@jini-ai/cms 0.1.0

package/dist/content-types/list.d.ts

@@ -0,0 +1,44 @@
+import type { ContentTypeRecord } from "./types.js";
+/**
+ * @file Admin-UI backend-gap closure (design-spec.md §1.9) — the `content_types` registry's
+ * missing read side. `write-service.ts`/`lifecycle.ts` were fully built and tested with no way to
+ * list what had been written; this is that read.
+ *
+ * Purpose:
+ * `listContentTypes` mirrors `features/database/timeline.ts`'s `getTimeline` shape exactly: a thin
+ * pass-through over an injected read port, no authorization/business logic of its own (the caller
+ * route checks `admin.collections.read` before calling this, same division of labor
+ * `routes/admin/database/timeline.ts` already established).
+ *
+ * How it relates to the project:
+ * `ContentTypeListPort` is deliberately a NEW, narrower port — not an addition to
+ * `write-service.ts`'s `ContentTypeRepoPort` — so a caller who only needs read access
+ * (`routes/admin/content-types/list.ts`) can be typed against just this port, matching this
+ * codebase's port-segregation convention (`LedgerReadPort` vs `BootLedgerPort` on the same
+ * underlying table, `db/sqlite/database-journal-repo.ts`). The concrete adapter
+ * (`repo.memory.ts`'s `InMemoryContentTypeRepo`) implements both this and `ContentTypeRepoPort`.
+ *
+ * Architectural role:
+ * `features/content-types` domain logic. Depends only on this package's own `types.ts`.
+ */
+export interface ContentTypeListPort {
+    /** Every content type registered for `workspaceId`, in no particular guaranteed order (the
+     * route layer is free to sort for display; the original design does not specify a canonical list order). */
+    listByWorkspace(params: {
+        workspaceId: string;
+    }): Promise<ContentTypeRecord[]>;
+}
+/**
+ * Lists every content type registered in `workspaceId`.
+ *
+ * @complexity O(1) plus one `ContentTypeListPort.listByWorkspace()` call (the port owns the actual
+ * scan cost).
+ * @overallScore 100
+ */
+export declare function listContentTypes(required: {
+    repo: ContentTypeListPort;
+    workspaceId: string;
+}, _optional?: Record<string, never>): Promise<{
+    items: ContentTypeRecord[];
+}>;
+//# sourceMappingURL=list.d.ts.map

package/dist/content-types/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../src/content-types/list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,mBAAmB;IAClC;gHAC4G;IAC5G,eAAe,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;CAChF;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAC5D,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAM,GACpC,OAAO,CAAC;IAAE,KAAK,EAAE,iBAAiB,EAAE,CAAA;CAAE,CAAC,CAIzC"}

package/dist/content-types/list.js

@@ -0,0 +1,13 @@
+/**
+ * Lists every content type registered in `workspaceId`.
+ *
+ * @complexity O(1) plus one `ContentTypeListPort.listByWorkspace()` call (the port owns the actual
+ * scan cost).
+ * @overallScore 100
+ */
+export async function listContentTypes(required, _optional = {}) {
+    const { repo, workspaceId } = required;
+    const items = await repo.listByWorkspace({ workspaceId });
+    return { items };
+}
+//# sourceMappingURL=list.js.map

package/dist/content-types/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/content-types/list.ts"],"names":[],"mappings":"AA+BA;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAA4D,EAC5D,YAAmC,EAAE;IAErC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1D,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/content-types/repo.memory.d.ts

