@jini-ai/cms 0.1.0

package/dist/content-types/cleanup.js

@@ -0,0 +1,65 @@
+import { CleanupNotEligibleError } from "./errors.js";
+const RETENTION_WINDOW_MS = 30 * 24 * 60 * 60 * 1000;
+/**
+ * REQ-20 — the fixed-order eligibility gate: `status==='tombstone'` -> retention window elapsed
+ * (>=30 days since `tombstonedAt`, inclusive lower bound) -> `exportReference` present. Only once
+ * all three pass does this call reach the real `gateway.plan()`.
+ *
+ * @complexity O(1) — one repo read, one date diff, one delegated gateway call at most.
+ * @overallScore 100
+ */
+export async function planCleanup(required) {
+    const { deps, input } = required;
+    const authResult = await deps.authorize({ principalId: input.actorId, permission: "admin.collections.read", workspaceId: input.workspaceId });
+    if (!authResult.allowed) {
+        return { ok: false, error: new CleanupNotEligibleError("forbidden", `principal '${input.actorId}' is not authorized to plan a cleanup (${authResult.reason})`) };
+    }
+    const contentType = await deps.repo.findByKey({ workspaceId: input.workspaceId, key: input.contentTypeKey });
+    if (!contentType || contentType.status !== "tombstone") {
+        return { ok: false, error: new CleanupNotEligibleError("not_tombstoned") };
+    }
+    const now = deps.clock.nowIso();
+    const elapsedMs = new Date(now).getTime() - new Date(contentType.tombstonedAt ?? now).getTime();
+    if (elapsedMs < RETENTION_WINDOW_MS) {
+        return { ok: false, error: new CleanupNotEligibleError("retention_window_not_elapsed") };
+    }
+    if (!input.exportReference) {
+        return { ok: false, error: new CleanupNotEligibleError("export_reference_missing") };
+    }
+    const planResult = await deps.gateway.plan({
+        principalId: input.actorId,
+        workspaceId: input.workspaceId,
+        contentTypeKey: input.contentTypeKey,
+        domain: "collections",
+        action: "cleanup",
+    });
+    if (!planResult.ok) {
+        return { ok: false, error: new CleanupNotEligibleError("gateway_rejected", String(planResult.error)) };
+    }
+    return { ok: true, value: planResult.value };
+}
+/**
+ * REQ-21/INV-07 — forwards straight to the gated-mutation gateway's own `execute()`; only once
+ * that confirms (token redeemed, actor-class checked, plan still fresh) does this function perform
+ * the actual atomic multi-table removal. A gateway rejection (expired/already-redeemed token,
+ * stale plan) is forwarded verbatim and no local removal is ever attempted (EC-10).
+ *
+ * @complexity O(1) plus one delegated gateway call and, on success, one same-tx multi-table
+ * removal.
+ * @overallScore 100
+ */
+export async function executeCleanup(required) {
+    const { deps, input } = required;
+    const gatewayResult = await deps.gateway.execute({
+        principalId: input.principalId,
+        principalKind: input.principalKind,
+        confirmationToken: input.confirmationToken,
+        contentTypeKey: input.contentTypeKey,
+    });
+    if (!gatewayResult.ok) {
+        return gatewayResult;
+    }
+    const removal = await deps.repo.transaction(async () => deps.repo.removeContentTypeAndAllScopedRows({ contentTypeKey: input.contentTypeKey }));
+    return { ok: true, value: removal };
+}
+//# sourceMappingURL=cleanup.js.map

package/dist/content-types/cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../src/content-types/cleanup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AA4CtD,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAOrD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAA6B;IAE7B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IAEjC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9I,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,uBAAuB,CAAC,WAAW,EAAE,cAAc,KAAK,CAAC,OAAO,0CAA0C,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACnK,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IAC7G,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAChG,IAAI,SAAS,GAAG,mBAAmB,EAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,uBAAuB,CAAC,8BAA8B,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,uBAAuB,CAAC,0BAA0B,CAAC,EAAE,CAAC;IACvF,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QACzC,WAAW,EAAE,KAAK,CAAC,OAAO;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,uBAAuB,CAAC,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;AAC/C,CAAC;AAqBD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgC;IAEhC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IAEjC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CACrD,IAAI,CAAC,IAAI,CAAC,iCAAiC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CACtF,CAAC;IAEF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC"}

