@jini-ai/cms 0.1.0

package/dist/core/tools/registration-kit.js

@@ -0,0 +1,381 @@
+/**
+ * @file The cross-domain half of the agent-tool wiring split: everything a domain's own
+ * `tool-registrations.ts` needs that is NOT specific to that domain.
+ *
+ * Why this file exists at all. Every domain's wiring repeats the same five moves — index its
+ * catalog by id, read a handful of fields off `ctx.input`, run the tool's permission check,
+ * decorate a shape rejection with the published schema, and then loop the handler map into
+ * `ToolRegistration`s behind a build-time risk/schema gate. Those five moves were previously copied
+ * per domain inside one shared `assistant/tool-registrations.ts`, which is exactly why that file
+ * grew past 2000 lines and why three independent domain slices could not be developed in parallel
+ * without colliding on it. Each domain now owns a `tool-registrations.ts` next to its own code and
+ * imports the shared moves from here; `assistant/tool-registrations.ts` is reduced to the
+ * aggregator that assembles them.
+ *
+ * The membership test for anything in this file is "would a fourth, not-yet-written domain need
+ * it?". Domain-shaped things deliberately stay out: each domain's model-facing `to*View`
+ * projections, its dependency-bag builder, its own `DERIVED_RISK_BY_TOOL_ID` slice (a claim about
+ * that domain's handlers, so it is maintained where those handlers live), and its unwired-tool set.
+ *
+ * What is deliberately NOT abstracted here is the authorization DECISION. {@link requireToolPermission}
+ * performs a check a caller asks for; it never decides that a check is needed. The "one
+ * evaluator" rule is a per-tool fact — some domains self-enforce inside their service function and
+ * must NOT be double-checked here, others have no service-layer gate at all and must be checked at
+ * the handler — and that judgement stays recorded in the domain file next to the handler it
+ * describes, where a reviewer reading the handler can see it.
+ */
+import { ToolInputError } from "@jini-ai/core";
+// Imported from `../commands/command` rather than the `../commands` barrel deliberately. The barrel
+// re-exports `appliers.ts`, which names `features/post` and `features/settings` directly, so any file
+// reaching this kit through the barrel inherits a dependency on two specific features. Every domain's
+// `tool-registrations.ts` imports this kit, so that one barrel hop is what welds the tool layer to the
+// content features and makes domains like `identity` non-extractable. Both symbols below are defined
+// in `command.ts`; importing them from there costs nothing and keeps the kit feature-agnostic.
+import { ForbiddenError } from "../commands/command.js";
+/**
+ * Audit provenance stamped onto every revision row a tool handler writes.
+ *
+ * A constant, not `ctx.principal`'s own kind, and that is the point: `ctx.principal.id` is the
+ * HUMAN admin's principal id — the host's proxy reads it from the browser session and stamps it
+ * into the run's `contextRef`, and the daemon hands it back to the handler. So a content-type change made by the assistant and one the same person made by clicking
+ * through the admin UI record an identical `actorId`. What distinguishes them is the path, and
+ * reaching a `tool-registrations.ts` handler IS the agent path — those handlers are only ever
+ * invoked by `@jini-ai/daemon`'s `ToolExecutor` during a run. `'agent'` is therefore a fact about
+ * the call site, not a default.
+ */
+// Typed as the literal "agent" (not the wider `ActorPrincipalKind`/`CommandActor["kind"]` unions
+// each domain declares) so this one constant satisfies both content-types' `principalKind` param
+// and Forms' `CommandActor.kind` param without a cast at either call site.
+export const AGENT_TOOL_PRINCIPAL_KIND = "agent";
+/**
+ * Actor-class rules that cannot be honored while no confirmation transport is wired.
+ *
+ * `confirmer-must-equal-own-delegatedBy` means "a human must confirm this, and the confirmer must
+ * be the principal who delegated". A host can only deliver that by building `ToolExecutor` with an
+ * `ExecutionDelegate`. Without one, `descriptor.requiresConfirmation` would park the execution on a
+ * promise only `resumeConfirmation` can settle — and nothing would call it. The park is also unbounded, because `descriptor.timeoutMs`'s timer is armed only AFTER the
+ * confirmation await.
+ *
+ * So a tool carrying this rule must not be wired at all. Today none is — `collections_execute_cleanup`,
+ * `database_execute_migrate_forward`, and `backup_execute_restore` all carry it and all three are
+ * declared unwired — which makes this guard a statement of the invariant rather than a fix: a
+ * future edit wiring any of them fails the build instead of silently shipping a tool whose stated
+ * human-confirmation requirement is unenforceable. When a confirmation transport does land, this
+ * constant is the deliberate place to relax.
+ */
+export const ACTOR_CLASS_RULES_REQUIRING_CONFIRMATION_TRANSPORT = new Set(["confirmer-must-equal-own-delegatedBy"]);
+/**
+ * Indexes a domain catalog by tool id — the single lookup used for descriptors, risk metadata, and
+ * schema-bearing error messages.
+ *
+ * @param catalog - The domain's own `agent-tools.ts` catalog array.
+ * @returns The catalog keyed by `name`.
+ * @complexity O(n) once at module load, O(1) per subsequent lookup.
+ * @overallScore 100
+ */
+export function indexCatalogById(catalog) {
+    return new Map(catalog.map((tool) => [tool.name, tool]));
+}
+// ---------------------------------------------------------------------------
+// Input readers — the vocabulary every handler uses to read `ctx.input`.
