@nextblock-cms/cortex 0.12.2

package/lib/ai-key-crypto.cjs.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const o=require("crypto"),n="aes-256-gcm",u=1;function c(t){const e=t.trim();if(!e)throw new Error("CORTEX_AI_ENCRYPTION_KEY is required to manage stored OpenRouter keys.");return o.createHash("sha256").update(e).digest()}function p(t){if(!t||typeof t!="object")throw new Error("Invalid encrypted OpenRouter key payload.");const e=t;if(e.algorithm!==n||e.version!==u||typeof e.authTag!="string"||typeof e.ciphertext!="string"||typeof e.iv!="string")throw new Error("Invalid encrypted OpenRouter key payload.");return{algorithm:e.algorithm,authTag:e.authTag,ciphertext:e.ciphertext,iv:e.iv,last4:typeof e.last4=="string"?e.last4:"",updatedAt:typeof e.updatedAt=="string"?e.updatedAt:"",version:e.version}}function s(t){const e=(t||"").trim();return e?`**** ${e}`:"Stored key"}function l(t){const e=t.apiKey.trim();if(!e)throw new Error("OpenRouter API key is required.");const a=c(t.encryptionSecret),r=o.randomBytes(12),i=o.createCipheriv(n,a,r),y=Buffer.concat([i.update(e,"utf8"),i.final()]),d=i.getAuthTag();return{algorithm:n,authTag:d.toString("base64"),ciphertext:y.toString("base64"),iv:r.toString("base64"),last4:e.slice(-4),updatedAt:(t.now||new Date).toISOString(),version:u}}function f(t){const e=p(t.encryptedKey),a=c(t.encryptionSecret);try{const r=o.createDecipheriv(n,a,Buffer.from(e.iv,"base64"));return r.setAuthTag(Buffer.from(e.authTag,"base64")),Buffer.concat([r.update(Buffer.from(e.ciphertext,"base64")),r.final()]).toString("utf8")}catch{throw new Error("Failed to decrypt stored OpenRouter key.")}}function h(t){try{const e=p(t);return{hasStoredKey:!0,last4:e.last4||null,maskedKey:s(e.last4),updatedAt:e.updatedAt||null}}catch{return{hasStoredKey:!1,last4:null,maskedKey:null,updatedAt:null}}}exports.CORTEX_AI_KEY_ALGORITHM=n;exports.CORTEX_AI_KEY_ENVELOPE_VERSION=u;exports.decryptOpenRouterApiKey=f;exports.encryptOpenRouterApiKey=l;exports.getMaskedOpenRouterKey=s;exports.getOpenRouterKeyEnvelopeStatus=h;

package/lib/ai-key-crypto.d.ts

@@ -0,0 +1,32 @@
+export declare const CORTEX_AI_KEY_ALGORITHM = "aes-256-gcm";
+export declare const CORTEX_AI_KEY_ENVELOPE_VERSION = 1;
+export type EncryptedOpenRouterKeyEnvelope = {
+    algorithm: typeof CORTEX_AI_KEY_ALGORITHM;
+    authTag: string;
+    ciphertext: string;
+    iv: string;
+    last4: string;
+    updatedAt: string;
+    version: typeof CORTEX_AI_KEY_ENVELOPE_VERSION;
+};
+export declare function getMaskedOpenRouterKey(last4?: string | null): string;
+export declare function encryptOpenRouterApiKey(params: {
+    apiKey: string;
+    encryptionSecret: string;
+    now?: Date;
+}): EncryptedOpenRouterKeyEnvelope;
+export declare function decryptOpenRouterApiKey(params: {
+    encryptedKey: unknown;
+    encryptionSecret: string;
+}): string;
+export declare function getOpenRouterKeyEnvelopeStatus(value: unknown): {
+    hasStoredKey: boolean;
+    last4: string | null;
+    maskedKey: string;
+    updatedAt: string | null;
+} | {
+    hasStoredKey: boolean;
+    last4: null;
+    maskedKey: null;
+    updatedAt: null;
+};

package/lib/ai-key-crypto.es.js

@@ -0,0 +1,88 @@
+import { createDecipheriv as d, randomBytes as y, createCipheriv as l, createHash as f } from "crypto";
+const n = "aes-256-gcm", i = 1;
+function s(t) {
+  const e = t.trim();
+  if (!e)
+    throw new Error("CORTEX_AI_ENCRYPTION_KEY is required to manage stored OpenRouter keys.");
+  return f("sha256").update(e).digest();
+}
+function c(t) {
+  if (!t || typeof t != "object")
+    throw new Error("Invalid encrypted OpenRouter key payload.");
+  const e = t;
+  if (e.algorithm !== n || e.version !== i || typeof e.authTag != "string" || typeof e.ciphertext != "string" || typeof e.iv != "string")
+    throw new Error("Invalid encrypted OpenRouter key payload.");
+  return {
+    algorithm: e.algorithm,
+    authTag: e.authTag,
+    ciphertext: e.ciphertext,
+    iv: e.iv,
+    last4: typeof e.last4 == "string" ? e.last4 : "",
+    updatedAt: typeof e.updatedAt == "string" ? e.updatedAt : "",
+    version: e.version
+  };
+}
+function h(t) {
+  const e = (t || "").trim();
+  return e ? `**** ${e}` : "Stored key";
+}
+function E(t) {
+  const e = t.apiKey.trim();
+  if (!e)
+    throw new Error("OpenRouter API key is required.");
+  const o = s(t.encryptionSecret), r = y(12), a = l(n, o, r), u = Buffer.concat([
+    a.update(e, "utf8"),
+    a.final()
+  ]), p = a.getAuthTag();
+  return {
+    algorithm: n,
+    authTag: p.toString("base64"),
+    ciphertext: u.toString("base64"),
+    iv: r.toString("base64"),
+    last4: e.slice(-4),
+    updatedAt: (t.now || /* @__PURE__ */ new Date()).toISOString(),
+    version: i
+  };
+}
+function m(t) {
+  const e = c(t.encryptedKey), o = s(t.encryptionSecret);
+  try {
+    const r = d(
+      n,
+      o,
+      Buffer.from(e.iv, "base64")
+    );
+    return r.setAuthTag(Buffer.from(e.authTag, "base64")), Buffer.concat([
+      r.update(Buffer.from(e.ciphertext, "base64")),
+      r.final()
+    ]).toString("utf8");
+  } catch {
+    throw new Error("Failed to decrypt stored OpenRouter key.");
+  }
+}
+function v(t) {
+  try {
+    const e = c(t);
+    return {
+      hasStoredKey: !0,
+      last4: e.last4 || null,
+      maskedKey: h(e.last4),
+      updatedAt: e.updatedAt || null
+    };
+  } catch {
+    return {
+      hasStoredKey: !1,
+      last4: null,
+      maskedKey: null,
+      updatedAt: null
+    };
+  }
+}
+export {
+  n as CORTEX_AI_KEY_ALGORITHM,
+  i as CORTEX_AI_KEY_ENVELOPE_VERSION,
+  m as decryptOpenRouterApiKey,
+  E as encryptOpenRouterApiKey,
+  h as getMaskedOpenRouterKey,
+  v as getOpenRouterKeyEnvelopeStatus
+};