@@ -0,0 +1,72 @@
+import type { ContentTypeRepoPort, ContentTypeRevisionInput, IndexProvisionerPort, OutboxPort } from "./write-service.js";
+import type { TeardownIndexProvisionerPort } from "./lifecycle.js";
+import type { ContentTypeListPort } from "./list.js";
+import type { ContentTypeRecord } from "./types.js";
+/**
+ * @file In-memory adapters for the `content-types` package's write/list ports (port/adapter rule-of-two
+ * "one being built now" half). Backs `server/app.ts`'s hermetic test/dev composition AND, until a
+ * real SQLite adapter is built for this domain (a disclosed gap — see this dispatch's handoff),
+ * `server/deps.ts`'s real running-server composition too — the same precedent `mediaRepo`/
+ * `transformDefinitionRepo`/`memberRepo` already establish in both those files (in-process,
+ * non-persistent-across-restarts rows are an accepted stand-in until each domain gets its own
+ * `repo.sqlite.ts`).
+ */
+/** In-memory `ContentTypeRepoPort` + `ContentTypeListPort` double, keyed by `(workspaceId, key)`. */
+export declare class InMemoryContentTypeRepo implements ContentTypeRepoPort, ContentTypeListPort {
+    private readonly rows;
+    private readonly revisions;
+    private static key;
+    save(row: ContentTypeRecord): Promise<void>;
+    appendRevision(revision: ContentTypeRevisionInput): Promise<void>;
+    /**
+     * The append-only revision log, oldest first. Not part of `ContentTypeRepoPort` — the domain only
+     * ever appends. Exposed so route-level tests can assert what provenance
+     * (`actorId`/`principalKind`) a write actually recorded, which is otherwise unobservable in the
+     * hermetic in-memory composition; `SqliteContentTypeRepo`'s equivalent is a plain table read.
+     *
+     * @complexity O(n) in the number of recorded revisions (defensive copy).
+     * @overallScore 100
+     */
+    listRevisions(): ContentTypeRevisionInput[];
+    findByKey(params: {
+        workspaceId: string;
+        key: string;
+    }): Promise<ContentTypeRecord | null>;
+    transaction<T>(fn: () => Promise<T>): Promise<T>;
+    listByWorkspace(params: {
+        workspaceId: string;
+    }): Promise<ContentTypeRecord[]>;
+}
+/** In-memory `IndexProvisionerPort` + `TeardownIndexProvisionerPort` no-op double. Real DDL index
+ * provisioning (`index-provisioning.ts`'s CAST-mapping) targets `content.db` tables this domain
+ * has no SQLite adapter for yet (see this file's header) — a no-op here is honest given that, not
+ * a shortcut around a working implementation. */
+export declare class NoopContentTypeIndexProvisioner implements IndexProvisionerPort, TeardownIndexProvisionerPort {
+    provisionIndexesForNewContentType(): Promise<void>;
+    applyFieldIndexTransitions(): Promise<void>;
+    tearDownAllIndexesForContentType(): Promise<void>;
+}
+/** Adapts a real `core/ports` `OutboxPort` (`{name,payload}` -> full `DomainEvent`) into the
+ * narrower `{enqueue({name,payload})}` shape this package's write-service/lifecycle modules
+ * declare locally (mirrors their own "no shared import, kept decoupled" convention). */
+export declare function toContentTypeOutbox(deps: {
+    outbox: {
+        enqueue(event: {
+            id: string;
+            workspaceId: string;
+            name: string;
+            occurredAt: string;
+            payload: Record<string, unknown>;
+        }): Promise<void>;
+    };
+    clock: {
+        nowIso(): string;
+    };
+    idGen: {
+        newId(): string;
+    };
+    /** Required — see `entries/repo.memory.ts`'s `toEntryOutbox` for the full rationale (workspace
+     * tenant boundary, NOT NULL in persistent adapters, previously under-declared and omitted). */
+    workspaceId: string;
+}): OutboxPort;
+//# sourceMappingURL=repo.memory.d.ts.map

package/dist/content-types/repo.memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.memory.d.ts","sourceRoot":"","sources":["../../src/content-types/repo.memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC1H,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD;;;;;;;;GAQG;AAEH,qGAAqG;AACrG,qBAAa,uBAAwB,YAAW,mBAAmB,EAAE,mBAAmB;IACtF,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAwC;IAC7D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;IAE5D,OAAO,CAAC,MAAM,CAAC,GAAG;IAIZ,IAAI,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,cAAc,CAAC,QAAQ,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvE;;;;;;;;OAQG;IACH,aAAa,IAAI,wBAAwB,EAAE;IAIrC,SAAS,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAK1F,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIhD,eAAe,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;CAGrF;AAED;;;iDAGiD;AACjD,qBAAa,+BAAgC,YAAW,oBAAoB,EAAE,4BAA4B;IAClG,iCAAiC,IAAI,OAAO,CAAC,IAAI,CAAC;IAClD,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IAC3C,gCAAgC,IAAI,OAAO,CAAC,IAAI,CAAC;CACxD;AAED;;wFAEwF;AACxF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,MAAM,EAAE;QACN,OAAO,CAAC,KAAK,EAAE;YACb,EAAE,EAAE,MAAM,CAAC;YACX,WAAW,EAAE,MAAM,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC;YACb,UAAU,EAAE,MAAM,CAAC;YACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SAClC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACnB,CAAC;IACF,KAAK,EAAE;QAAE,MAAM,IAAI,MAAM,CAAA;KAAE,CAAC;IAC5B,KAAK,EAAE;QAAE,KAAK,IAAI,MAAM,CAAA;KAAE,CAAC;IAC3B;mGAC+F;IAC/F,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,UAAU,CAYb"}