+// ---------------------------------------------------------------------------
+export function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+/** Narrows `ctx.input` to a record, refusing anything else. The first line of most handlers. */
+export function requireInputRecord(input) {
+    if (!isRecord(input))
+        throw new ToolInputError("input must be an object");
+    return input;
+}
+export function requireString(input, key) {
+    const value = input[key];
+    if (typeof value !== "string" || value.length === 0) {
+        throw new ToolInputError(`'${key}' (non-empty string) is required`);
+    }
+    return value;
+}
+export function requireNumber(input, key) {
+    const value = input[key];
+    if (typeof value !== "number" || !Number.isFinite(value)) {
+        throw new ToolInputError(`'${key}' (number) is required`);
+    }
+    return value;
+}
+export function requireObject(input, key) {
+    const value = input[key];
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new ToolInputError(`'${key}' (object) is required`);
+    }
+    return value;
+}
+export function optionalString(input, key) {
+    const value = input[key];
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "string")
+        throw new ToolInputError(`'${key}' must be a string`);
+    return value;
+}
+export function optionalNumber(input, key) {
+    const value = input[key];
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "number" || !Number.isFinite(value))
+        throw new ToolInputError(`'${key}' must be a number`);
+    return value;
+}
+export function optionalBoolean(input, key) {
+    const value = input[key];
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "boolean")
+        throw new ToolInputError(`'${key}' must be a boolean`);
+    return value;
+}
+/**
+ * The reader for a parameterless tool: `ctx.input` may be omitted entirely or passed as `{}`,
+ * nothing else. Refusing a populated object is deliberate — silently ignoring keys would teach a
+ * model that a filter it invented was applied.
+ */
+export function requireNoInput(input) {
+    if (input === undefined)
+        return;
+    if (!isRecord(input) || Object.keys(input).length > 0) {
+        throw new ToolInputError("this tool accepts no input — omit 'input' or pass {}");
+    }
+}
+/**
+ * Wraps a `Result<T, Error>`-returning domain call as a value: `ToolExecutor` treats a thrown error
+ * as a `'failed'` execution, so an `{ok:false}` becomes a throw rather than a silently-swallowed
+ * value.
+ */
+export function fromResult(fn) {
+    return fn().then((result) => {
+        if (!result.ok)
+            throw result.error;
+        return result.value;
+    });
+}
+// ---------------------------------------------------------------------------
+// Authorization
+// ---------------------------------------------------------------------------
+/**
+ * Runs the identical inline `authorize()` check the corresponding admin HTTP route performs, for a
+ * tool whose own domain function carries no `authorize()` call to inherit.
+ *
+ * This is NOT a second evaluator alongside another check — that is exactly the single-evaluator
+ * rule's concern. For each tool that
+ * calls it, this IS the only gate that tool's execution ever reaches, reached by an identical path
+ * to the one a human clicking the same admin route reaches. Domains split cleanly on which kind
+ * they are: content-types/Forms/Identity mutations and every Widgets write-service call self-enforce
+ * inside the domain function and must NOT call this; Comments/Members/Newsletter/Media/Menus/
+ * Database/Recovery gate in the route instead, so their handlers call this in the route's place.
+ * Which kind a given tool is stays documented next to that tool's handler, not here.
+ *
+ * Throws `core/commands`'s `ForbiddenError` — the same class `executeCommand` itself throws — so a
+ * tool caller and a route caller see the identical error shape for an identical denial. Throw
+ * rather than a 403 body because the caller here is `ToolExecutor`, which reads a thrown error as a
+ * failed execution and has no response to write to.
+ *
+ * @param deps - The `authorize()` evaluator and the workspace the run is scoped to.
+ * @param required - Who is asking, for what permission, optionally against which entity.
+ * @throws {ForbiddenError} If `authorize()` denies.
+ * @complexity O(1) beyond the injected `authorize()` call.
+ * @overallScore 100
+ */
+export async function requireToolPermission(deps, required) {
+    const result = await deps.authorize({
+        principalId: required.principalId,
+        permission: required.permission,
+        workspaceId: deps.workspaceId,
+        entityType: required.entityType,
+        entityId: required.entityId,
+    });
+    if (!result.allowed) {
+        throw new ForbiddenError(`principal '${required.principalId}' is not authorized for '${required.permission}' (${result.reason})`, required.permission, result.reason);
+    }
+}
+// ---------------------------------------------------------------------------
+// Error recovery
+// ---------------------------------------------------------------------------
+/** Appended to every decorated rejection so a model does not burn a turn retrying an identical call. */
+const RETRY_IS_FUTILE = "Fix the input and retry — this will not resolve on retry without an input change.";
+/**
+ * Re-throws a rejection with the tool's published `inputSchema` appended, so a model can correct
+ * its call in a single turn instead of guessing the rest of the shape from one field's complaint.
+ *
+ * `isShapeRejection` is the domain's own decision and has no default: only errors a DIFFERENT input
+ * would fix are decorated. A `ForbiddenError` or a slug conflict is not a shape problem, and
+ * appending a schema to one would be noise the model must read past — worse, it would imply the
+ * call is retryable when it is not.
+ *
+ * @param spec.toolId - The tool whose schema is published with the failure.
+ * @param spec.catalog - The domain catalog, consulted for that schema.