package/lib/ai-model-catalog.cjs.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const o=require("./ai-model-registry.cjs.js"),r="Cortex AI OpenRouter model catalog can only be imported from server-side code.";function n(){if(!(typeof window>"u"))throw new Error(r)}function s(){const e=new URL(`${o.CORTEX_AI_OPENROUTER_BASE_URL}/models`);return e.searchParams.set("supported_parameters",o.CORTEX_AI_REQUIRED_MODEL_PARAMETERS.join(",")),e.searchParams.set("output_modalities","text"),e.toString()}async function i(e){n();const t=await(e?.fetch||globalThis.fetch)(s(),{cache:"no-store",headers:{Accept:"application/json"}});if(!t.ok)throw new Error(`Failed to load OpenRouter models: ${t.status} ${t.statusText}`);return o.filterCortexAiCompatibleOpenRouterModels(await t.json(),e?.now)}exports.listCortexAiCompatibleOpenRouterModels=i;

package/lib/ai-model-catalog.d.ts

@@ -0,0 +1,7 @@
+import { CortexAiCompatibleOpenRouterModel } from './ai-model-registry';
+type FetchFunction = typeof globalThis.fetch;
+export declare function listCortexAiCompatibleOpenRouterModels(params?: {
+    fetch?: FetchFunction;
+    now?: Date;
+}): Promise<CortexAiCompatibleOpenRouterModel[]>;
+export {};

package/lib/ai-model-catalog.es.js

@@ -0,0 +1,25 @@
+import { filterCortexAiCompatibleOpenRouterModels as o, CORTEX_AI_OPENROUTER_BASE_URL as r, CORTEX_AI_REQUIRED_MODEL_PARAMETERS as n } from "./ai-model-registry.es.js";
+const s = "Cortex AI OpenRouter model catalog can only be imported from server-side code.";
+function a() {
+  if (!(typeof window > "u"))
+    throw new Error(s);
+}
+function i() {
+  const e = new URL(`${r}/models`);
+  return e.searchParams.set("supported_parameters", n.join(",")), e.searchParams.set("output_modalities", "text"), e.toString();
+}
+async function p(e) {
+  a();
+  const t = await (e?.fetch || globalThis.fetch)(i(), {
+    cache: "no-store",
+    headers: {
+      Accept: "application/json"
+    }
+  });
+  if (!t.ok)
+    throw new Error(`Failed to load OpenRouter models: ${t.status} ${t.statusText}`);
+  return o(await t.json(), e?.now);
+}
+export {
+  p as listCortexAiCompatibleOpenRouterModels
+};