package/dist/content-types/errors.d.ts

@@ -0,0 +1,90 @@
+/**
+ * @file Typed error surface for the `content-types` package.
+ *
+ * Purpose:
+ * Every rejection this package's write-service/lifecycle/cleanup/index-provisioning modules
+ * produce is one of these classes, never a bare `Error`/string, so callers (routes, agent tools,
+ * tests) can branch on `instanceof` or on `.name` without parsing a message.
+ *
+ * `class X extends Error {}` does NOT give an instance a `.name` of `"X"` on this runtime unless
+ * the constructor sets `this.name` explicitly (confirmed empirically in Session 2 of this
+ * workstream) — every class below sets it.
+ *
+ * Architectural role:
+ * `features/content-types` domain logic. No dependencies.
+ */
+export declare class ForbiddenError extends Error {
+    constructor(message: string);
+}
+/** CIC U-002-B1 guard 1 — `key`/field-name grammar gate `^[a-z][a-z0-9_]{0,63}$` (U-001-B2). */
+export declare class InvalidKeyGrammarError extends Error {
+    constructor(message: string);
+}
+/** CIC U-002-B1 guard 2 — `key` is one of the permanently reserved legacy `posts` keys. */
+export declare class ReservedContentTypeKeyError extends Error {
+    constructor(message: string);
+}
+/** CIC U-002-B1 guard 3 — a field name fails the identifier grammar gate. */
+export declare class InvalidFieldNameGrammarError extends Error {
+    constructor(message: string);
+}
+/** CIC U-001-B1 / U-002-B1 guard 4 — a field `kind` is not one of the closed 5-entry enum. */
+export declare class InvalidFieldKindError extends Error {
+    constructor(message: string);
+}
+/**
+ * A `fields` payload whose STRUCTURE is wrong — not a value that failed a domain rule, but a
+ * shape the `ContentTypeFieldDef[]` contract does not describe at all (a non-array, a non-object
+ * element, a missing/mistyped `name`/`required`/`queryable`, or an unrecognized key).
+ *
+ * Distinct from the five CIC U-002-B1 guard errors on purpose: those judge a well-formed field
+ * definition against a domain rule, and they remain the sole owners of the grammar, kind-enum and
+ * queryable-cap decisions. This one fires strictly earlier, at the untrusted-input boundary
+ * (`field-defs.ts`), for payloads the guards could not have judged without either crashing or
+ * silently persisting a value of the wrong type.
+ *
+ * `violation.received` names the offending value's TYPE, never the value — a field payload can
+ * carry operator content, and this message reaches both an HTTP client and a model.
+ */
+export declare class InvalidFieldShapeError extends Error {
+    readonly code: "VALIDATION_ERROR";
+    readonly violation: {
+        path: string;
+        expected: string;
+        received: string;
+    };
+    constructor(violation: {
+        path: string;
+        expected: string;
+        received: string;
+    });
+}
+/** CIC U-002-B1 guard 5 — more than the per-type cap of `queryable` fields were submitted. */
+export declare class QueryableFieldCapExceededError extends Error {
+    constructor(message: string);
+}
+/** CIC U-004-B1 — `expectedVersion` did not match the current row's version (OCC conflict). */
+export declare class VersionConflictError extends Error {
+    constructor(message: string);
+}
+export declare class ContentTypeNotFoundError extends Error {
+    constructor(message: string);
+}
+/** A generic validation rejection carrying a stable machine-readable `details.reason`. */
+export declare class ValidationError extends Error {
+    readonly code: "VALIDATION_ERROR";
+    readonly details: {
+        reason: string;
+    };
+    constructor(message: string, reason: string);
+}
+/** REQ-09..12 lifecycle state-machine guard rejection (INV-06 terminal-tombstone, EC-09 deprecate-first). */
+export declare class ContentTypeLifecycleError extends Error {
+    constructor(message: string);
+}
+/** REQ-20 `planCleanup` eligibility-gate rejection; `reason` is one of a closed, ordered set. */
+export declare class CleanupNotEligibleError extends Error {
+    readonly reason: string;
+    constructor(reason: string, message?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/content-types/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/content-types/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED,gGAAgG;AAChG,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAED,2FAA2F;AAC3F,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAED,6EAA6E;AAC7E,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAED,8FAA8F;AAC9F,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAG,kBAAkB,CAAU;IAC5C,QAAQ,CAAC,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;gBAE7D,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;CAK5E;AAED,8FAA8F;AAC9F,qBAAa,8BAA+B,SAAQ,KAAK;gBAC3C,OAAO,EAAE,MAAM;CAI5B;AAED,+FAA+F;AAC/F,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAED,0FAA0F;AAC1F,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAG,kBAAkB,CAAU;IAC5C,QAAQ,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;gBAEzB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAED,6GAA6G;AAC7G,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAED,iGAAiG;AACjG,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;CAK7C"}