package/dist/content-types/repo.memory.js

@@ -0,0 +1,71 @@
+/**
+ * @file In-memory adapters for the `content-types` package's write/list ports (port/adapter rule-of-two
+ * "one being built now" half). Backs `server/app.ts`'s hermetic test/dev composition AND, until a
+ * real SQLite adapter is built for this domain (a disclosed gap — see this dispatch's handoff),
+ * `server/deps.ts`'s real running-server composition too — the same precedent `mediaRepo`/
+ * `transformDefinitionRepo`/`memberRepo` already establish in both those files (in-process,
+ * non-persistent-across-restarts rows are an accepted stand-in until each domain gets its own
+ * `repo.sqlite.ts`).
+ */
+/** In-memory `ContentTypeRepoPort` + `ContentTypeListPort` double, keyed by `(workspaceId, key)`. */
+export class InMemoryContentTypeRepo {
+    rows = new Map();
+    revisions = [];
+    static key(workspaceId, key) {
+        return `${workspaceId}::${key}`;
+    }
+    async save(row) {
+        this.rows.set(InMemoryContentTypeRepo.key(row.workspaceId, row.key), { ...row });
+    }
+    async appendRevision(revision) {
+        this.revisions.push(revision);
+    }
+    /**
+     * The append-only revision log, oldest first. Not part of `ContentTypeRepoPort` — the domain only
+     * ever appends. Exposed so route-level tests can assert what provenance
+     * (`actorId`/`principalKind`) a write actually recorded, which is otherwise unobservable in the
+     * hermetic in-memory composition; `SqliteContentTypeRepo`'s equivalent is a plain table read.
+     *
+     * @complexity O(n) in the number of recorded revisions (defensive copy).
+     * @overallScore 100
+     */
+    listRevisions() {
+        return this.revisions.map((revision) => ({ ...revision }));
+    }
+    async findByKey(params) {
+        const row = this.rows.get(InMemoryContentTypeRepo.key(params.workspaceId, params.key));
+        return row ? { ...row } : null;
+    }
+    async transaction(fn) {
+        return fn();
+    }
+    async listByWorkspace(params) {
+        return [...this.rows.values()].filter((row) => row.workspaceId === params.workspaceId).map((row) => ({ ...row }));
+    }
+}
+/** In-memory `IndexProvisionerPort` + `TeardownIndexProvisionerPort` no-op double. Real DDL index
+ * provisioning (`index-provisioning.ts`'s CAST-mapping) targets `content.db` tables this domain
+ * has no SQLite adapter for yet (see this file's header) — a no-op here is honest given that, not
+ * a shortcut around a working implementation. */
+export class NoopContentTypeIndexProvisioner {
+    async provisionIndexesForNewContentType() { }
+    async applyFieldIndexTransitions() { }
+    async tearDownAllIndexesForContentType() { }
+}
+/** Adapts a real `core/ports` `OutboxPort` (`{name,payload}` -> full `DomainEvent`) into the
+ * narrower `{enqueue({name,payload})}` shape this package's write-service/lifecycle modules
+ * declare locally (mirrors their own "no shared import, kept decoupled" convention). */
+export function toContentTypeOutbox(deps) {
+    return {
+        enqueue: async (event) => {
+            await deps.outbox.enqueue({
+                id: deps.idGen.newId(),
+                workspaceId: deps.workspaceId,
+                name: event.name,
+                occurredAt: deps.clock.nowIso(),
+                payload: event.payload,
+            });
+        },
+    };
+}
+//# sourceMappingURL=repo.memory.js.map

package/dist/content-types/repo.memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.memory.js","sourceRoot":"","sources":["../../src/content-types/repo.memory.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AAEH,qGAAqG;AACrG,MAAM,OAAO,uBAAuB;IACjB,IAAI,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC5C,SAAS,GAA+B,EAAE,CAAC;IAEpD,MAAM,CAAC,GAAG,CAAC,WAAmB,EAAE,GAAW;QACjD,OAAO,GAAG,WAAW,KAAK,GAAG,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAsB;QAC/B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAkC;QACrD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;;;OAQG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAA4C;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACvF,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,WAAW,CAAI,EAAoB;QACvC,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAA+B;QACnD,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;IACpH,CAAC;CACF;AAED;;;iDAGiD;AACjD,MAAM,OAAO,+BAA+B;IAC1C,KAAK,CAAC,iCAAiC,KAAmB,CAAC;IAC3D,KAAK,CAAC,0BAA0B,KAAmB,CAAC;IACpD,KAAK,CAAC,gCAAgC,KAAmB,CAAC;CAC3D;AAED;;wFAEwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,IAenC;IACC,OAAO;QACL,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBACxB,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;gBACtB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/content-types/tool-registrations.d.ts