package/lib/ai-model-registry.cjs.js

@@ -0,0 +1,3 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const h=require("ai"),T="https://openrouter.ai/api/v1",C="openrouter/free",u=["qwen/qwen3-next-80b-a3b-instruct:free","nvidia/nemotron-3-super-120b-a12b:free","nvidia/nemotron-nano-9b-v2:free"],x=["tools","structured_outputs"],P={frequencyPenalty:"frequency_penalty",logitBias:"logit_bias",presencePenalty:"presence_penalty",seed:"seed",stopSequences:"stop",temperature:"temperature",topK:"top_k",topP:"top_p"},L={defaultFreeRouter:C,defaultStructuredOutputModel:u[0],defaultToolCallingModel:u[0],freeFallbacks:u,structuredJsonPreferred:u,toolCallingPreferred:u};class m extends Error{attempts;constructor(t,n,r){super(t),this.name="CortexAiRoutingError",this.attempts=n,this.cause=r}}function R(e){return Array.from(new Set(e.filter(Boolean)))}function c(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function p(e){return typeof e=="string"&&e.trim()?e.trim():null}function A(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"&&t.trim().length>0):[]}function f(e){const t=typeof e=="number"?e:Number(e);return Number.isFinite(t)?t:null}function b(e){const t=c(e);return t?Object.fromEntries(Object.entries(t).filter(([,n])=>n!=null).map(([n,r])=>[n,String(r)])):{}}function I(e){const t=new Set(e);return x.every(n=>t.has(n))}function D(e){const t=c(e.architecture);return A(t?.output_modalities).includes("text")}function F(e){if(e==null)return null;if(typeof e=="number")return e>1e10?e:e*1e3;if(typeof e=="string"&&e.trim()){const t=Date.parse(e);return Number.isFinite(t)?t:null}return null}function w(e,t){const n=F(e);return n!==null&&n<=t.getTime()}function q(e){const t=c(e.top_provider);return f(e.context_length)??f(e.contextLength)??f(t?.context_length)??null}function k(e){const t=e.expiration_date??e.expirationDate;return typeof t=="string"&&t.trim()?t.trim():null}function S(e){return!!(e&&u.includes(e))}function N(e){const t=c(e);if(!t)return null;const n=p(t.modelId),r=p(t.name),s=A(t.supportedParameters),i=p(t.updatedAt);return!n||!r||!i||!I(s)?null:{contextLength:f(t.contextLength),modelId:n,name:r,pricing:b(t.pricing),supportedParameters:s,updatedAt:i}}function U(e,t=new Date){return{contextLength:e.contextLength,modelId:e.id,name:e.name,pricing:e.pricing,supportedParameters:[...e.supportedParameters],updatedAt:t.toISOString()}}function j(e,t=new Date){const n=c(e),r=Array.isArray(e)?e:Array.isArray(n?.data)?n.data:[],s=[];for(const i of r){const o=c(i),l=p(o?.id),a=p(o?.name),O=A(o?.supported_parameters);!o||!l||!a||!D(o)||w(o.expiration_date,t)||!I(O)||s.push({contextLength:q(o),created:f(o.created),expirationDate:k(o),id:l,name:a,pricing:b(o.pricing),supportedParameters:O})}return s.sort((i,o)=>i.name.localeCompare(o.name))}function X(e){return R([e?.modelId||u[0],...e?.fallbackModelIds||u])}function B(e){const t=e.requestedModelId?.trim()||null;if(e.credentialSource==="env")return{credentialSource:e.credentialSource,ignoredRequestedModelId:t&&!S(t)?t:null,modelIds:[...u],modelSelection:null};const n=R(e.fallbackModelIds?.length?e.fallbackModelIds:u),r=e.credentialSource==="stored"?e.selectedModel?.modelId||n[0]:t||e.selectedModel?.modelId||n[0];return{credentialSource:e.credentialSource,ignoredRequestedModelId:e.credentialSource==="stored"&&t&&t!==r?t:null,modelIds:R([r,...n]),modelSelection:e.selectedModel||null}}function K(e,t){const n=t.modelSelection;if(!n||n.modelId!==t.modelId)return e;const r=new Set(n.supportedParameters),s=Object.entries(P).filter(([o,l])=>o in e&&!r.has(l)).map(([o])=>o);if(s.length===0)return e;const i={...e};for(const o of s)delete i[o];return i}function E(e,t){if(!e||typeof e!="object"||!(t in e))return null;const n=e[t],r=typeof n=="number"?n:Number(n);return Number.isFinite(r)?r:null}function M(e){if(h.APICallError.isInstance(e))return e.statusCode??null;const t=E(e,"statusCode")??E(e,"status");if(t)return t;if(e&&typeof e=="object"&&"response"in e){const n=e.response,r=E(n,"status");if(r)return r}return e&&typeof e=="object"&&"cause"in e?M(e.cause):null}function _(e){return M(e)===429}function d(e){if(!e)return"";if(e instanceof Error){const t="cause"in e?d(e.cause):"";return[e.message,t].filter(Boolean).join(`
+`)}if(typeof e=="object"){const t=e;return["message","error","text","cause"].map(n=>d(t[n])).filter(Boolean).join(`
+`)}return String(e)}function y(e){return _(e)?!0:/No endpoints found|no longer available|not available as a free model|transitioned to a paid model/i.test(d(e))}function g(e,t=900){const n=e.replace(/\s+/g," ").trim();return n.length>t?`${n.slice(0,t-1).trimEnd()}...`:n}function G(e){const t=d(e);return t?g(t):"Unknown OpenRouter error."}function Y(e,t="Cortex AI request failed."){if(e instanceof m){const n=e.attempts.map(o=>o.errorMessage).filter(o=>!!o?.trim()),r=n[0],s=n[n.length-1],i=g(d(e.cause));return r&&s&&r!==s?`First model error: ${r} Last model error: ${s}`:s||r||i||e.message}return g(d(e))||t}async function $(e){const t=R(e.modelIds),n=e.shouldRetry||y;let r=[],s=null;for(const i of t)try{const o=await e.execute(i);return r=[...r,{modelId:i,rateLimited:!1,status:"success"}],{attempts:r,modelId:i,result:o}}catch(o){const l=_(o),a=n(o);if(s=o,r=[...r,{errorMessage:G(o),modelId:i,rateLimited:l,status:l?"rate_limited":a?"retried":"failed"}],!a)throw new m(`OpenRouter request failed for model "${i}".`,r,o)}throw new m("OpenRouter fallback exhausted all configured Cortex AI models.",r,s)}exports.CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY=u;exports.CORTEX_AI_MODEL_REGISTRY=L;exports.CORTEX_AI_OPENROUTER_BASE_URL=T;exports.CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL=C;exports.CORTEX_AI_REQUIRED_MODEL_PARAMETERS=x;exports.CortexAiRoutingError=m;exports.buildCortexAiModelFallbackChain=X;exports.buildCortexAiRoutingPolicy=B;exports.createCortexAiStoredModelSelection=U;exports.filterCortexAiCompatibleOpenRouterModels=j;exports.getHttpStatusCode=M;exports.isCortexAiFreeModelId=S;exports.isOpenRouterRateLimitError=_;exports.isOpenRouterRecoverableRoutingError=y;exports.omitUnsupportedCortexAiModelOptions=K;exports.runWithCortexAiModelFallback=$;exports.safeParseCortexAiModelSelection=N;exports.summarizeCortexAiRoutingError=Y;