package/dist/content-types/errors.js

@@ -0,0 +1,119 @@
+/**
+ * @file Typed error surface for the `content-types` package.
+ *
+ * Purpose:
+ * Every rejection this package's write-service/lifecycle/cleanup/index-provisioning modules
+ * produce is one of these classes, never a bare `Error`/string, so callers (routes, agent tools,
+ * tests) can branch on `instanceof` or on `.name` without parsing a message.
+ *
+ * `class X extends Error {}` does NOT give an instance a `.name` of `"X"` on this runtime unless
+ * the constructor sets `this.name` explicitly (confirmed empirically in Session 2 of this
+ * workstream) — every class below sets it.
+ *
+ * Architectural role:
+ * `features/content-types` domain logic. No dependencies.
+ */
+export class ForbiddenError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ForbiddenError";
+    }
+}
+/** CIC U-002-B1 guard 1 — `key`/field-name grammar gate `^[a-z][a-z0-9_]{0,63}$` (U-001-B2). */
+export class InvalidKeyGrammarError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "InvalidKeyGrammarError";
+    }
+}
+/** CIC U-002-B1 guard 2 — `key` is one of the permanently reserved legacy `posts` keys. */
+export class ReservedContentTypeKeyError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ReservedContentTypeKeyError";
+    }
+}
+/** CIC U-002-B1 guard 3 — a field name fails the identifier grammar gate. */
+export class InvalidFieldNameGrammarError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "InvalidFieldNameGrammarError";
+    }
+}
+/** CIC U-001-B1 / U-002-B1 guard 4 — a field `kind` is not one of the closed 5-entry enum. */
+export class InvalidFieldKindError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "InvalidFieldKindError";
+    }
+}
+/**
+ * A `fields` payload whose STRUCTURE is wrong — not a value that failed a domain rule, but a
+ * shape the `ContentTypeFieldDef[]` contract does not describe at all (a non-array, a non-object
+ * element, a missing/mistyped `name`/`required`/`queryable`, or an unrecognized key).
+ *
+ * Distinct from the five CIC U-002-B1 guard errors on purpose: those judge a well-formed field
+ * definition against a domain rule, and they remain the sole owners of the grammar, kind-enum and
+ * queryable-cap decisions. This one fires strictly earlier, at the untrusted-input boundary
+ * (`field-defs.ts`), for payloads the guards could not have judged without either crashing or
+ * silently persisting a value of the wrong type.
+ *
+ * `violation.received` names the offending value's TYPE, never the value — a field payload can
+ * carry operator content, and this message reaches both an HTTP client and a model.
+ */
+export class InvalidFieldShapeError extends Error {
+    code = "VALIDATION_ERROR";
+    violation;
+    constructor(violation) {
+        super(`${violation.path} must be ${violation.expected}, received ${violation.received}`);
+        this.name = "InvalidFieldShapeError";
+        this.violation = violation;
+    }
+}
+/** CIC U-002-B1 guard 5 — more than the per-type cap of `queryable` fields were submitted. */
+export class QueryableFieldCapExceededError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "QueryableFieldCapExceededError";
+    }
+}
+/** CIC U-004-B1 — `expectedVersion` did not match the current row's version (OCC conflict). */
+export class VersionConflictError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "VersionConflictError";
+    }
+}
+export class ContentTypeNotFoundError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "CONTENT_TYPE_NOT_FOUND";
+    }
+}
+/** A generic validation rejection carrying a stable machine-readable `details.reason`. */
+export class ValidationError extends Error {
+    code = "VALIDATION_ERROR";
+    details;
+    constructor(message, reason) {
+        super(message);
+        this.name = "VALIDATION_ERROR";
+        this.details = { reason };
+    }
+}
+/** REQ-09..12 lifecycle state-machine guard rejection (INV-06 terminal-tombstone, EC-09 deprecate-first). */
+export class ContentTypeLifecycleError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ContentTypeLifecycleError";
+    }
+}
+/** REQ-20 `planCleanup` eligibility-gate rejection; `reason` is one of a closed, ordered set. */
+export class CleanupNotEligibleError extends Error {
+    reason;
+    constructor(reason, message) {
+        super(message ?? `cleanup is not eligible: ${reason}`);
+        this.name = "CleanupNotEligibleError";
+        this.reason = reason;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/content-types/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/content-types/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,gGAAgG;AAChG,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,2FAA2F;AAC3F,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,GAAG,kBAA2B,CAAC;IACnC,SAAS,CAAuD;IAEzE,YAAY,SAA+D;QACzE,KAAK,CAAC,GAAG,SAAS,CAAC,IAAI,YAAY,SAAS,CAAC,QAAQ,cAAc,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,0FAA0F;AAC1F,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,GAAG,kBAA2B,CAAC;IACnC,OAAO,CAAqB;IAErC,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;CACF;AAED,6GAA6G;AAC7G,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,iGAAiG;AACjG,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,MAAM,CAAS;IAExB,YAAY,MAAc,EAAE,OAAgB;QAC1C,KAAK,CAAC,OAAO,IAAI,4BAA4B,MAAM,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF"}