+ * @param spec.isShapeRejection - Predicate selecting the errors worth decorating.
+ * @param fn - The domain call.
+ * @throws The original error unchanged when it is not a shape rejection, or a decorated `Error`
+ * when it is. A tool whose catalog entry publishes no schema still gets the retry-is-futile note.
+ * @complexity O(1) beyond the wrapped call, plus the schema's own serialization on the failure path.
+ * @overallScore 100
+ */
+export async function withSchemaOnRejection(spec, fn) {
+    try {
+        return await fn();
+    }
+    catch (error) {
+        if (!spec.isShapeRejection(error))
+            throw error;
+        throw decorateWithSchema({ toolId: spec.toolId, catalog: spec.catalog, message: error.message });
+    }
+}
+/**
+ * The synchronous half of {@link withSchemaOnRejection}, for a domain that validates BEFORE the
+ * call rather than inside it (content-types parses `fields` at a boundary parser, so its rejection
+ * never reaches a `try` around a domain call).
+ *
+ * @returns The `Error` to throw — returned rather than thrown so the caller's own `throw` keeps
+ * TypeScript's control-flow narrowing at the call site.
+ * @complexity O(s) in the serialized schema size, on the failure path only.
+ * @overallScore 100
+ */
+export function decorateWithSchema(params) {
+    const schema = params.catalog.get(params.toolId)?.inputSchema;
+    // A `ToolInputError`, not a plain `Error`: every rejection reaching here already passed the
+    // caller's own `isShapeRejection` predicate — "a DIFFERENT input would fix this" — which is
+    // exactly what the marker means. `@jini-ai/daemon`'s `ToolExecutor` reads it off the thrown error
+    // to tag the execution result `errorKind: 'validation'` rather than folding it into the same
+    // redacted-500 bucket a genuine internal failure gets.
+    return new ToolInputError(schema
+        ? `${params.message}. ${RETRY_IS_FUTILE} Schema for '${params.toolId}': ${JSON.stringify(schema)}`
+        : `${params.message}. ${RETRY_IS_FUTILE}`);
+}
+// ---------------------------------------------------------------------------
+// Build-time gates
+// ---------------------------------------------------------------------------
+/**
+ * Build-time gate on a single tool's risk metadata: refuses to wire a tool whose declared
+ * `sideEffects` disagrees with the wiring layer's own {@link DerivedRiskByToolId} classification,
+ * whose id that layer has not classified at all, or whose `actorClassRule` needs a confirmation
+ * transport that does not exist.
+ *
+ * Throws rather than warning, and at registration time rather than call time: a metadata
+ * inconsistency is a developer error that should stop the daemon booting, not a runtime condition
+ * to degrade around.
+ *
+ * @param params.toolId - The wired tool id.
+ * @param params.catalogEntry - Its `agent-tools.ts` entry, the declared side of the comparison.
+ * @param params.derivedRisk - The wiring layer's independent classification, the derived side.
+ * @throws {Error} If the tool is unclassified, misclassified, or needs missing confirmation support.
+ * @complexity O(1) — two map/set lookups.
+ * @overallScore 100
+ */
+export function assertToolIsWirable(params) {
+    const { toolId, catalogEntry } = params;
+    const derived = params.derivedRisk.get(toolId);
+    if (!derived) {
+        throw new Error(`tool-registrations: '${toolId}' has no entry in DERIVED_RISK_BY_TOOL_ID — classify what its handler actually does before wiring it (unknown operations are refused, never assumed safe)`);
+    }
+    if (derived !== catalogEntry.sideEffects) {
+        throw new Error(`tool-registrations: '${toolId}' declares sideEffects '${catalogEntry.sideEffects}' but this layer derives '${derived}' from what its handler calls — reconcile the two rather than trusting the declaration`);
+    }
+    if (catalogEntry.actorClassRule && ACTOR_CLASS_RULES_REQUIRING_CONFIRMATION_TRANSPORT.has(catalogEntry.actorClassRule)) {
+        throw new Error(`tool-registrations: '${toolId}' declares actorClassRule '${catalogEntry.actorClassRule}', which requires a human-confirmation transport this host has not wired — leave it unwired until one exists (see ACTOR_CLASS_RULES_REQUIRING_CONFIRMATION_TRANSPORT)`);
+    }
+}
+/**
+ * Turns one domain's handler map into `ToolRegistration`s, applying every build-time gate the
+ * wiring layer owes each tool, and tripwiring on any catalog entry that is neither wired nor
+ * explicitly declared unwired.
+ *
+ * The tripwire is the reason this is one shared function rather than a loop each domain copies.
+ * "Add a catalog entry, forget to wire it" is the failure this layer is meant to make impossible,
+ * and a per-domain copy of the check is a per-domain opportunity to get it subtly wrong — one of
+ * the copies this replaced omitted the schema assertion, another omitted the unwired-set escape
+ * hatch. Silence is never the outcome: an unwired entry either appears in `unwiredToolIds` with a
+ * recorded reason next to it, or the build fails.
+ *
+ * `policy.authorize` is a pass-through `'allow'` for every registration, and that is by design
+ * rather than an omission: each tool's permission is evaluated exactly once — inside its domain
+ * function for the self-enforcing domains, or by the handler's own {@link requireToolPermission}
+ * call for the domains whose gate lives in the route. A check here would be a SECOND evaluator of
+ * the same rule, and a `ToolPolicy`-only check would be bypassable by any future non-tool caller of
+ * the same domain function, which is precisely why the chokepoint owns the gate.