package/lib/ai-model-registry.d.ts

@@ -0,0 +1,79 @@
+export declare const CORTEX_AI_OPENROUTER_BASE_URL = "https://openrouter.ai/api/v1";
+export declare const CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL = "openrouter/free";
+export declare const CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY: readonly ["qwen/qwen3-next-80b-a3b-instruct:free", "nvidia/nemotron-3-super-120b-a12b:free", "nvidia/nemotron-nano-9b-v2:free"];
+export declare const CORTEX_AI_REQUIRED_MODEL_PARAMETERS: readonly ["tools", "structured_outputs"];
+export declare const CORTEX_AI_MODEL_REGISTRY: {
+    readonly defaultFreeRouter: "openrouter/free";
+    readonly defaultStructuredOutputModel: "qwen/qwen3-next-80b-a3b-instruct:free";
+    readonly defaultToolCallingModel: "qwen/qwen3-next-80b-a3b-instruct:free";
+    readonly freeFallbacks: readonly ["qwen/qwen3-next-80b-a3b-instruct:free", "nvidia/nemotron-3-super-120b-a12b:free", "nvidia/nemotron-nano-9b-v2:free"];
+    readonly structuredJsonPreferred: readonly ["qwen/qwen3-next-80b-a3b-instruct:free", "nvidia/nemotron-3-super-120b-a12b:free", "nvidia/nemotron-nano-9b-v2:free"];
+    readonly toolCallingPreferred: readonly ["qwen/qwen3-next-80b-a3b-instruct:free", "nvidia/nemotron-3-super-120b-a12b:free", "nvidia/nemotron-nano-9b-v2:free"];
+};
+export type CortexAiOpenRouterModelId = typeof CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL | (typeof CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY)[number] | (string & {});
+export type CortexAiRoutingCredentialSource = 'env' | 'manual' | 'stored';
+export type CortexAiOpenRouterModelPricing = Record<string, string>;
+export type CortexAiCompatibleOpenRouterModel = {
+    contextLength: number | null;
+    created: number | null;
+    expirationDate: string | null;
+    id: CortexAiOpenRouterModelId;
+    name: string;
+    pricing: CortexAiOpenRouterModelPricing;
+    supportedParameters: readonly string[];
+};
+export type CortexAiStoredModelSelection = {
+    contextLength: number | null;
+    modelId: CortexAiOpenRouterModelId;
+    name: string;
+    pricing: CortexAiOpenRouterModelPricing;
+    supportedParameters: readonly string[];
+    updatedAt: string;
+};
+export type CortexAiRoutingPolicy = {
+    credentialSource: CortexAiRoutingCredentialSource;
+    ignoredRequestedModelId: CortexAiOpenRouterModelId | null;
+    modelIds: readonly CortexAiOpenRouterModelId[];
+    modelSelection: CortexAiStoredModelSelection | null;
+};
+export type CortexAiModelAttempt = {
+    errorMessage?: string;
+    modelId: CortexAiOpenRouterModelId;
+    rateLimited: boolean;
+    status: 'success' | 'rate_limited' | 'retried' | 'failed';
+};
+export declare class CortexAiRoutingError extends Error {
+    readonly attempts: readonly CortexAiModelAttempt[];
+    constructor(message: string, attempts: readonly CortexAiModelAttempt[], cause?: unknown);
+}
+export declare function isCortexAiFreeModelId(modelId: CortexAiOpenRouterModelId | null | undefined): boolean;
+export declare function safeParseCortexAiModelSelection(value: unknown): CortexAiStoredModelSelection | null;
+export declare function createCortexAiStoredModelSelection(model: CortexAiCompatibleOpenRouterModel, now?: Date): CortexAiStoredModelSelection;
+export declare function filterCortexAiCompatibleOpenRouterModels(value: unknown, now?: Date): CortexAiCompatibleOpenRouterModel[];
+export declare function buildCortexAiModelFallbackChain(params?: {
+    fallbackModelIds?: readonly CortexAiOpenRouterModelId[];
+    modelId?: CortexAiOpenRouterModelId | null;
+}): CortexAiOpenRouterModelId[];
+export declare function buildCortexAiRoutingPolicy(params: {
+    credentialSource: CortexAiRoutingCredentialSource;
+    fallbackModelIds?: readonly CortexAiOpenRouterModelId[];
+    requestedModelId?: CortexAiOpenRouterModelId | null;
+    selectedModel?: CortexAiStoredModelSelection | null;
+}): CortexAiRoutingPolicy;
+export declare function omitUnsupportedCortexAiModelOptions<TOptions extends Record<string, unknown>>(options: TOptions, params: {
+    modelId: CortexAiOpenRouterModelId;
+    modelSelection?: CortexAiStoredModelSelection | null;
+}): TOptions;
+export declare function getHttpStatusCode(error: unknown): number | null;
+export declare function isOpenRouterRateLimitError(error: unknown): boolean;
+export declare function isOpenRouterRecoverableRoutingError(error: unknown): boolean;
+export declare function summarizeCortexAiRoutingError(error: unknown, fallbackMessage?: string): string;
+export declare function runWithCortexAiModelFallback<T>(params: {
+    execute: (modelId: CortexAiOpenRouterModelId) => Promise<T>;
+    modelIds: readonly CortexAiOpenRouterModelId[];
+    shouldRetry?: (error: unknown) => boolean;
+}): Promise<{
+    attempts: readonly CortexAiModelAttempt[];
+    modelId: CortexAiOpenRouterModelId;
+    result: T;
+}>;

