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9G,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE;QAAE,IAAI,EAAE,sBAAsB,CAAC;QAAC,OAAO,EAAE,yBAAyB,CAAA;KAAE,CAAC;IAC3E,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1G;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,sBAAsB,GAC/B,OAAO,CAAC,MAAM,CAAC;IAAE,iBAAiB,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,CAAC,CAkBzD"}