+ *
+ * `descriptor.requiresConfirmation` is deliberately never set — see
+ * {@link ACTOR_CLASS_RULES_REQUIRING_CONFIRMATION_TRANSPORT} for why that omission is safe rather
+ * than a hole.
+ *
+ * @param spec.domain - Human-readable domain name, used only in failure messages.
+ * @param spec.catalogModule - Path of the catalog file, named in the drift message so the failure
+ * points at the file to edit.
+ * @param spec.catalog - That domain's catalog indexed by id (see {@link indexCatalogById}).
+ * @param spec.handlers - Tool id to handler. Registration order follows this map's key order.
+ * @param spec.derivedRisk - The domain's own risk classification (see {@link DerivedRiskByToolId}).
+ * @param spec.unwiredToolIds - Catalog ids deliberately not wired. Omit when the domain wires its
+ * entire catalog, which makes ANY unwired entry a build failure.
+ * @throws {Error} On catalog drift, an unclassified/misclassified tool, a wired tool publishing no
+ * `inputSchema`, or a catalog entry that is neither wired nor declared unwired.
+ * @complexity O(h + c) in the handler and catalog counts.
+ * @overallScore 100
+ */
+export function buildDomainRegistrations(spec) {
+    const registrations = [];
+    for (const [id, handler] of Object.entries(spec.handlers)) {
+        const catalogEntry = spec.catalog.get(id);
+        if (!catalogEntry) {
+            throw new Error(`tool-registrations: ${spec.domain} catalog has no entry named '${id}' — ${spec.catalogModule} drifted`);
+        }
+        assertToolIsWirable({ toolId: id, catalogEntry, derivedRisk: spec.derivedRisk });
+        if (!catalogEntry.inputSchema) {
+            throw new Error(`tool-registrations: wired tool '${id}' publishes no inputSchema — add one to its entry in ${spec.catalogModule} so the model gets a contract, or leave the tool unwired`);
+        }
+        registrations.push({
+            descriptor: { id, description: catalogEntry.description, inputSchema: catalogEntry.inputSchema },
+            handler,
+            policy: { authorize: () => "allow" },
+        });
+    }
+    for (const id of spec.catalog.keys()) {
+        if (id in spec.handlers)
+            continue;
+        if (spec.unwiredToolIds?.has(id))
+            continue;
+        throw new Error(`tool-registrations: ${spec.domain} catalog entry '${id}' is neither wired nor declared unwired — wire a handler for it, or add it to that domain's unwired set with the reason recorded next to it`);
+    }
+    return registrations;
+}
+/**
+ * Folds every domain's risk slice into the one map the assistant-level
+ * `assertRiskMetadataIsWirable(toolId, catalogEntry)` consults, refusing any id two domains both
+ * claim.
+ *
+ * That refusal is the structural answer to the failure this restructure was prompted by: three
+ * domain slices were developed in parallel, each checking its new ids only against the ids that
+ * existed before it started, so a name two of them both picked would have been discovered at
+ * runtime as a silently double-registered tool. A cross-domain id collision now fails the build.
+ * The one real collision in the current catalogs — `backup_create_restore_point`, declared by both
+ * Database and Recovery — passes because Recovery declares it unwired and therefore contributes no
+ * risk entry for it, which is exactly the resolution this check is meant to force.
+ *
+ * @param slices - Each domain's name (for the failure message) and its own risk map.
+ * @throws {Error} If two domains classify the same tool id.
+ * @complexity O(t) in the total classified-tool count.
+ * @overallScore 100
+ */
+export function mergeDerivedRiskMaps(slices) {
+    const merged = new Map();
+    const ownerByToolId = new Map();
+    for (const slice of slices) {
+        for (const [toolId, sideEffect] of slice.risk) {
+            const owner = ownerByToolId.get(toolId);
+            if (owner) {
+                throw new Error(`tool-registrations: tool id '${toolId}' is wired by both the ${owner} and ${slice.domain} domains — one id must resolve to exactly one handler; wire it in whichever domain owns the real operation and declare it unwired in the other`);
+            }
+            ownerByToolId.set(toolId, slice.domain);
+            merged.set(toolId, sideEffect);
+        }
+    }
+    return merged;
+}
+//# sourceMappingURL=registration-kit.js.map

package/dist/core/tools/registration-kit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration-kit.js","sourceRoot":"","sources":["../../../src/core/tools/registration-kit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,cAAc,EAA2C,MAAM,eAAe,CAAC;AAExF,oGAAoG;AACpG,sGAAsG;AACtG,sGAAsG;AACtG,uGAAuG;AACvG,qGAAqG;AACrG,+FAA+F;AAC/F,OAAO,EAAE,cAAc,EAAoB,MAAM,wBAAwB,CAAC;AA+D1E;;;;;;;;;;GAUG;AACH,iGAAiG;AACjG,iGAAiG;AACjG,2EAA2E;AAC3E,MAAM,CAAC,MAAM,yBAAyB,GAAY,OAAO,CAAC;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAG,IAAI,GAAG,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC;AAEpH;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAA6B,OAAqB;IAChF,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAA8B,EAAE,GAAW;IACvE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,cAAc,CAAC,IAAI,GAAG,kCAAkC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAA8B,EAAE,GAAW;IACvE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,cAAc,CAAC,IAAI,GAAG,wBAAwB,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAA8B,EAAE,GAAW;IACvE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