package/lib/ai-model-registry.es.js

@@ -0,0 +1,279 @@
+import { APICallError as y } from "ai";
+const N = "https://openrouter.ai/api/v1", O = "openrouter/free", u = [
+  "qwen/qwen3-next-80b-a3b-instruct:free",
+  "nvidia/nemotron-3-super-120b-a12b:free",
+  "nvidia/nemotron-nano-9b-v2:free"
+], S = ["tools", "structured_outputs"], h = {
+  frequencyPenalty: "frequency_penalty",
+  logitBias: "logit_bias",
+  presencePenalty: "presence_penalty",
+  seed: "seed",
+  stopSequences: "stop",
+  temperature: "temperature",
+  topK: "top_k",
+  topP: "top_p"
+}, j = {
+  defaultFreeRouter: O,
+  defaultStructuredOutputModel: u[0],
+  defaultToolCallingModel: u[0],
+  freeFallbacks: u,
+  structuredJsonPreferred: u,
+  toolCallingPreferred: u
+};
+class R extends Error {
+  attempts;
+  constructor(t, n, r) {
+    super(t), this.name = "CortexAiRoutingError", this.attempts = n, this.cause = r;
+  }
+}
+function m(e) {
+  return Array.from(new Set(e.filter(Boolean)));
+}
+function l(e) {
+  return e && typeof e == "object" && !Array.isArray(e) ? e : null;
+}
+function f(e) {
+  return typeof e == "string" && e.trim() ? e.trim() : null;
+}
+function E(e) {
+  return Array.isArray(e) ? e.filter((t) => typeof t == "string" && t.trim().length > 0) : [];
+}
+function p(e) {
+  const t = typeof e == "number" ? e : Number(e);
+  return Number.isFinite(t) ? t : null;
+}
+function _(e) {
+  const t = l(e);
+  return t ? Object.fromEntries(
+    Object.entries(t).filter(([, n]) => n != null).map(([n, r]) => [n, String(r)])
+  ) : {};
+}
+function b(e) {
+  const t = new Set(e);
+  return S.every((n) => t.has(n));
+}
+function C(e) {
+  const t = l(e.architecture);
+  return E(t?.output_modalities).includes("text");
+}
+function P(e) {
+  if (e == null)
+    return null;
+  if (typeof e == "number")
+    return e > 1e10 ? e : e * 1e3;
+  if (typeof e == "string" && e.trim()) {
+    const t = Date.parse(e);
+    return Number.isFinite(t) ? t : null;
+  }
+  return null;
+}
+function L(e, t) {
+  const n = P(e);
+  return n !== null && n <= t.getTime();
+}
+function T(e) {
+  const t = l(e.top_provider);
+  return p(e.context_length) ?? p(e.contextLength) ?? p(t?.context_length) ?? null;
+}
+function w(e) {
+  const t = e.expiration_date ?? e.expirationDate;
+  return typeof t == "string" && t.trim() ? t.trim() : null;
+}
+function D(e) {
+  return !!(e && u.includes(e));
+}
+function B(e) {
+  const t = l(e);
+  if (!t)
+    return null;
+  const n = f(t.modelId), r = f(t.name), s = E(t.supportedParameters), i = f(t.updatedAt);
+  return !n || !r || !i || !b(s) ? null : {
+    contextLength: p(t.contextLength),
+    modelId: n,
+    name: r,
+    pricing: _(t.pricing),
+    supportedParameters: s,
+    updatedAt: i
+  };
+}
+function U(e, t = /* @__PURE__ */ new Date()) {
+  return {
+    contextLength: e.contextLength,
+    modelId: e.id,
+    name: e.name,
+    pricing: e.pricing,
+    supportedParameters: [...e.supportedParameters],
+    updatedAt: t.toISOString()
+  };
+}
+function X(e, t = /* @__PURE__ */ new Date()) {
+  const n = l(e), r = Array.isArray(e) ? e : Array.isArray(n?.data) ? n.data : [], s = [];
+  for (const i of r) {
+    const o = l(i), c = f(o?.id), a = f(o?.name), A = E(o?.supported_parameters);
+    !o || !c || !a || !C(o) || L(o.expiration_date, t) || !b(A) || s.push({
+      contextLength: T(o),
+      created: p(o.created),
+      expirationDate: w(o),
+      id: c,
+      name: a,
+      pricing: _(o.pricing),
+      supportedParameters: A
+    });
+  }
+  return s.sort((i, o) => i.name.localeCompare(o.name));
+}
+function K(e) {
+  return m([
+    e?.modelId || u[0],
+    ...e?.fallbackModelIds || u
+  ]);
+}
+function $(e) {
+  const t = e.requestedModelId?.trim() || null;
+  if (e.credentialSource === "env")
+    return {
+      credentialSource: e.credentialSource,
+      ignoredRequestedModelId: t && !D(t) ? t : null,
+      modelIds: [...u],
+      modelSelection: null
+    };
+  const n = m(
+    e.fallbackModelIds?.length ? e.fallbackModelIds : u
+  ), r = e.credentialSource === "stored" ? e.selectedModel?.modelId || n[0] : t || e.selectedModel?.modelId || n[0];
+  return {
+    credentialSource: e.credentialSource,
+    ignoredRequestedModelId: e.credentialSource === "stored" && t && t !== r ? t : null,
+    modelIds: m([r, ...n]),
+    modelSelection: e.selectedModel || null
+  };
+}
+function z(e, t) {
+  const n = t.modelSelection;
+  if (!n || n.modelId !== t.modelId)
+    return e;
+  const r = new Set(n.supportedParameters), s = Object.entries(h).filter(([o, c]) => o in e && !r.has(c)).map(([o]) => o);
+  if (s.length === 0)
+    return e;
+  const i = { ...e };
+  for (const o of s)
+    delete i[o];
+  return i;
+}
+function g(e, t) {
+  if (!e || typeof e != "object" || !(t in e))
+    return null;
+  const n = e[t], r = typeof n == "number" ? n : Number(n);
+  return Number.isFinite(r) ? r : null;
+}
+function x(e) {
+  if (y.isInstance(e))
+    return e.statusCode ?? null;
+  const t = g(e, "statusCode") ?? g(e, "status");
+  if (t)
+    return t;
+  if (e && typeof e == "object" && "response" in e) {
+    const n = e.response, r = g(n, "status");
+    if (r)
+      return r;
+  }
+  return e && typeof e == "object" && "cause" in e ? x(e.cause) : null;
+}
+function I(e) {
+  return x(e) === 429;
+}
+function d(e) {
+  if (!e)
+    return "";
+  if (e instanceof Error) {
+    const t = "cause" in e ? d(e.cause) : "";
+    return [e.message, t].filter(Boolean).join(`
+`);
+  }
+  if (typeof e == "object") {
+    const t = e;
+    return ["message", "error", "text", "cause"].map((n) => d(t[n])).filter(Boolean).join(`
+`);
+  }
+  return String(e);
+}
+function q(e) {
+  return I(e) ? !0 : /No endpoints found|no longer available|not available as a free model|transitioned to a paid model/i.test(
+    d(e)
+  );
+}
+function M(e, t = 900) {
+  const n = e.replace(/\s+/g, " ").trim();
+  return n.length > t ? `${n.slice(0, t - 1).trimEnd()}...` : n;
+}
+function F(e) {
+  const t = d(e);
+  return t ? M(t) : "Unknown OpenRouter error.";
+}
+function G(e, t = "Cortex AI request failed.") {
+  if (e instanceof R) {
+    const n = e.attempts.map((o) => o.errorMessage).filter((o) => !!o?.trim()), r = n[0], s = n[n.length - 1], i = M(d(e.cause));
+    return r && s && r !== s ? `First model error: ${r} Last model error: ${s}` : s || r || i || e.message;
+  }
+  return M(d(e)) || t;
+}
+async function Y(e) {
+  const t = m(e.modelIds), n = e.shouldRetry || q;
+  let r = [], s = null;
+  for (const i of t)
+    try {
+      const o = await e.execute(i);
+      return r = [
+        ...r,
+        {
+          modelId: i,
+          rateLimited: !1,
+          status: "success"
+        }
+      ], {
+        attempts: r,
+        modelId: i,
+        result: o
+      };
+    } catch (o) {
+      const c = I(o), a = n(o);
+      if (s = o, r = [
+        ...r,
+        {
+          errorMessage: F(o),
+          modelId: i,
+          rateLimited: c,
+          status: c ? "rate_limited" : a ? "retried" : "failed"
+        }
+      ], !a)
+        throw new R(
+          `OpenRouter request failed for model "${i}".`,
+          r,
+          o
+        );
+    }
+  throw new R(
+    "OpenRouter fallback exhausted all configured Cortex AI models.",
+    r,
+    s
+  );
+}
+export {
+  u as CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY,
+  j as CORTEX_AI_MODEL_REGISTRY,
+  N as CORTEX_AI_OPENROUTER_BASE_URL,
+  O as CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL,
+  S as CORTEX_AI_REQUIRED_MODEL_PARAMETERS,
+  R as CortexAiRoutingError,
+  K as buildCortexAiModelFallbackChain,
+  $ as buildCortexAiRoutingPolicy,
+  U as createCortexAiStoredModelSelection,
+  X as filterCortexAiCompatibleOpenRouterModels,
+  x as getHttpStatusCode,
+  D as isCortexAiFreeModelId,
+  I as isOpenRouterRateLimitError,
+  q as isOpenRouterRecoverableRoutingError,
+  z as omitUnsupportedCortexAiModelOptions,
+  Y as runWithCortexAiModelFallback,
+  B as safeParseCortexAiModelSelection,
+  G as summarizeCortexAiRoutingError
+};