package/dist/content-types/field-defs.d.ts

@@ -0,0 +1,25 @@
+import { type ContentTypeFieldDef, type Result } from "./types.js";
+/**
+ * Validates an untrusted value against the `ContentTypeFieldDef[]` contract, returning either the
+ * verified array or the first structural violation found.
+ *
+ * Stops at the first violation rather than collecting all of them, matching the
+ * stop-at-first-failure convention CIC U-002-B1 already establishes for the domain guard chain
+ * this function feeds.
+ *
+ * @param value - The untrusted `fields` payload: a parsed JSON body's property, or an agent tool's
+ * `ctx.input.fields`. Any type is accepted as input; that is the point.
+ * @returns `{ok:true, value}` with an array whose every element is a verified
+ * {@link ContentTypeFieldDef}, or `{ok:false, error}` carrying an
+ * {@link InvalidFieldShapeError} (wrong structure, with the offending path) or an
+ * {@link InvalidFieldKindError} (well-formed string `kind` outside the closed enum).
+ * @throws Never. Every rejection is returned, including for inputs that previously threw.
+ * @complexity O(f·k) time with f = element count (bounded by {@link MAX_FIELD_DEFS}) and k = 4
+ * fixed keys, so effectively O(f); O(f) space for the returned array.
+ * @example
+ * const parsed = parseContentTypeFieldDefs([{ name: "servings", kind: "integer", required: false, queryable: true }]);
+ * if (!parsed.ok) return { ok: false, error: parsed.error };
+ * @overallScore 100
+ */
+export declare function parseContentTypeFieldDefs(value: unknown): Result<ContentTypeFieldDef[], Error>;
+//# sourceMappingURL=field-defs.d.ts.map

package/dist/content-types/field-defs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-defs.d.ts","sourceRoot":"","sources":["../../src/content-types/field-defs.ts"],"names":[],"mappings":"AA0CA,OAAO,EAA0B,KAAK,mBAAmB,EAAE,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAoC3F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,mBAAmB,EAAE,EAAE,KAAK,CAAC,CAmB9F"}