,cAAc,CAAC,IAAI,GAAG,wBAAwB,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA8B,EAAE,GAAW;IACxE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,cAAc,CAAC,IAAI,GAAG,oBAAoB,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA8B,EAAE,GAAW;IACxE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,IAAI,GAAG,oBAAoB,CAAC,CAAC;IAChH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAA8B,EAAE,GAAW;IACzE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,cAAc,CAAC,IAAI,GAAG,qBAAqB,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,cAAc,CAAC,sDAAsD,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAI,EAAuE;IACnG,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QAC1B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC;QACnC,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAqD,EACrD,QAAqH;IAErH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;QAClC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,cAAc,CACtB,cAAc,QAAQ,CAAC,WAAW,4BAA4B,QAAQ,CAAC,UAAU,MAAM,MAAM,CAAC,MAAM,GAAG,EACvG,QAAQ,CAAC,UAAU,EACnB,MAAM,CAAC,MAAM,CACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,wGAAwG;AACxG,MAAM,eAAe,GAAG,mFAAmF,CAAC;AAE5G;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAIC,EACD,EAAoB;IAEpB,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAIlC;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9D,4FAA4F;IAC5F,4FAA4F;IAC5F,kGAAkG;IAClG,6FAA6F;IAC7F,uDAAuD;IACvD,OAAO,IAAI,cAAc,CACvB,MAAM;QACJ,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,KAAK,eAAe,gBAAgB,MAAM,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;QAClG,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,KAAK,eAAe,EAAE,CAC5C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAInC;IACC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,2JAA2J,CAC1L,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,YAAY,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,2BAA2B,YAAY,CAAC,WAAW,6BAA6B,OAAO,wFAAwF,CAC9M,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,cAAc,IAAI,kDAAkD,CAAC,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC;QACvH,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,8BAA8B,YAAY,CAAC,cAAc,uKAAuK,CAC/P,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAOxC;IACC,MAAM,aAAa,GAAuB,EAAE,CAAC;IAE7C,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,MAAM,gCAAgC,EAAE,OAAO,IAAI,CAAC,aAAa,UAAU,CAAC,CAAC;QAC3H,CAAC;QACD,mBAAmB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,mCAAmC,EAAE,wDAAwD,IAAI,CAAC,aAAa,0DAA0D,CAC1K,CAAC;QACJ,CAAC;QACD,aAAa,CAAC,IAAI,CAAC;YACjB,UAAU,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE;YAChG,OAAO;YACP,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,IAAI,EAAE,IAAI,IAAI,CAAC,QAAQ;YAAE,SAAS;QAClC,IAAI,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC3C,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,CAAC,MAAM,mBAAmB,EAAE,6IAA6I,CACrM,CAAC;IACJ,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAgE;IACnG,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,0BAA0B,KAAK,QAAQ,KAAK,CAAC,MAAM,gJAAgJ,CAC1O,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/entries/agent-tools.d.ts

@@ -0,0 +1,78 @@
+/**
+ * @file The Entries agent-tool catalog — this domain's instance of the per-domain `agent-tools.ts`
+ * convention `features/content-types/agent-tools.ts`, `features/settings/agent-tools.ts`, and every
+ * other domain catalog already use.
+ *
+ * Purpose:
+ * A static, in-process catalog describing every agent-callable tool this domain exposes. Every
+ * entry maps 1:1 onto a real exported function of `features/entries/write-service.ts` (`createEntry`,
+ * `updateEntry`, `publishEntry`, `unpublishEntry`) or `features/entries/list.ts` (`listEntries`) —
+ * this catalog never names an operation the domain cannot perform.
+ *
+ * Naming and scope — a real discrepancy from this dispatch's own brief, disclosed rather than
+ * silently reconciled: the brief framed this domain as "backing the Pages, Posts, and Collections
+ * admin sections", but reading the actual admin routes shows that is only true for Collections.
+ * `server/routes/admin/entries/{create,update,lifecycle,list}.ts` (`/api/admin/v1/entries`, gated by
+ * `admin.collections.manage`/`admin.collections.read`) are the ONLY routes backed by THIS package's
+ * `write-service.ts`/`list.ts` — exactly what this catalog wraps. Pages and Posts
+ * (`server/routes/admin/pages/*`, `server/routes/admin/posts/*`) are, in this codebase's CURRENT
+ * state, backed by a wholly separate legacy `features/post` module (`createPost`/`updatePost`/
+ * `getAdminPostById`/`listAdminPages`, its own `post` table, routed through `core/commands`'s
+ * `executeCommand` gateway, gated by `content.write`/`content.read` — a different permission
+ * namespace entirely). `features/entries` has no relationship to that module at all: no shared
+ * table, no shared write chokepoint, no shared permission. So this catalog's tools name their
+ * resource `collections_entry_*` (pairing with `features/content-types/agent-tools.ts`'s own
+ * `collections_content_type_*` prefix — the two packages are "one cohesive domain" per
+ * `server/routes/admin/content-types/deps.ts`'s own file header), not `entry_*`/`page_*`/`post_*` —
+ * a name that could be misread as covering Pages/Posts. Wiring Pages/Posts agent tools would mean
+ * wrapping `features/post`, a different backend this dispatch was not asked to touch and has not
+ * inspected for the same safety discipline this catalog applies here.