package/lib/cortex-widget-registry.cjs.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const n=require("@nextblock-cms/utils/custom-blocks"),a="id, slug, name, description, fields, layout_schema, is_original";class c extends Error{code;status;constructor(e,i){super(e),this.name="CortexWidgetRegistryInsertError",this.code=i?.code,this.status=i?.status??500}}function s(t){return JSON.parse(JSON.stringify(t))}function d(t){return t==="23505"?409:t==="42501"?403:500}function u(t){const e=n.customBlockDefinitionCreateSchema.parse({...t,is_original:!0});return{description:e.description,fields:s(e.fields),is_original:!0,layout_schema:s(e.layout_schema),name:e.name,slug:e.slug}}async function l(t,e){const i=u(e),{data:o,error:r}=await t.from("custom_block_definitions").insert(i).select(a).single();if(r||!o)throw new c(r?.message??"Failed to insert Cortex custom block definition.",{code:r?.code,status:d(r?.code)});return n.customBlockDefinitionRowSchema.parse(o)}exports.CORTEX_WIDGET_DEFINITION_SELECT=a;exports.CortexWidgetRegistryInsertError=c;exports.buildCortexWidgetDefinitionInsertPayload=u;exports.insertCortexWidgetDefinition=l;

package/lib/cortex-widget-registry.d.ts

@@ -0,0 +1,19 @@
+import { Database } from '../../../db/src/lib/supabase/types.ts';
+import { CustomBlockDefinition } from '../../../utils/src/lib/custom-blocks';
+import { CortexWidgetDefinition } from './cortex-widget-schema';
+export declare const CORTEX_WIDGET_DEFINITION_SELECT = "id, slug, name, description, fields, layout_schema, is_original";
+type CustomBlockDefinitionInsert = Database['public']['Tables']['custom_block_definitions']['Insert'];
+type SupabaseInsertClient = {
+    from: (table: string) => any;
+};
+export declare class CortexWidgetRegistryInsertError extends Error {
+    readonly code?: string;
+    readonly status: number;
+    constructor(message: string, params?: {
+        code?: string;
+        status?: number;
+    });
+}
+export declare function buildCortexWidgetDefinitionInsertPayload(definition: CortexWidgetDefinition): CustomBlockDefinitionInsert;
+export declare function insertCortexWidgetDefinition(supabase: SupabaseInsertClient, definition: CortexWidgetDefinition): Promise<CustomBlockDefinition>;
+export {};

package/lib/cortex-widget-registry.es.js

@@ -0,0 +1,47 @@
+import { customBlockDefinitionCreateSchema as n, customBlockDefinitionRowSchema as a } from "@nextblock-cms/utils/custom-blocks";
+const c = "id, slug, name, description, fields, layout_schema, is_original";
+class u extends Error {
+  code;
+  status;
+  constructor(e, i) {
+    super(e), this.name = "CortexWidgetRegistryInsertError", this.code = i?.code, this.status = i?.status ?? 500;
+  }
+}
+function o(t) {
+  return JSON.parse(JSON.stringify(t));
+}
+function d(t) {
+  return t === "23505" ? 409 : t === "42501" ? 403 : 500;
+}
+function l(t) {
+  const e = n.parse({
+    ...t,
+    is_original: !0
+  });
+  return {
+    description: e.description,
+    fields: o(e.fields),
+    is_original: !0,
+    layout_schema: o(e.layout_schema),
+    name: e.name,
+    slug: e.slug
+  };
+}
+async function g(t, e) {
+  const i = l(e), { data: s, error: r } = await t.from("custom_block_definitions").insert(i).select(c).single();
+  if (r || !s)
+    throw new u(
+      r?.message ?? "Failed to insert Cortex custom block definition.",
+      {
+        code: r?.code,
+        status: d(r?.code)
+      }
+    );
+  return a.parse(s);
+}
+export {
+  c as CORTEX_WIDGET_DEFINITION_SELECT,
+  u as CortexWidgetRegistryInsertError,
+  l as buildCortexWidgetDefinitionInsertPayload,
+  g as insertCortexWidgetDefinition
+};