package/dist/content-types/field-defs.js

@@ -0,0 +1,155 @@
+/**
+ * @file The single untrusted-input boundary for a content type's `fields` payload — used by BOTH
+ * callers that accept one from outside the process: the admin HTTP routes
+ * (`server/routes/admin/content-types/{register,update-fields}.ts`) and the agent-tool handlers
+ * (`assistant/tool-registrations.ts`).
+ *
+ * Purpose:
+ * Before this module both call sites did the same two things: check `Array.isArray(body.fields)`
+ * and then cast the result to `ContentTypeFieldDef[]`. The cast was the whole of the nested-shape
+ * validation, which left three real gaps:
+ *
+ * 1. `required` and `queryable` were never type-checked anywhere in the codebase, so
+ *    `queryable: "yes"` counted as queryable (`write-service.ts`'s `countQueryableFields` filters
+ *    on truthiness) and `required: "maybe"` was persisted verbatim into the stored record and its
+ *    revision `stateJson`. That is a data-integrity gap, not merely a sloppy contract.
+ * 2. A non-object element (`fields: [null]`) made the field-name grammar guard throw a bare
+ *    `TypeError` on `field.name` instead of returning a typed rejection — a 500 on the HTTP path
+ *    and an opaque `'failed'` tool execution on the agent path.
+ * 3. A misspelled key (`queryible: true`) was silently dropped rather than reported, so a caller
+ *    got a field that was quietly non-queryable with no indication why.
+ *
+ * Division of responsibility (deliberate, and the reason this module is narrow):
+ * this module owns STRUCTURE only — array-ness, element object-ness, the four keys and their
+ * types. It does NOT own the domain rules. The field-name grammar gate, the reserved-key check and
+ * the queryable-field cap stay solely in `write-service.ts`'s CIC U-002-B1 guard chain, whose
+ * fixed order (`key grammar -> reserved-key -> field-name grammar -> field-kind -> queryable-cap`)
+ * and stop-at-first-failure behavior are pinned by
+ * `__tests__/unit/write-service.register.unit.test.ts` (AC-38). Duplicating any of those here
+ * would either reorder that chain for boundary callers or create a second source of truth for a
+ * rule that must have exactly one definition.
+ *
+ * The one exception is `kind`, and it is a reuse rather than a restatement: this module calls the
+ * same `isContentTypeFieldKind` predicate guard 4 calls and raises the same
+ * `InvalidFieldKindError` guard 4 raises. Verifying it here is what lets this function honestly
+ * return `ContentTypeFieldDef[]` instead of handing back another unchecked cast. Both call sites
+ * already map that error class to `400 VALIDATION_ERROR`, so no HTTP response shape changes.
+ *
+ * Architectural role:
+ * `features/content-types` domain logic. Pure — no I/O, no clock, no repo. Depends only on this
+ * package's own `types.ts` and `errors.ts`.
+ */
+import { InvalidFieldKindError, InvalidFieldShapeError } from "./errors.js";
+import { isContentTypeFieldKind } from "./types.js";
+/**
+ * The complete, closed key set of a `ContentTypeFieldDef`. Any other key is rejected rather than
+ * ignored — silently dropping an unrecognized key is how a typo'd `queryible: true` became a
+ * quietly non-queryable field with no error to act on.
+ */
+const FIELD_DEF_KEYS = ["name", "kind", "required", "queryable"];
+/**
+ * Upper bound on how many field definitions one payload may carry.
+ *
+ * Not a product rule — a resource bound. `fields` is a caller-supplied, previously unbounded
+ * collection: the existing `QUERYABLE_FIELD_CAP` (20, `write-service.ts`) limits only the
+ * `queryable` subset, so a payload of a million non-queryable fields was accepted and persisted
+ * as one JSON blob. Deliberately far above any plausible real content type so it can never act as
+ * a product constraint; if a legitimate schema ever approaches it, raise it rather than working
+ * around it.
+ */
+const MAX_FIELD_DEFS = 500;
+/**
+ * Names the offending value's TYPE for an error message that must never echo operator content.
+ * Article chosen by initial vowel because two `typeof` results ("object", "undefined") take "an".
+ */
+function describeType(value) {
+    if (value === null)
+        return "null";
+    if (Array.isArray(value))
+        return "an array";
+    const type = typeof value;
+    return `${/^[aeiou]/.test(type) ? "an" : "a"} ${type}`;
+}
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+ * Validates an untrusted value against the `ContentTypeFieldDef[]` contract, returning either the
