@nextblock-cms/cortex 0.14.4 → 0.14.6

package/lib/ai-global-agent-db-tools.es.js

@@ -1,7 +1,14 @@
-import { tool as v } from "ai";
+import { tool as w } from "ai";
 import "./zod-config.es.js";
 import { z as n } from "zod";
-const V = 100, J = 20, C = 100, k = 20, M = "[REDACTED]", g = "cortex_ai_openrouter_api_key", j = {
+const G = 100, J = 20, A = 100, k = 20, P = "[REDACTED]", M = "cortex_ai_openrouter_api_key", T = /* @__PURE__ */ new Set([
+  M,
+  "bot_protection_secret",
+  "cortex_ai_pexels_api_key",
+  "cortex_ai_unsplash_access_key",
+  "email_secret",
+  "payment_secret"
+]), I = {
   blocks: {
     columns: ["id", "page_id", "post_id", "language_id", "block_type", "content", "order", "created_at", "updated_at"],
     description: "CMS page/post content blocks.",
@@ -234,7 +241,11 @@ const V = 100, J = 20, C = 100, k = 20, M = "[REDACTED]", g = "cortex_ai_openrou
   page_revisions: {
     columns: ["id", "page_id", "author_id", "version", "revision_type", "content", "created_at"],
     description: "Page revision history.",
-    primaryKey: ["id"]
+    primaryKey: ["id"],
+    // Revision history is an audit trail. The agent may read it, but letting it rewrite or
+    // delete rows would let it erase the record of its own edits — and hand-written rows
+    // would corrupt the snapshot/diff chain the restore path replays.
+    readOnly: !0
   },
   pages: {
     columns: [
@@ -258,7 +269,16 @@ const V = 100, J = 20, C = 100, k = 20, M = "[REDACTED]", g = "cortex_ai_openrou
   post_revisions: {
     columns: ["id", "post_id", "author_id", "version", "revision_type", "content", "created_at"],
     description: "Post revision history.",
-    primaryKey: ["id"]
+    primaryKey: ["id"],
+    // See page_revisions.
+    readOnly: !0
+  },
+  product_revisions: {
+    columns: ["id", "product_id", "author_id", "version", "revision_type", "content", "created_at"],
+    description: "Product revision history.",
+    primaryKey: ["id"],
+    // See page_revisions.
+    readOnly: !0
   },
   posts: {
     columns: [
@@ -426,31 +446,31 @@ const V = 100, J = 20, C = 100, k = 20, M = "[REDACTED]", g = "cortex_ai_openrou
     description: "Variant to attribute-term join rows.",
     primaryKey: ["variant_id", "attribute_term_id"]
   }
-}, Q = n.enum(["eq", "neq", "gt", "gte", "lt", "lte", "ilike", "in", "is"]), P = n.strictObject({
+}, Q = n.enum(["eq", "neq", "gt", "gte", "lt", "lte", "ilike", "in", "is"]), R = n.strictObject({
   column: n.string().trim().min(1).max(120),
   operator: Q.default("eq"),
   value: n.unknown()
-}), G = n.strictObject({
+}), W = n.strictObject({
   ascending: n.boolean().default(!0),
   column: n.string().trim().min(1).max(120)
-}), R = n.strictObject({
+}), D = n.strictObject({
   includeReadOnly: n.boolean().default(!0),
   table: n.string().trim().min(1).max(120).optional()
-}), D = n.strictObject({
+}), N = n.strictObject({
   columns: n.array(n.string().trim().min(1).max(120)).min(1).max(40).optional(),
-  filters: n.array(P).max(12).default([]),
-  limit: n.number().int().min(1).max(V).default(J),
+  filters: n.array(R).max(12).default([]),
+  limit: n.number().int().min(1).max(G).default(J),
   offset: n.number().int().min(0).max(1e4).default(0),
-  orderBy: G.optional(),
+  orderBy: W.optional(),
   table: n.string().trim().min(1).max(120)
 }), O = n.strictObject({
-  filters: n.array(P).max(12).optional(),
+  filters: n.array(R).max(12).optional(),
   operation: n.enum(["delete", "insert", "update", "upsert"]),
   rows: n.array(n.record(n.string(), n.unknown())).min(1).max(k).optional(),
   summary: n.string().trim().min(1).max(500).optional(),
   table: n.string().trim().min(1).max(120),
   values: n.record(n.string(), n.unknown()).optional()
-}), N = n.strictObject({
+}), L = n.strictObject({
   actions: n.array(O).min(1).max(8),
   summary: n.string().trim().min(1).max(500).optional()
 });
@@ -462,95 +482,104 @@ function E(e) {