@@ -0,0 +1,65 @@
+/**
+ * @file Content-types' half of the agent-tool authorization wiring: maps `agent-tools.ts`'s catalog entries onto the
+ * `write-service.ts`/`lifecycle.ts` functions the admin HTTP routes call, as `ToolRegistration`s.
+ *
+ * Colocated with the domain rather than in `assistant/`, so the knowledge this file depends on —
+ * which domain function each tool id runs, and therefore what it actually costs — lives next to
+ * those functions. `assistant/tool-registrations.ts` only assembles what every domain returns.
+ *
+ * Scope: 6 of 7 entries are wired — the 5 non-cleanup mutations plus the read-only
+ * `collections_content_type_list`. `collections_plan_cleanup`/`collections_execute_cleanup` are
+ * declared unwired — the destructive token-gated ceremony, whose mapping is deferred per this
+ * catalog's own deferred list. `ToolRegistry.list()` will not show them, which is intentional: no silent stub
+ * registrations that could look like a bug if ever actually invoked.
+ *
+ * `ToolPolicy.authorize` is a pass-through for every entry here (see `buildDomainRegistrations`).
+ * For the five mutations, that is the "one evaluator" rule: each domain entrypoint —
+ * `registerContentType`, `updateContentTypeFields` (`write-service.ts`), `deprecateContentType`,
+ * `reactivateContentType`, `tombstoneContentType` (`lifecycle.ts`) — opens with an
+ * `await deps.authorize({ permission: 'admin.collections.manage', ... })` that returns
+ * `ForbiddenError` before any repo read, repo write, or index-provisioner call, and
+ * `admin.collections.manage` is exactly what each of their five catalog entries declares under
+ * `authorization.permission`. `assistant/__tests__/tool-registrations.authorization.test.ts` drives
+ * all five through a denying `authorize` and asserts each refuses and writes nothing, deriving its
+ * expectations from the catalog itself — so a future tool wired here whose handler does NOT
+ * self-enforce fails rather than silently inheriting the pass-through.
+ *
+ * `collections_content_type_list` is the exception: `listContentTypes` (`list.ts`) is a pure
+ * pass-through read with no `authorize()` call of its own — exactly like `routes/admin/content-
+ * types/list.ts`, which checks `admin.collections.read` in the route BEFORE calling it. Its handler
+ * below does the identical explicit `requireToolPermission` check, in the route's place, the same
+ * pattern `comments/tool-registrations.ts` uses for `comments_list_moderation_queue`.
+ */
+import type { AuthorizeFn } from "../core/commands/command.js";
+import type { OutboxPort } from "../core/ports.js";
+import { type DerivedRiskByToolId, type ToolRegistration } from "../core/tools/registration-kit.js";
+import { type ContentTypeListPort } from "./list.js";
+import { type TeardownIndexProvisionerPort } from "./lifecycle.js";
+import { type ContentTypeRepoPort, type IndexProvisionerPort } from "./write-service.js";
+/**
+ * The exact slice of the route-deps bag Content-Types' tool handlers read. Declared structurally
+ * (rather than importing `server/routes/types`'s `RouteDeps`) so this module carries no back-edge
+ * into the composition root. `server/routes/*` satisfies this structurally by passing its existing
+ * `RouteDeps` object; nothing there changes.
+ */
+export interface ContentTypesToolDeps {
+    authorize: AuthorizeFn;
+    workspaceId: string;
+    clock: {
+        nowIso(): string;
+    };
+    idGen: {
+        newId(): string;
+    };
+    outbox: OutboxPort;
+    contentTypeRepo: ContentTypeRepoPort & ContentTypeListPort;
+    contentTypeIndexProvisioner: IndexProvisionerPort & TeardownIndexProvisionerPort;
+}
+/**
+ * This wiring layer's OWN risk classification, authored from what each handler below actually
+ * calls — deliberately a second, independent source rather than a read of the catalog's own
+ * `sideEffects` field. See `DerivedRiskByToolId` in the kit for why that independence matters.
+ */
+export declare const contentTypesDerivedRisk: DerivedRiskByToolId;
+export declare function buildContentTypesRegistrations(routeDeps: ContentTypesToolDeps): ToolRegistration[];
+//# sourceMappingURL=tool-registrations.d.ts.map

package/dist/content-types/tool-registrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registrations.d.ts","sourceRoot":"","sources":["../../src/content-types/tool-registrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAYL,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACtB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,EAAoB,KAAK,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACvE,OAAO,EAAqE,KAAK,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAEtI,OAAO,EAAgD,KAAK,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAIvI;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,WAAW,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE;QAAE,MAAM,IAAI,MAAM,CAAA;KAAE,CAAC;IAC5B,KAAK,EAAE;QAAE,KAAK,IAAI,MAAM,CAAA;KAAE,CAAC;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,eAAe,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAC3D,2BAA2B,EAAE,oBAAoB,GAAG,4BAA4B,CAAC;CAClF;AAKD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,mBAcpC,CAAC;AA6EH,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,oBAAoB,GAAG,gBAAgB,EAAE,CAmGlG"}