+ * verified array or the first structural violation found.
+ *
+ * Stops at the first violation rather than collecting all of them, matching the
+ * stop-at-first-failure convention CIC U-002-B1 already establishes for the domain guard chain
+ * this function feeds.
+ *
+ * @param value - The untrusted `fields` payload: a parsed JSON body's property, or an agent tool's
+ * `ctx.input.fields`. Any type is accepted as input; that is the point.
+ * @returns `{ok:true, value}` with an array whose every element is a verified
+ * {@link ContentTypeFieldDef}, or `{ok:false, error}` carrying an
+ * {@link InvalidFieldShapeError} (wrong structure, with the offending path) or an
+ * {@link InvalidFieldKindError} (well-formed string `kind` outside the closed enum).
+ * @throws Never. Every rejection is returned, including for inputs that previously threw.
+ * @complexity O(f·k) time with f = element count (bounded by {@link MAX_FIELD_DEFS}) and k = 4
+ * fixed keys, so effectively O(f); O(f) space for the returned array.
+ * @example
+ * const parsed = parseContentTypeFieldDefs([{ name: "servings", kind: "integer", required: false, queryable: true }]);
+ * if (!parsed.ok) return { ok: false, error: parsed.error };
+ * @overallScore 100
+ */
+export function parseContentTypeFieldDefs(value) {
+    if (!Array.isArray(value)) {
+        return { ok: false, error: new InvalidFieldShapeError({ path: "fields", expected: "an array", received: describeType(value) }) };
+    }
+    if (value.length > MAX_FIELD_DEFS) {
+        return {
+            ok: false,
+            error: new InvalidFieldShapeError({ path: "fields", expected: `at most ${MAX_FIELD_DEFS} entries`, received: `an array of ${value.length}` }),
+        };
+    }
+    const parsed = [];
+    for (const [index, element] of value.entries()) {
+        const one = parseOneFieldDef(element, `fields[${index}]`);
+        if (!one.ok)
+            return one;
+        parsed.push(one.value);
+    }
+    return { ok: true, value: parsed };
+}
+/**
+ * Validates one element of the `fields` array. Split out of {@link parseContentTypeFieldDefs} so
+ * the guard sequence sits flat at one nesting level instead of inside the array loop — the checks,
+ * their order, and the exact error each returns are unchanged, and the first failure still
+ * short-circuits the whole parse.
+ *
+ * @complexity O(k) with k = 4 fixed keys.
+ */
+function parseOneFieldDef(element, at) {
+    if (!isPlainObject(element)) {
+        return { ok: false, error: new InvalidFieldShapeError({ path: at, expected: "an object", received: describeType(element) }) };
+    }
+    const unrecognized = Object.keys(element).find((key) => !FIELD_DEF_KEYS.includes(key));
+    if (unrecognized !== undefined) {
+        return {
+            ok: false,
+            error: new InvalidFieldShapeError({ path: `${at}.${unrecognized}`, expected: `absent (allowed keys: ${FIELD_DEF_KEYS.join(", ")})`, received: "an unrecognized key" }),
+        };
+    }
+    // `name` is checked for string-ness only — its grammar belongs to guard 3. Checking it here is
+    // what stops that guard from receiving a non-string and throwing inside `RegExp.test`.
+    if (typeof element.name !== "string") {
+        return { ok: false, error: new InvalidFieldShapeError({ path: `${at}.name`, expected: "a string", received: describeType(element.name) }) };
+    }
+    if (typeof element.required !== "boolean") {
+        return { ok: false, error: new InvalidFieldShapeError({ path: `${at}.required`, expected: "a boolean", received: describeType(element.required) }) };
+    }
+    if (typeof element.queryable !== "boolean") {
+        return { ok: false, error: new InvalidFieldShapeError({ path: `${at}.queryable`, expected: "a boolean", received: describeType(element.queryable) }) };
+    }
+    if (typeof element.kind !== "string") {
+        return { ok: false, error: new InvalidFieldShapeError({ path: `${at}.kind`, expected: "a string", received: describeType(element.kind) }) };
+    }
+    if (!isContentTypeFieldKind(element.kind)) {
+        return { ok: false, error: new InvalidFieldKindError(`field '${element.name}' has kind '${element.kind}', not one of the closed field-kind enum`) };
+    }
+    return { ok: true, value: { name: element.name, kind: element.kind, required: element.required, queryable: element.queryable } };
+}
+//# sourceMappingURL=field-defs.js.map