+ *
+ * Deliberate absences (the point of a catalog, not an oversight):
+ * - There is no delete/purge tool: `write-service.ts` exposes no delete function at all (confirmed
+ *   by reading the whole file) — there is nothing to wrap or exclude on that front.
+ * - `collections_entry_update`'s schema omits `bodyJson` even though `updateEntry` itself accepts an
+ *   optional `bodyJson` (REQ-44/45, used internally by `widgets/embed-service.ts`'s own guardrailed
+ *   mutation path). The generic Collections admin route (`entries/update.ts`) never forwards
+ *   `body.bodyJson` at all — only `title`/`fieldsJson`/`expectedVersion` — so exposing it here would
+ *   invent capability beyond what the human admin UI's own Collections editor exposes. Omitting it
+ *   from the input is enough: `updateEntry` leaves `bodyJson` unchanged whenever the field is
+ *   `undefined`, so this exclusion changes nothing about what a call can still do.
+ * - `collections_entry_list`'s schema omits `status`/`orderBy`/`limit` even though
+ *   `EntryListPort.listByWorkspace` supports all three (added for `widgets/resolvers/recent-entries.ts`'s
+ *   own bounded-query need) — `server/routes/admin/entries/list.ts` only ever forwards `type` from
+ *   its query string, so the other three are not part of what the Collections admin list screen
+ *   itself can do; adding them here would again exceed the human surface this catalog mirrors.
+ *
+ * What IS included, and why it is safe: all four write-service functions are `admin.collections.*`
+ * self-enforcing (each opens with its own `deps.authorize()` call before any other side effect —
+ * confirmed by reading `write-service.ts` directly), and `publishEntry`/`unpublishEntry` are ordinary,
+ * fully reversible status flips with a full revision trail (`entryRepo.appendRevision`) — publishing
+ * and unpublishing are each other's own undo.
+ *
+ * How it relates to the project:
+ * `features/entries/tool-registrations.ts` maps these entries into `@jini-ai/core` `ToolRegistration`s.
+ *
+ * Architectural role:
+ * `features/entries` domain declaration. No dependencies.
+ */
+export type AgentToolSideEffect = "none" | "mutates-durable-state" | "mints-token";
+export interface AgentToolDefinition {
+    name: string;
+    description: string;
+    sideEffects: AgentToolSideEffect;
+    authorization: {
+        permission: string;
+    };
+    /**
+     * JSON Schema for this tool's `input`, published to the model via `ToolDescriptor.inputSchema`
+     * (`assistant/tool-registration-kit.ts`'s `buildDomainRegistrations`, which refuses to wire any
+     * tool lacking one).
+     */
+    inputSchema?: Readonly<Record<string, unknown>>;
+}
+/** The Entries domain's fixed agent-tool catalog: the Collections authoring surface's 4 writes
+ * (create/update/publish/unpublish) plus its 1 read (list) — see this file's header for the
+ * Pages/Posts naming disclosure and the 3 deliberate scope exclusions. */
+export declare const entriesAgentToolCatalog: AgentToolDefinition[];
+//# sourceMappingURL=agent-tools.d.ts.map

package/dist/entries/agent-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools.d.ts","sourceRoot":"","sources":["../../src/entries/agent-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,uBAAuB,GAAG,aAAa,CAAC;AAEnF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,mBAAmB,CAAC;IACjC,aAAa,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC;;;;OAIG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACjD;AAoBD;;0EAE0E;AAC1E,eAAO,MAAM,uBAAuB,EAAE,mBAAmB,EAuFxD,CAAC"}

package/dist/entries/agent-tools.js

@@ -0,0 +1,158 @@
+/**
+ * @file The Entries agent-tool catalog — this domain's instance of the per-domain `agent-tools.ts`
+ * convention `features/content-types/agent-tools.ts`, `features/settings/agent-tools.ts`, and every
+ * other domain catalog already use.
+ *
+ * Purpose:
+ * A static, in-process catalog describing every agent-callable tool this domain exposes. Every
+ * entry maps 1:1 onto a real exported function of `features/entries/write-service.ts` (`createEntry`,
+ * `updateEntry`, `publishEntry`, `unpublishEntry`) or `features/entries/list.ts` (`listEntries`) —
+ * this catalog never names an operation the domain cannot perform.
+ *
+ * Naming and scope — a real discrepancy from this dispatch's own brief, disclosed rather than
+ * silently reconciled: the brief framed this domain as "backing the Pages, Posts, and Collections
+ * admin sections", but reading the actual admin routes shows that is only true for Collections.
+ * `server/routes/admin/entries/{create,update,lifecycle,list}.ts` (`/api/admin/v1/entries`, gated by
+ * `admin.collections.manage`/`admin.collections.read`) are the ONLY routes backed by THIS package's
+ * `write-service.ts`/`list.ts` — exactly what this catalog wraps. Pages and Posts
+ * (`server/routes/admin/pages/*`, `server/routes/admin/posts/*`) are, in this codebase's CURRENT
+ * state, backed by a wholly separate legacy `features/post` module (`createPost`/`updatePost`/
+ * `getAdminPostById`/`listAdminPages`, its own `post` table, routed through `core/commands`'s
+ * `executeCommand` gateway, gated by `content.write`/`content.read` — a different permission
+ * namespace entirely). `features/entries` has no relationship to that module at all: no shared
+ * table, no shared write chokepoint, no shared permission. So this catalog's tools name their
+ * resource `collections_entry_*` (pairing with `features/content-types/agent-tools.ts`'s own
+ * `collections_content_type_*` prefix — the two packages are "one cohesive domain" per
+ * `server/routes/admin/content-types/deps.ts`'s own file header), not `entry_*`/`page_*`/`post_*` —
+ * a name that could be misread as covering Pages/Posts. Wiring Pages/Posts agent tools would mean
+ * wrapping `features/post`, a different backend this dispatch was not asked to touch and has not
+ * inspected for the same safety discipline this catalog applies here.