package/dist/content-types/tool-registrations.js

@@ -0,0 +1,180 @@
+import { AGENT_TOOL_PRINCIPAL_KIND, buildDomainRegistrations, decorateWithSchema, fromResult, indexCatalogById, requireInputRecord, requireNoInput, requireNumber, requireString, requireToolPermission, } from "../core/tools/registration-kit.js";
+import { contentTypesAgentToolCatalog } from "./agent-tools.js";
+import { parseContentTypeFieldDefs } from "./field-defs.js";
+import { listContentTypes } from "./list.js";
+import { deprecateContentType, reactivateContentType, tombstoneContentType } from "./lifecycle.js";
+import { registerContentType, updateContentTypeFields } from "./write-service.js";
+const CATALOG_BY_ID = indexCatalogById(contentTypesAgentToolCatalog);
+/** Descriptors for the 2 cleanup tools this pass does not wire — see file header. */
+const UNWIRED_CONTENT_TYPES_TOOL_IDS = new Set(["collections_plan_cleanup", "collections_execute_cleanup"]);
+/**
+ * This wiring layer's OWN risk classification, authored from what each handler below actually
+ * calls — deliberately a second, independent source rather than a read of the catalog's own
+ * `sideEffects` field. See `DerivedRiskByToolId` in the kit for why that independence matters.
+ */
+export const contentTypesDerivedRisk = new Map([
+    // -> listContentTypes (list.ts): one repo.listByWorkspace read, no write of any kind.
+    ["collections_content_type_list", "none"],
+    // -> registerContentType (write-service.ts): repo.save + appendRevision in one tx.
+    ["collections_content_type_define", "mutates-durable-state"],
+    // -> updateContentTypeFields (write-service.ts): full field-schema replace + index transitions.
+    ["collections_content_type_update_fields", "mutates-durable-state"],
+    // -> deprecateContentType (lifecycle.ts): status flip + revision.
+    ["collections_content_type_deprecate", "mutates-durable-state"],
+    // -> reactivateContentType (lifecycle.ts): status flip + revision.
+    ["collections_content_type_reactivate", "mutates-durable-state"],
+    // -> tombstoneContentType (lifecycle.ts): one-way terminal transition that tears down every
+    //    provisioned index BEFORE persisting the flip. The heaviest of the five.
+    ["collections_content_type_tombstone", "mutates-durable-state"],
+]);
+/**
+ * Validates `input.fields` through the SAME boundary parser the admin HTTP routes use
+ * (`field-defs.ts`), then re-throws any rejection with the tool's published `inputSchema` appended.
+ *
+ * The appended schema is the error-recovery half of the contract: a model that gets back only
+ * "fields[0].queryable must be a boolean" has to guess the rest of the shape, whereas one that
+ * gets the schema alongside it can correct the call in a single turn.
+ *
+ * @complexity O(f) in the field count, delegated to the parser.
+ * @overallScore 100
+ */
+function requireFields(input, toolId) {
+    const parsed = parseContentTypeFieldDefs(input.fields);
+    if (parsed.ok)
+        return parsed.value;
+    throw decorateWithSchema({ toolId, catalog: CATALOG_BY_ID, message: parsed.error.message });
+}
+/**
+ * Projects a `ContentTypeRecord` into the explicit model-facing shape, instead of returning the
+ * domain record verbatim.
+ *
+ * Two reasons this is a named projection rather than a pass-through. `workspaceId` is dropped: the
+ * agent is already scoped to one workspace it did not choose and cannot change, so echoing the id
+ * back spends model attention on a value that can never inform a decision. And an explicit view
+ * means a future field added to `ContentTypeRecord` — for a plugin, an internal counter, an
+ * operator note — does not silently begin flowing to the model as a side effect of a domain change.
+ *
+ * `version` is deliberately kept: every mutating tool requires `expectedVersion`, so the model
+ * needs the post-write value to make a correct follow-up call without re-reading.
+ *
+ * @param record - The content type as the domain returned it.
+ * @returns The model-facing view. `tombstonedAt` is present only when set, so an active type's
+ * payload carries no always-null key.
+ * @complexity O(f) in the field count (the array is copied so the caller cannot alias domain state).
+ * @overallScore 100
+ */
+function toContentTypeView(record) {
+    const view = {
+        key: record.key,
+        label: record.label,
+        status: record.status,
+        version: record.version,
+        fields: [...record.fields],
+    };
+    if (record.tombstonedAt)
+        view.tombstonedAt = record.tombstonedAt;
+    return view;
+}
+function fromContentTypeResult(fn) {