package/dist/content-types/field-defs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-defs.js","sourceRoot":"","sources":["../../src/content-types/field-defs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAyC,MAAM,YAAY,CAAC;AAE3F;;;;GAIG;AACH,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAE1E;;;;;;;;;GASG;AACH,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC;IAC1B,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACnI,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QAClC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,cAAc,UAAU,EAAE,QAAQ,EAAE,eAAe,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;SAC9I,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,EAAE,UAAU,KAAK,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,OAAgB,EAAE,EAAU;IACpD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;IAChI,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAE,cAAoC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9G,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,YAAY,EAAE,EAAE,QAAQ,EAAE,yBAAyB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CAAC;SACvK,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,uFAAuF;IACvF,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAC9I,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IACvJ,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;IACzJ,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAC9I,CAAC;IACD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,qBAAqB,CAAC,UAAU,OAAO,CAAC,IAAI,eAAe,OAAO,CAAC,IAAI,0CAA0C,CAAC,EAAE,CAAC;IACtJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;AACnI,CAAC"}

package/dist/content-types/index-provisioning.d.ts

@@ -0,0 +1,94 @@
+import { type ContentTypeFieldKind } from "./types.js";
+/**
+ * @file CIC U-001 — the `kind`->`CAST` fixed lookup table, the identifier grammar
+ * gate, the workspace-scoped queryable-index naming scheme, and the before/after index-transition
+ * resolver (grammar-and-workspace-scoping folds).
+ *
+ * Purpose:
+ * THIS IS THE HIGHEST-SECURITY-SEVERITY MODULE IN THE 5-PACKAGE PIPELINE — every value that ends
+ * up inside a `CREATE INDEX ... CAST(json_extract(fields,'$.ext.{ns}.{field}') AS {type})`
+ * statement is produced here, and only here:
+ *   - `mapFieldKindToCast` never interpolates an operator-supplied string — it is a fixed,
+ *     hardcoded 5-entry table (U-001-B1).
+ *   - `validateIdentifierGrammar`/`buildQueryableFieldIndexName` gate every `key`/field name
+ *     through `^[a-z][a-z0-9_]{0,63}$` before it can reach an index-name segment or JSON-path
+ *     literal (U-001-B2), and join grammar-gated segments with `/` — a delimiter outside the
+ *     grammar's own alphabet `[a-z0-9_]`, closing the namespace-injectivity collision class
+ *     (U-001-B3) — and fold in a workspace-derived segment so two workspaces defining the same
+ *     `(key, field)` pair never collide on index identity.
+ *
+ * How it relates to the project:
+ * `write-service.ts`'s `registerContentType`/`updateContentTypeFields` call
+ * `resolveFieldIndexTransition` once per field (never two independent kind/queryable branches —
+ * CIC U-003-B1) and hand the result to the injected `indexProvisioner` port, which is the only
+ * thing that ever issues the real `CREATE INDEX`/`DROP INDEX` DDL (this module only decides what
+ * to build, never executes DDL itself).
+ *
+ * Architectural role:
+ * `features/content-types` domain logic. No dependencies beyond `node:crypto` (workspace-segment
+ * hashing) and this package's own `errors.ts`/`types.ts`.
+ */
+/**
+ * U-001-B2 — the closed identifier grammar every `content_types.key` and field name must satisfy,
+ * as a pattern string so the agent-facing JSON Schemas in `agent-tools.ts` can publish the very