package/lib/cortex-widget-schema.cjs.js

@@ -0,0 +1,5 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const o=require("@nextblock-cms/utils/custom-blocks");require("./zod-config.cjs.js");const e=require("zod"),r=["pages","posts","products","media","categories","profiles","languages"],d=e.z.enum(["article","aside","blockquote","div","figure","figcaption","h2","h3","img","p","section","span"]).describe("A safe semantic element supported by the dynamic layout renderer."),c=e.z.string().trim().max(4e3).describe("Tailwind utility classes only. Do not include CSS, style tags, or JavaScript."),l=e.z.strictObject({description:e.z.string().trim().max(500).optional(),key:o.customBlockFieldKeySchema.describe("Lowercase snake_case field key."),label:e.z.string().trim().min(1).max(120),required:e.z.boolean().default(!1)}),m=l.extend({default_value:e.z.string().max(5e3).optional(),max_length:e.z.number().int().positive().max(1e4).optional(),min_length:e.z.number().int().min(0).max(1e4).optional(),placeholder:e.z.string().max(250).optional(),type:e.z.literal("text")}),u=l.extend({default_value:e.z.string().max(5e4).optional(),placeholder:e.z.string().max(250).optional(),type:e.z.literal("rich-text")}),p=l.extend({accept:e.z.array(e.z.string().trim().min(1).max(120)).max(20).optional(),default_value:e.z.strictObject({alt:e.z.string().max(300).optional(),file_name:e.z.string().trim().min(1).max(255).optional(),file_type:e.z.string().trim().min(1).max(120).optional(),height:e.z.number().int().positive().optional(),object_key:e.z.string().trim().min(1).max(1024),size_bytes:e.z.number().int().positive().optional(),url:e.z.string().trim().min(1).max(2048),width:e.z.number().int().positive().optional()}).optional(),max_bytes:e.z.number().int().positive().max(50*1024*1024).optional(),type:e.z.literal("image_r2")}),f=l.extend({default_value:e.z.union([e.z.string(),e.z.array(e.z.string()),e.z.null()]).optional(),display_column:e.z.string().trim().min(1).max(80).default("title"),filters:e.z.record(e.z.string(),e.z.unknown()).optional(),multiple:e.z.boolean().default(!1),table:e.z.enum(r),type:e.z.literal("db_relation"),value_column:e.z.string().trim().min(1).max(80).default("id")}),y=e.z.discriminatedUnion("type",[m,u,p,f]).describe("A NextBlock custom block field. Allowed types: text, rich-text, image_r2, db_relation."),s=e.z.lazy(()=>e.z.discriminatedUnion("type",[e.z.strictObject({as:d.optional(),children:e.z.array(s).max(200).default([]),className:c.optional(),type:e.z.literal("container")}),e.z.strictObject({as:d.optional(),className:c.optional(),column:e.z.string().trim().min(1).max(80).optional().describe("For a db_relation field, the related record column to display (e.g. title, price)."),emptyFallback:e.z.string().max(300).optional(),field_key:o.customBlockFieldKeySchema,type:e.z.literal("field_render")})])),_=e.z.strictObject({context:e.z.string().trim().max(3e3).optional(),modelId:e.z.string().trim().min(1).max(200).optional(),prompt:e.z.string().trim().min(3).max(4e3)});function g(t){return t.type==="field_render"?[t.field_key]:t.children.flatMap(i=>g(i))}function k(t,i){const n=new Set;t.fields.forEach((a,b)=>{n.has(a.key)&&i.addIssue({code:"custom",message:`Duplicate field key "${a.key}".`,path:["fields",b,"key"]}),n.add(a.key)});for(const a of g(t.layout_schema))n.has(a)||i.addIssue({code:"custom",message:`Layout references unknown field "${a}".`,path:["layout_schema"]})}const h=e.z.strictObject({description:e.z.string().trim().max(1e3).default(""),fields:e.z.array(y).min(1).max(80),is_original:e.z.boolean().default(!0),layout_schema:s,name:e.z.string().trim().min(1).max(160),slug:o.customBlockSlugSchema.describe("Lowercase kebab-case slug.")}).superRefine(k).describe("A complete NextBlock custom block definition stored as database JSONB.");function x(t){const i=h.parse(t);return o.customBlockDefinitionCreateSchema.parse({...i,is_original:!0})}function z(){return["You are NextBlock Cortex, an expert web platform engineer building database-rendered custom CMS widgets.","Return ONLY one clean raw JSON object with the exact structure described in the user message. Do not include markdown fences, comments, prose, or explanatory text.","Never emit TSX, JSX, React components, JavaScript, CSS blocks, style attributes, script tags, or runtime code.","Use only these field types: text, rich-text, image_r2, db_relation.",`Use db_relation.table only from this allowlist: ${r.join(", ")}.`,"Use lowercase kebab-case for slug and lowercase snake_case for field keys.","Build layout_schema as a self-referential tree: container nodes may contain nested container or field_render nodes to any needed depth.","Use Tailwind utility classes in className strings. Use responsive utilities where helpful.",'The "as" property of any node MUST be exactly one of: article, aside, blockquote, div, figure, figcaption, h2, h3, img, p, section, span. Never use a, button, ul, ol, li, table, or any other tag. For a call-to-action or "more info" button, use a span or p styled with button-like Tailwind classes (rounded, padded, colored background).',"Every field_render.field_key must match one field key exactly.","For relation fields, set value_column to id and set display_column to a column that actually exists on the chosen table: use title for pages, posts, and products; sku for product_variants; full_name for profiles; name for categories and languages; file_name for media. Do not invent display columns.",`Entity images: when a block displays an image that belongs to a related product, page, or post (for example a product card photo or a post thumbnail), do NOT add an image_r2 upload field for it. Instead add a single db_relation field to that table (products, product_variants, pages, or posts) and add a field_render node that references it with "as": "img". The renderer automatically resolves the related record's primary image — a product or variant main_image/object_key, or a page/post feature image — so keep the table's normal display_column (for example title for a products relation).