 function f(e) {
   return e ? typeof e == "object" && "message" in e ? String(e.message || "Unknown database error.") : String(e) : "Unknown database error.";
 }
-function K(e) {
-  return e === null || typeof e != "object" ? JSON.stringify(e) : Array.isArray(e) ? `[${e.map((t) => K(t)).join(",")}]` : `{${Object.keys(e).sort().map((t) => `${JSON.stringify(t)}:${K(e[t])}`).join(",")}}`;
+function C(e) {
+  return e === null || typeof e != "object" ? JSON.stringify(e) : Array.isArray(e) ? `[${e.map((t) => C(t)).join(",")}]` : `{${Object.keys(e).sort().map((t) => `${JSON.stringify(t)}:${C(e[t])}`).join(",")}}`;
 }
-function L(e) {
+function q(e) {
   let t = 2166136261;
-  const r = K(e);
+  const r = C(e);
   for (let a = 0; a < r.length; a++)
     t ^= r.charCodeAt(a), t = Math.imul(t, 16777619);
   return (t >>> 0).toString(16).padStart(8, "0");
 }
-function $(e) {
+function K(e) {
   return e.replace(/\s+/g, " ").trim().toUpperCase();
 }
-function W(e, t, r) {
-  return `${$(`CONFIRM ${e} ${t}`)} #${L(r)}`;
+function Y(e, t, r) {
+  return `${K(`CONFIRM ${e} ${t}`)} #${q(r)}`;
 }
-function Y(e) {
+function H(e) {
   return {
-    confirmationPhrase: W(e.action, e.subject, e.payload),
+    confirmationPhrase: Y(e.action, e.subject, e.payload),
     mutationExecuted: !1,
     preview: e.preview,
     requiresConfirmation: !0,
     success: !0
   };
 }
-function q(e) {
+function z(e) {
   if (e.context?.skipConfirmation)
     return null;
-  const t = Y(e), r = $(e.context?.latestUserMessage || ""), a = $(t.confirmationPhrase);
+  const t = H(e), r = K(e.context?.latestUserMessage || ""), a = K(t.confirmationPhrase);
   return r && !r.includes(a) ? {
     ...t,
     message: "The database target changed or the confirmation did not match. Please review and confirm again."
   } : r.includes(a) ? null : t;
 }
-function H(e) {
-  return Object.prototype.hasOwnProperty.call(j, e);
+function Z(e) {
+  return Object.prototype.hasOwnProperty.call(I, e);
 }
-function T(e) {
+function j(e) {
   const t = e.trim();
   if (t.includes(".") || t.toLowerCase().startsWith("auth"))
     throw new Error("Cortex AI cannot access auth schema tables.");
-  if (!H(t))
+  if (!Z(t))
     throw new Error(`Table "${t}" is not available to Cortex AI database tools.`);
   return t;
 }
 function _(e) {
-  return j[e];
+  return I[e];
 }
-function w(e) {
+function h(e) {
   return /(?:password|token|secret|api[_-]?key|private[_-]?key|credential)/i.test(e);
 }
-function b(e, t) {
+function g(e, t) {
   if (!_(e).columns.includes(t))
     throw new Error(`Column "${t}" is not available on table "${e}".`);
-  if (w(t))
+  if (h(t))
     throw new Error(`Column "${t}" is protected and cannot be used through Cortex AI.`);
 }
-function I(e, t = "payload") {
+function $(e, t = "payload") {
   if (Array.isArray(e)) {
-    e.forEach((r, a) => I(r, `${t}[${a}]`));
+    e.forEach((r, a) => $(r, `${t}[${a}]`));
     return;
   }
   if (!(!e || typeof e != "object"))
     for (const [r, a] of Object.entries(e)) {
-      if (w(r))
+      if (h(r))
         throw new Error(`Protected field "${t}.${r}" cannot be written through Cortex AI.`);
-      I(a, `${t}.${r}`);
+      $(a, `${t}.${r}`);
     }
 }
-function h(e) {
+function b(e) {
   if (Array.isArray(e))
-    return e.map((r) => h(r));
+    return e.map((r) => b(r));
   if (!e || typeof e != "object")
     return e;
   const t = {};
   for (const [r, a] of Object.entries(e))
-    t[r] = w(r) ? M : h(a);
+    t[r] = h(r) ? P : b(a);
   return t;
 }
-function Z(e) {
-  return e.map((t) => t && typeof t == "object" && !Array.isArray(t) && t.key === g ? { key: g, value: M } : h(t));
+function ee(e) {
+  return e.map((t) => {
+    if (t && typeof t == "object" && !Array.isArray(t)) {
+      const r = t.key;
+      if (typeof r == "string" && T.has(r))
+        return { key: r, value: P };
+    }
+    return b(t);
+  });
 }
-function ee(e, t) {
+function te(e, t) {