+ *
+ * Deliberate absences (the point of a catalog, not an oversight):
+ * - There is no delete/purge tool: `write-service.ts` exposes no delete function at all (confirmed
+ *   by reading the whole file) — there is nothing to wrap or exclude on that front.
+ * - `collections_entry_update`'s schema omits `bodyJson` even though `updateEntry` itself accepts an
+ *   optional `bodyJson` (REQ-44/45, used internally by `widgets/embed-service.ts`'s own guardrailed
+ *   mutation path). The generic Collections admin route (`entries/update.ts`) never forwards
+ *   `body.bodyJson` at all — only `title`/`fieldsJson`/`expectedVersion` — so exposing it here would
+ *   invent capability beyond what the human admin UI's own Collections editor exposes. Omitting it
+ *   from the input is enough: `updateEntry` leaves `bodyJson` unchanged whenever the field is
+ *   `undefined`, so this exclusion changes nothing about what a call can still do.
+ * - `collections_entry_list`'s schema omits `status`/`orderBy`/`limit` even though
+ *   `EntryListPort.listByWorkspace` supports all three (added for `widgets/resolvers/recent-entries.ts`'s
+ *   own bounded-query need) — `server/routes/admin/entries/list.ts` only ever forwards `type` from
+ *   its query string, so the other three are not part of what the Collections admin list screen
+ *   itself can do; adding them here would again exceed the human surface this catalog mirrors.
+ *
+ * What IS included, and why it is safe: all four write-service functions are `admin.collections.*`
+ * self-enforcing (each opens with its own `deps.authorize()` call before any other side effect —
+ * confirmed by reading `write-service.ts` directly), and `publishEntry`/`unpublishEntry` are ordinary,
+ * fully reversible status flips with a full revision trail (`entryRepo.appendRevision`) — publishing
+ * and unpublishing are each other's own undo.
+ *
+ * How it relates to the project:
+ * `features/entries/tool-registrations.ts` maps these entries into `@jini-ai/core` `ToolRegistration`s.
+ *
+ * Architectural role:
+ * `features/entries` domain declaration. No dependencies.
+ */
+const ENTRY_ID_SCHEMA = {
+    type: "string",
+    minLength: 1,
+    description: "The entry's id, as returned by collections_entry_create or collections_entry_list.",
+};
+const EXPECTED_VERSION_SCHEMA = {
+    type: "integer",
+    description: "The entry's current 'version', for optimistic concurrency. Read it first (collections_entry_list, or the previous write's own response) — a stale value is rejected with a version conflict naming the current version.",
+};
+const FIELDS_JSON_SCHEMA = {
+    type: "object",
+    description: "The entry's field-extension bag, wrapped as { ext: { site: {...} } } envelope. Must conform to the owning content type's CURRENT field schema — an unrecognized key, a wrong-kind value, or a missing required field is rejected with every failing field named, before anything is written.",
+};
+/** The Entries domain's fixed agent-tool catalog: the Collections authoring surface's 4 writes
+ * (create/update/publish/unpublish) plus its 1 read (list) — see this file's header for the
+ * Pages/Posts naming disclosure and the 3 deliberate scope exclusions. */
+export const entriesAgentToolCatalog = [
+    {
+        name: "collections_entry_list",
+        description: "Lists Collection entries in the workspace (id, type, slug, status, title, fieldsJson, bodyJson, publishedAt, timestamps, version). " +
+            "Optionally narrowed to one content type. Mirrors the admin Collections list screen exactly — no status/date/limit filter is available " +
+            "here because the admin route itself does not expose one.",
+        sideEffects: "none",
+        authorization: { permission: "admin.collections.read" },
+        inputSchema: {
+            type: "object",
+            additionalProperties: false,
+            required: [],
+            properties: {
+                type: { type: "string", description: "Narrow the list to one content type's entries (its 'key'). Omit to list every type." },
+            },
+        },
+    },
+    {
+        name: "collections_entry_create",
+        description: "Creates a new draft Collection entry under an existing, ACTIVE content type. Rejected if the content type does not exist in this " +
+            "workspace, is deprecated/tombstoned, if fieldsJson fails the type's current field schema, or if (type, slug) is already taken. " +
+            "The new entry always starts in 'draft' status — use collections_entry_publish afterward to publish it.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.collections.manage" },
+        inputSchema: {
+            type: "object",
+            additionalProperties: false,
+            required: ["type", "slug", "title"],
+            properties: {
+                type: { type: "string", minLength: 1, description: "The owning content type's key. Must be an ACTIVE content type already registered in this workspace." },
+                slug: { type: "string", minLength: 1, description: "URL-safe slug, unique per (type). A second entry with the same (type, slug) is rejected as a conflict." },
+                title: { type: "string", minLength: 1, description: "Human-readable title." },