`,'You may reference the same db_relation field from more than one field_render node: for example one node with "as": "img" for the image and another text node for its title, plus the relation value to drive a "more info" link. This builds a product/page/post card from a single relation field.',`To display a SPECIFIC column of a related record (its title, price, sku, etc.), set the field_render node's "column" property to that column name. The "column" overrides the field display_column for that one node, so a single product relation can show its image (as "img"), title (column "title"), and price (column "price") from three field_render nodes.`,'Available record columns by table — only reference these in a node "column": products: title, sku, price, sale_price, stock, short_description, slug, status; product_variants: sku, price, sale_price, stock_quantity; pages: title, slug, status; posts: title, slug, excerpt, subtitle; profiles: full_name; categories: name, slug, description; media: file_name; languages: name, code. Use "as": "img" (no column) to show a record image.','Do NOT create a standalone text field for data that lives on a related record. For example, a product price must come from a products db_relation field rendered with column "price" — never a separate "text" field the editor types by hand.',"Monetary columns (price, sale_price, price_adjustment) are stored in integer cents and are automatically formatted as currency on display, so reference them directly; never multiply, divide, or add currency symbols yourself.","Only use image_r2 for standalone images uploaded directly by the editor that are not tied to any database record (for example a decorative banner or icon). Only use text or rich-text fields for free-form copy the editor writes, not for values that exist on a related record."].join(" ")}function v(t){return["Create a NextBlock custom block definition for this request:",t.prompt,t.context?`Additional CMS context:
+${t.context}`:null,["Return ONLY a JSON object with EXACTLY these top-level keys:",'- "name": string (human-friendly block name).','- "slug": lowercase kebab-case string.','- "description": short string.','- "is_original": true.','- "fields": a non-empty array of field objects. Each field is { "key": lowercase snake_case string, "label": string, "required": boolean, "type": one of "text" | "rich-text" | "image_r2" | "db_relation" }.',`    For "db_relation" fields also include "table" (one of: ${r.join(", ")}), "display_column" (e.g. title, name, full_name, file_name, code), "value_column": "id", and "multiple": boolean.`,'- "layout_schema": a single root layout node (a tree). Every node is one of:','    container: { "type": "container", "as": an HTML tag like div/section/article/figure, "className": Tailwind utility classes, "children": array of nodes }.','    field render: { "type": "field_render", "field_key": one of the field keys above, "as": an HTML tag like p/span/img/h2/h3/div, "className": Tailwind utility classes, "emptyFallback": optional placeholder string }.','    Containers may nest other containers to any depth. Every field_render.field_key MUST match one of the fields. Render image_r2 fields with "as": "img".'].join(`
+`)].filter(Boolean).join(`
+
+`)}function S(){return x({description:"A multi-tier profile card with an R2 image asset slot and a live customer relation list.",fields:[{accept:["image/png","image/jpeg","image/webp"],key:"profile_photo",label:"Profile Photo",max_bytes:10485760,required:!1,type:"image_r2"},{key:"profile_name",label:"Profile Name",placeholder:"Ada Lovelace",required:!0,type:"text"},{key:"profile_role",label:"Profile Role",placeholder:"Principal Architect",required:!1,type:"text"},{key:"profile_summary",label:"Profile Summary",placeholder:"<p>Short profile biography.</p>",required:!1,type:"rich-text"},{display_column:"full_name",key:"customer_list",label:"Customer List",multiple:!0,required:!1,table:"profiles",type:"db_relation",value_column:"id"}],is_original:!0,layout_schema:{as:"article",children:[{as:"div",children:[{as:"div",children:[{as:"div",children:[{as:"img",className:"h-24 w-24 rounded-full border object-cover shadow-sm",emptyFallback:"Upload profile photo",field_key:"profile_photo",type:"field_render"},{as:"span",className:"rounded-full bg-muted px-3 py-1 text-center text-xs font-medium text-muted-foreground",emptyFallback:"No customers linked",field_key:"customer_list",type:"field_render"}],className:"flex flex-col items-center gap-4 md:w-48",type:"container"},{as:"div",children:[{as:"div",children:[{as:"h2",className:"text-2xl font-semibold leading-tight",emptyFallback:"Untitled profile",field_key:"profile_name",type:"field_render"},{as:"p",className:"text-sm font-medium text-muted-foreground",emptyFallback:"Role pending",field_key:"profile_role",type:"field_render"}],className:"flex flex-col gap-1",type:"container"},{as:"div",children:[{as:"div",className:"prose prose-sm max-w-none text-muted-foreground",emptyFallback:"<p>Add a concise profile summary.</p>",field_key:"profile_summary",type:"field_render"}],className:"rounded-md border bg-muted/30 p-4",type:"container"}],className:"flex min-w-0 flex-1 flex-col gap-4",type:"container"}],className:"flex flex-col gap-6 md:flex-row",type:"container"}],className:"rounded-lg border bg-background p-6 shadow-sm",type:"container"}],className:"mx-auto max-w-3xl p-4",type:"container"},name:"Cortex Profile Card",slug:"cortex-profile-card"})}exports.CORTEX_WIDGET_ALLOWED_RELATION_TABLES=r;exports.buildCortexProfileCardVerificationDefinition=S;exports.buildCortexWidgetBuilderPrompt=v;exports.buildCortexWidgetBuilderSystemPrompt=z;exports.cortexWidgetBuildRequestSchema=_;exports.cortexWidgetDbRelationFieldSchema=f;exports.cortexWidgetDefinitionSchema=h;exports.cortexWidgetFieldSchema=y;exports.cortexWidgetImageR2FieldSchema=p;exports.cortexWidgetLayoutNodeSchema=s;exports.cortexWidgetRichTextFieldSchema=u;exports.cortexWidgetTextFieldSchema=m;exports.validateCortexWidgetDefinitionOutput=x;