+    return fromResult(fn).then(({ contentType }) => ({ contentType: toContentTypeView(contentType) }));
+}
+function contentTypesDeps(routeDeps) {
+    return {
+        repo: routeDeps.contentTypeRepo,
+        clock: routeDeps.clock,
+        ids: routeDeps.idGen,
+        authorize: routeDeps.authorize,
+        outbox: routeDeps.outbox,
+        indexProvisioner: routeDeps.contentTypeIndexProvisioner,
+    };
+}
+export function buildContentTypesRegistrations(routeDeps) {
+    const handlers = {
+        collections_content_type_list: async (ctx) => {
+            requireNoInput(ctx.input);
+            await requireToolPermission(routeDeps, {
+                principalId: ctx.principal.id,
+                permission: "admin.collections.read",
+                entityType: "content-type",
+            });
+            const { items } = await listContentTypes({ repo: routeDeps.contentTypeRepo, workspaceId: routeDeps.workspaceId });
+            return { contentTypes: items.map(toContentTypeView) };
+        },
+        collections_content_type_define: async (ctx) => {
+            const input = requireInputRecord(ctx.input);
+            return fromContentTypeResult(() => registerContentType({
+                deps: contentTypesDeps(routeDeps),
+                input: {
+                    actorId: ctx.principal.id,
+                    principalKind: AGENT_TOOL_PRINCIPAL_KIND,
+                    workspaceId: routeDeps.workspaceId,
+                    key: requireString(input, "key"),
+                    label: requireString(input, "label"),
+                    fields: requireFields(input, "collections_content_type_define"),
+                },
+            }));
+        },
+        collections_content_type_update_fields: async (ctx) => {
+            const input = requireInputRecord(ctx.input);
+            return fromContentTypeResult(() => updateContentTypeFields({
+                deps: contentTypesDeps(routeDeps),
+                input: {
+                    actorId: ctx.principal.id,
+                    principalKind: AGENT_TOOL_PRINCIPAL_KIND,
+                    workspaceId: routeDeps.workspaceId,
+                    key: requireString(input, "key"),
+                    fields: requireFields(input, "collections_content_type_update_fields"),
+                    expectedVersion: requireNumber(input, "expectedVersion"),
+                },
+            }));
+        },
+        collections_content_type_deprecate: async (ctx) => {
+            const input = requireInputRecord(ctx.input);
+            return fromContentTypeResult(() => deprecateContentType({
+                deps: contentTypesDeps(routeDeps),
+                input: {
+                    actorId: ctx.principal.id,
+                    principalKind: AGENT_TOOL_PRINCIPAL_KIND,
+                    workspaceId: routeDeps.workspaceId,
+                    key: requireString(input, "key"),
+                    expectedVersion: requireNumber(input, "expectedVersion"),
+                },
+            }));
+        },
+        collections_content_type_reactivate: async (ctx) => {
+            const input = requireInputRecord(ctx.input);
+            return fromContentTypeResult(() => reactivateContentType({
+                deps: contentTypesDeps(routeDeps),
+                input: {
+                    actorId: ctx.principal.id,
+                    principalKind: AGENT_TOOL_PRINCIPAL_KIND,
+                    workspaceId: routeDeps.workspaceId,
+                    key: requireString(input, "key"),
+                    expectedVersion: requireNumber(input, "expectedVersion"),
+                },
+            }));
+        },
+        collections_content_type_tombstone: async (ctx) => {
+            const input = requireInputRecord(ctx.input);
+            return fromContentTypeResult(() => tombstoneContentType({
+                deps: contentTypesDeps(routeDeps),
+                input: {
+                    actorId: ctx.principal.id,
+                    principalKind: AGENT_TOOL_PRINCIPAL_KIND,
+                    workspaceId: routeDeps.workspaceId,
+                    key: requireString(input, "key"),
+                    expectedVersion: requireNumber(input, "expectedVersion"),
+                },
+            }));
+        },
+    };
+    return buildDomainRegistrations({
+        domain: "content-types",
+        catalogModule: "features/content-types/agent-tools.ts",
+        catalog: CATALOG_BY_ID,
+        handlers,
+        derivedRisk: contentTypesDerivedRisk,
+        unwiredToolIds: UNWIRED_CONTENT_TYPES_TOOL_IDS,
+    });
+}
+//# sourceMappingURL=tool-registrations.js.map