+ * same grammar instead of restating it. A cross-cutting single-source-of-truth governance rule makes this grammar load-bearing for DDL
+ * safety, so it must have exactly one definition; {@link IDENTIFIER_GRAMMAR} is compiled from this
+ * string rather than written twice.
+ */
+export declare const IDENTIFIER_GRAMMAR_PATTERN = "^[a-z][a-z0-9_]{0,63}$";
+/**
+ * Structural grammar gate for a `content_types.key` or field name (U-001-B2).
+ *
+ * @complexity O(n) in the string's length (regex match), bounded at 64 chars.
+ * @overallScore 100
+ */
+export declare function validateIdentifierGrammar(value: string): boolean;
+/**
+ * Maps a closed-enum field `kind` to its fixed `CAST(... AS {type})` type token. Throws
+ * {@link InvalidFieldKindError} for anything not exactly one of the 5 enum values — this is a
+ * lookup, never a template, so an adversarial payload can never reach the returned string
+ * (U-001-B1).
+ *
+ * @complexity O(1) — a fixed-size object lookup.
+ * @overallScore 100
+ */
+export declare function mapFieldKindToCast(kind: ContentTypeFieldKind): string;
+/**
+ * Builds the workspace-scoped queryable-field index identity for `(workspaceId, contentTypeKey,
+ * fieldName)`. Both `contentTypeKey` and `fieldName` are grammar-gated first — a failure throws
+ * before any index name is produced (U-001-B2). Segments are joined with `/`, a delimiter outside
+ * the grammar's own alphabet `[a-z0-9_]`, so distinct `(key, name)` pairs can never collide by
+ * boundary-shifting (U-001-B3, e.g. `("a_b","c")` vs `("a","b_c")`).
+ *
+ * @complexity O(1) plus two grammar checks and one SHA-256 hash.
+ * @overallScore 100
+ */
+export declare function buildQueryableFieldIndexName(params: {
+    workspaceId: string;
+    contentTypeKey: string;
+    fieldName: string;
+}): string;
+/** A field's `(kind, queryable)` pair at one side of an update call, or `undefined` if absent (new/removed). */
+export type FieldIndexState = {
+    kind: ContentTypeFieldKind;
+    queryable: boolean;
+} | undefined;
+export interface FieldIndexTransition {
+    action: "none" | "provision" | "teardown" | "reprovision";
+    /** Present only for `provision`/`reprovision` — always the field's POST-call kind. */
+    newKind?: ContentTypeFieldKind;
+}
+/**
+ * CIC U-003-B1 — resolves a single field's index transition from ONE before/after comparison of
+ * its `(kind, queryable)` pair, never from two independent branches that each assume the other
+ * property is unchanged (the bug class this closes: a field whose `kind` AND `queryable` both
+ * change in the same call must still resolve correctly — REQ-30(b)).
+ *
+ * @complexity O(1) — four comparisons, one of four fixed outcomes.
+ * @overallScore 100
+ */
+export declare function resolveFieldIndexTransition(params: {
+    before: FieldIndexState;
+    after: FieldIndexState;
+}): FieldIndexTransition;
+//# sourceMappingURL=index-provisioning.d.ts.map

package/dist/content-types/index-provisioning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-provisioning.d.ts","sourceRoot":"","sources":["../../src/content-types/index-provisioning.ts"],"names":[],"mappings":"AAGA,OAAO,EAA4B,KAAK,oBAAoB,EAA0B,MAAM,YAAY,CAAC;AAEzG;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AAKnE;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEhE;AAcD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,GAAG,MAAM,CAOrE;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CAYT;AAED,gHAAgH;AAChH,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,CAAC;AAE7F,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;IAC1D,sFAAsF;IACtF,OAAO,CAAC,EAAE,oBAAoB,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,eAAe,CAAC;CACxB,GAAG,oBAAoB,CAWvB"}