+                fieldsJson: { ...FIELDS_JSON_SCHEMA, description: `${FIELDS_JSON_SCHEMA.description} Omit for an empty { ext: { site: {} } } envelope.` },
+                bodyJson: { description: "Optional rich-text body document (TipTap JSON). Not schema-validated." },
+            },
+        },
+    },
+    {
+        name: "collections_entry_update",
+        description: "Updates an existing entry's title and/or fieldsJson (only the fields supplied change). Rejected if the entry does not exist, if its " +
+            "owning content type is tombstoned (a deprecated owning type does NOT block this), if fieldsJson fails the type's current schema, or if " +
+            "expectedVersion is stale. Cannot change an entry's bodyJson through this tool — the Collections admin editor itself does not expose that.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.collections.manage" },
+        inputSchema: {
+            type: "object",
+            additionalProperties: false,
+            required: ["id", "expectedVersion"],
+            properties: {
+                id: ENTRY_ID_SCHEMA,
+                expectedVersion: EXPECTED_VERSION_SCHEMA,
+                title: { type: "string", minLength: 1, description: "New title. Omit to leave the current title unchanged." },
+                fieldsJson: { ...FIELDS_JSON_SCHEMA, description: `COMPLETE replacement field-extension bag. ${FIELDS_JSON_SCHEMA.description} Omit to leave fields unchanged.` },
+            },
+        },
+    },
+    {
+        name: "collections_entry_publish",
+        description: "Flips an entry to 'published' (sets publishedAt to now). Rejected only if the owning content type is tombstoned, or if " +
+            "expectedVersion is stale. A deprecated owning type does not block this. Fully reversible via collections_entry_unpublish.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.collections.manage" },
+        inputSchema: {
+            type: "object",
+            additionalProperties: false,
+            required: ["id", "expectedVersion"],
+            properties: { id: ENTRY_ID_SCHEMA, expectedVersion: EXPECTED_VERSION_SCHEMA },
+        },
+    },
+    {
+        name: "collections_entry_unpublish",
+        description: "Flips an entry to 'unpublished' (publishedAt is left as-is; only the status changes). Rejected only if the owning content type is " +
+            "tombstoned, or if expectedVersion is stale. A deprecated owning type does not block this. Fully reversible via collections_entry_publish.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.collections.manage" },
+        inputSchema: {
+            type: "object",
+            additionalProperties: false,
+            required: ["id", "expectedVersion"],
+            properties: { id: ENTRY_ID_SCHEMA, expectedVersion: EXPECTED_VERSION_SCHEMA },
+        },
+    },
+];
+//# sourceMappingURL=agent-tools.js.map

package/dist/entries/agent-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools.js","sourceRoot":"","sources":["../../src/entries/agent-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAiBH,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,CAAC;IACZ,WAAW,EAAE,oFAAoF;CACzF,CAAC;AAEX,MAAM,uBAAuB,GAAG;IAC9B,IAAI,EAAE,SAAS;IACf,WAAW,EACT,yNAAyN;CACnN,CAAC;AAEX,MAAM,kBAAkB,GAAG;IACzB,IAAI,EAAE,QAAQ;IACd,WAAW,EACT,8RAA8R;CACxR,CAAC;AAEX;;0EAE0E;AAC1E,MAAM,CAAC,MAAM,uBAAuB,GAA0B;IAC5D;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,qIAAqI;YACrI,wIAAwI;YACxI,0DAA0D;QAC5D,WAAW,EAAE,MAAM;QACnB,aAAa,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAAE;QACvD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qFAAqF,EAAE;aAC7H;SACF;KACF;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EACT,mIAAmI;YACnI,iIAAiI;YACjI,wGAAwG;QAC1G,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,0BAA0B,EAAE;QACzD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;YACnC,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,qGAAqG,EAAE;gBAC1J,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,wGAAwG,EAAE;gBAC7J,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE;gBAC7E,UAAU,EAAE,EAAE,GAAG,kBAAkB,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC,WAAW,oDAAoD,EAAE;gBACzI,QAAQ,EAAE,EAAE,WAAW,EAAE,uEAAuE,EAAE;aACnG;SACF;KACF;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EACT,sIAAsI;YACtI,yIAAyI;YACzI,2IAA2I;QAC7I,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,0BAA0B,EAAE;QACzD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC;YACnC,UAAU,EAAE;gBACV,EAAE,EAAE,eAAe;gBACnB,eAAe,EAAE,uBAAuB;gBACxC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,uDAAuD,EAAE;gBAC7G,UAAU,EAAE,EAAE,GAAG,kBAAkB,EAAE,WAAW,EAAE,6CAA6C,kBAAkB,CAAC,WAAW,kCAAkC,EAAE;aAClK;SACF;KACF;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,WAAW,EACT,yHAAyH;YACzH,2HAA2H;QAC7H,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,0BAA0B,EAAE;QACzD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC;YACnC,UAAU,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,eAAe,EAAE,uBAAuB,EAAE;SAC9E;KACF;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,WAAW,EACT,oIAAoI;YACpI,2IAA2I;QAC7I,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,0BAA0B,EAAE;QACzD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC;YACnC,UAAU,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,eAAe,EAAE,uBAAuB,EAAE;SAC9E;KACF;CACF,CAAC"}