package/dist/content-types/tool-registrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registrations.js","sourceRoot":"","sources":["../../src/content-types/tool-registrations.ts"],"names":[],"mappings":"AAkCA,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,aAAa,EACb,qBAAqB,GAKtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAA4B,MAAM,WAAW,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,oBAAoB,EAAqC,MAAM,gBAAgB,CAAC;AAEtI,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAuD,MAAM,oBAAoB,CAAC;AAEvI,MAAM,aAAa,GAAG,gBAAgB,CAAC,4BAA4B,CAAC,CAAC;AAkBrE,qFAAqF;AACrF,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC,CAAC,0BAA0B,EAAE,6BAA6B,CAAC,CAAC,CAAC;AAE5G;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAA8B;IAC/F,sFAAsF;IACtF,CAAC,+BAA+B,EAAE,MAAM,CAAC;IACzC,mFAAmF;IACnF,CAAC,iCAAiC,EAAE,uBAAuB,CAAC;IAC5D,gGAAgG;IAChG,CAAC,wCAAwC,EAAE,uBAAuB,CAAC;IACnE,kEAAkE;IAClE,CAAC,oCAAoC,EAAE,uBAAuB,CAAC;IAC/D,mEAAmE;IACnE,CAAC,qCAAqC,EAAE,uBAAuB,CAAC;IAChE,4FAA4F;IAC5F,6EAA6E;IAC7E,CAAC,oCAAoC,EAAE,uBAAuB,CAAC;CAChE,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,KAA8B,EAAE,MAAc;IACnE,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IACnC,MAAM,kBAAkB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9F,CAAC;AAYD;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,iBAAiB,CAAC,MAAyB;IAClD,MAAM,IAAI,GAAwB;QAChC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;KAC3B,CAAC;IACF,IAAI,MAAM,CAAC,YAAY;QAAE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAC5B,EAAwG;IAExG,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,gBAAgB,CAAC,SAA+B;IACvD,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,eAAe;QAC/B,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,GAAG,EAAE,SAAS,CAAC,KAAK;QACpB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,gBAAgB,EAAE,SAAS,CAAC,2BAA2B;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,SAA+B;IAC5E,MAAM,QAAQ,GAAgC;QAC5C,6BAA6B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC3C,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,qBAAqB,CAAC,SAAS,EAAE;gBACrC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;gBAC7B,UAAU,EAAE,wBAAwB;gBACpC,UAAU,EAAE,cAAc;aAC3B,CAAC,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,gBAAgB,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,eAAe,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;YAClH,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACxD,CAAC;QACD,+BAA+B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,qBAAqB,CAAC,GAAG,EAAE,CAChC,mBAAmB,CAAC;gBAClB,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC;gBACjC,KAAK,EAAE;oBACL,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;oBACzB,aAAa,EAAE,yBAAyB;oBACxC,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC;oBAChC,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC;oBACpC,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,iCAAiC,CAAC;iBAChE;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QACD,sCAAsC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,qBAAqB,CAAC,GAAG,EAAE,CAChC,uBAAuB,CAAC;gBACtB,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC;gBACjC,KAAK,EAAE;oBACL,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;oBACzB,aAAa,EAAE,yBAAyB;oBACxC,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC;oBAChC,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,wCAAwC,CAAC;oBACtE,eAAe,EAAE,aAAa,CAAC,KAAK,EAAE,iBAAiB,CAAC;iBACzD;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QACD,kCAAkC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,qBAAqB,CAAC,GAAG,EAAE,CAChC,oBAAoB,CAAC;gBACnB,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC;gBACjC,KAAK,EAAE;oBACL,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;oBACzB,aAAa,EAAE,yBAAyB;oBACxC,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC;oBAChC,eAAe,EAAE,aAAa,CAAC,KAAK,EAAE,iBAAiB,CAAC;iBACzD;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QACD,mCAAmC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACjD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,qBAAqB,CAAC,GAAG,EAAE,CAChC,qBAAqB,CAAC;gBACpB,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC;gBACjC,KAAK,EAAE;oBACL,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;oBACzB,aAAa,EAAE,yBAAyB;oBACxC,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC;oBAChC,eAAe,EAAE,aAAa,CAAC,KAAK,EAAE,iBAAiB,CAAC;iBACzD;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QACD,kCAAkC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,qBAAqB,CAAC,GAAG,EAAE,CAChC,oBAAoB,CAAC;gBACnB,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC;gBACjC,KAAK,EAAE;oBACL,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;oBACzB,aAAa,EAAE,yBAAyB;oBACxC,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC;oBAChC,eAAe,EAAE,aAAa,CAAC,KAAK,EAAE,iBAAiB,CAAC;iBACzD;aACF,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO,wBAAwB,CAAC;QAC9B,MAAM,EAAE,eAAe;QACvB,aAAa,EAAE,uCAAuC;QACtD,OAAO,EAAE,aAAa;QACtB,QAAQ;QACR,WAAW,EAAE,uBAAuB;QACpC,cAAc,EAAE,8BAA8B;KAC/C,CAAC,CAAC;AACL,CAAC"}

package/dist/content-types/types.d.ts

@@ -0,0 +1,78 @@
+/**
+ * @file Shared vocabulary for the `content-types` package.
+ *
+ * Purpose:
+ * The closed field-kind enum, the content-type record shape, and the generic `Result<T,E>`
+ * envelope every write-service/lifecycle/cleanup export in this package returns. Kept as plain
+ * data types with no I/O so every other module in this package (and `features/entries`, which
+ * consumes a content type's `fields` to validate an entry's `fieldsJson`) can depend on it
+ * without pulling in any adapter.
+ *
+ * How it relates to the project:
+ * The expression-index query surface requires the field-kind enum to be closed and
+ * mapped through a fixed lookup table (`index-provisioning.ts`), never interpolated — this file
+ * is that enum's single source of truth so the write-service's validation and the index
+ * provisioner's CAST-mapping can never drift apart.
+ *
+ * Architectural role:
+ * `features/content-types` domain vocabulary. No dependencies.
+ */
+/** CIC U-001-B1 — the closed, 5-entry field-kind enum. Never extend ad hoc. */
+export declare const CONTENT_TYPE_FIELD_KINDS: readonly ["text", "integer", "real", "boolean", "datetime"];
+export type ContentTypeFieldKind = (typeof CONTENT_TYPE_FIELD_KINDS)[number];
+/**
+ * Type guard for {@link ContentTypeFieldKind}. The single gate every kind value must pass before
+ * it is trusted anywhere near DDL construction (`index-provisioning.ts`) or write validation.
+ *
+ * @complexity O(1).
+ * @overallScore 100
+ */
+export declare function isContentTypeFieldKind(value: unknown): value is ContentTypeFieldKind;
+export interface ContentTypeFieldDef {
+    name: string;
+    kind: ContentTypeFieldKind;
+    required: boolean;
+    queryable: boolean;
+}
+export type ContentTypeStatus = "active" | "deprecated" | "tombstone";
+/** Sample schema, expressed as the package's in-memory record shape (repo-agnostic). */
+export interface ContentTypeRecord {
+    workspaceId: string;
+    key: string;
+    label: string;
+    fields: ContentTypeFieldDef[];
+    status: ContentTypeStatus;
+    version: number;
+    tombstonedAt?: string | null;
+}
+/**
+ * Actor classes a chokepoint write can be attributed to. Structurally identical to
+ * `identity.PrincipalKind`, deliberately redeclared here rather than imported so this package
+ * stays dependency-free (the same "no shared import, kept decoupled" convention `write-service.ts`
+ * applies to `AuthorizeFn`). `identity.PrincipalRecord.kind` assigns to it directly.
+ */
+export type ActorPrincipalKind = "user" | "agent" | "api_key" | "system";
+/** The actor-identity envelope every chokepoint write in this package accepts (REQ-01/02/16). */
+export interface ActorIdentityInput {
+    actorId: string;
+    /**
+     * Provenance for the audit trail: WHICH CLASS of actor performed this write. `actorId` alone
+     * cannot answer "was this the human admin, or the AI assistant acting for them?" — the assistant
+     * typically runs under that same human's principal id (a host's assistant proxy stamps it into
+     * the run's `contextRef`), so both paths record an identical `actorId`. Recorded onto
+     * the revision row by the write chokepoint; optional so pre-existing call sites are unaffected
+     * (they persist `NULL`, honestly meaning "not recorded" rather than a fabricated default).
+     */
+    principalKind?: ActorPrincipalKind;
+    delegatedByWorkspaceId?: string | null;
+    delegatedById?: string | null;
+}
+/** Generic success/failure envelope used across this package instead of throwing for expected rejections. */
+export type Result<T, E> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    error: E;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/content-types/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/content-types/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,wBAAwB,6DAA8D,CAAC;AAEpG,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,oBAAoB,CAEpF;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,oBAAoB,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,YAAY,GAAG,WAAW,CAAC;AAEtE,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEzE,iGAAiG;AACjG,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,6GAA6G;AAC7G,MAAM,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC"}

package/dist/content-types/types.js

@@ -0,0 +1,32 @@
+/**
+ * @file Shared vocabulary for the `content-types` package.
+ *
+ * Purpose:
+ * The closed field-kind enum, the content-type record shape, and the generic `Result<T,E>`
+ * envelope every write-service/lifecycle/cleanup export in this package returns. Kept as plain
+ * data types with no I/O so every other module in this package (and `features/entries`, which
+ * consumes a content type's `fields` to validate an entry's `fieldsJson`) can depend on it
+ * without pulling in any adapter.
+ *
+ * How it relates to the project:
+ * The expression-index query surface requires the field-kind enum to be closed and
+ * mapped through a fixed lookup table (`index-provisioning.ts`), never interpolated — this file
+ * is that enum's single source of truth so the write-service's validation and the index
+ * provisioner's CAST-mapping can never drift apart.
+ *
+ * Architectural role:
+ * `features/content-types` domain vocabulary. No dependencies.
+ */
+/** CIC U-001-B1 — the closed, 5-entry field-kind enum. Never extend ad hoc. */
+export const CONTENT_TYPE_FIELD_KINDS = ["text", "integer", "real", "boolean", "datetime"];
+/**
+ * Type guard for {@link ContentTypeFieldKind}. The single gate every kind value must pass before
+ * it is trusted anywhere near DDL construction (`index-provisioning.ts`) or write validation.
+ *
+ * @complexity O(1).
+ * @overallScore 100
+ */
+export function isContentTypeFieldKind(value) {
+    return typeof value === "string" && CONTENT_TYPE_FIELD_KINDS.includes(value);
+}
+//# sourceMappingURL=types.js.map

package/dist/content-types/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/content-types/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAIpG;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,wBAA8C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtG,CAAC"}