   if (e !== "site_settings")
     return;
-  if (JSON.stringify(t).toLowerCase().includes(g))
-    throw new Error("The Cortex AI OpenRouter API key site setting is protected.");
+  const r = JSON.stringify(t).toLowerCase();
+  for (const a of T)
+    if (r.includes(a))
+      throw new Error(`The "${a}" site setting is protected.`);
 }
-function te(e, t) {
+function re(e, t) {
   switch (t.operator) {
     case "eq":
       return e.eq(t.column, t.value);
@@ -576,36 +605,36 @@ function te(e, t) {
       return e.is(t.column, t.value);
   }
 }
-function x(e, t, r) {
+function v(e, t, r) {
   let a = t;
   for (const o of r)
-    b(e, o.column), a = te(a, o);
-  return e === "site_settings" && (a = a.neq("key", g)), a;
+    g(e, o.column), a = re(a, o);
+  return e === "site_settings" && (a = a.neq("key", M)), a;
 }
-function re(e, t) {
-  const r = _(e), a = t?.length ? t : r.columns.filter((o) => !w(o));
-  return a.forEach((o) => b(e, o)), a.join(",");
+function ae(e, t) {
+  const r = _(e), a = t?.length ? t : r.columns.filter((o) => !h(o));
+  return a.forEach((o) => g(e, o)), a.join(",");
 }
-function z(e, t) {
+function F(e, t) {
   return t.map((r) => `${r}=${String(e[r] ?? "")}`).join("|");
 }
-async function F(e, t, r) {
+async function U(e, t, r) {
   const a = _(t);
-  let o = e.from(t).select(a.primaryKey.join(",")).limit(C + 1);
-  o = x(t, o, r);
+  let o = e.from(t).select(a.primaryKey.join(",")).limit(A + 1);
+  o = v(t, o, r);
   const { data: i, error: s } = await o;
   if (s)
     throw new Error(`Failed to preview database mutation: ${f(s)}`);
   const d = Array.isArray(i) ? i : [];
-  if (d.length > C)
-    throw new Error(`Refusing to mutate more than ${C} rows.`);
+  if (d.length > A)
+    throw new Error(`Refusing to mutate more than ${A} rows.`);
   return d;
 }
-function U(e) {
-  const t = T(e.table), r = _(t), a = e.operation;
+function B(e) {
+  const t = j(e.table), r = _(t), a = e.operation;
   if (r.readOnly)
     throw new Error(`Table "${t}" is read-only for Cortex AI.`);
-  if (ee(t, e), (a === "update" || a === "delete") && (!e.filters || e.filters.length === 0))
+  if (te(t, e), (a === "update" || a === "delete") && (!e.filters || e.filters.length === 0))
     throw new Error(`${a} operations require at least one filter.`);
   if ((a === "insert" || a === "upsert") && (!e.rows || e.rows.length === 0))
     throw new Error(`${a} operations require rows.`);
@@ -615,16 +644,16 @@ function U(e) {
     throw new Error(`Refusing to mutate more than ${k} input rows.`);
   const o = e.rows ?? (e.values ? [e.values] : []);
   for (const i of o) {
-    I(i);
+    $(i);
     for (const s of Object.keys(i))
-      b(t, s);
+      g(t, s);
   }
   for (const i of e.filters ?? [])
-    b(t, i.column);
+    g(t, i.column);
   return t;
 }
-function B(e) {
-  const { input: t, table: r, targetRows: a } = e, o = _(r), i = a.map((m) => z(m, o.primaryKey)).sort(), s = t.rows?.length ?? 0, d = t.operation === "insert" || t.operation === "upsert" ? s : a.length, l = t.summary || `${t.operation} ${d} ${d === 1 ? "row" : "rows"} in ${r}.`;
+function X(e) {
+  const { input: t, table: r, targetRows: a } = e, o = _(r), i = a.map((p) => F(p, o.primaryKey)).sort(), s = t.rows?.length ?? 0, d = t.operation === "insert" || t.operation === "upsert" ? s : a.length, l = t.summary || `${t.operation} ${d} ${d === 1 ? "row" : "rows"} in ${r}.`;
   return {
     affectedCount: d,
     operation: t.operation,
@@ -634,7 +663,7 @@ function B(e) {
     targetIds: i
   };
 }
-async function A(e) {
+async function x(e) {
   const t = e.context?.actorUserId;
   if (!t)
     return { auditError: "Missing actor user id.", auditLogged: !1 };
@@ -644,9 +673,9 @@ async function A(e) {
       actor_user_id: t,
       error_message: e.errorMessage ?? null,
       operation_summary: e.summary,
-      payload: h(e.input),
-      payload_hash: L(e.input),
-      preview: h(e.preview),
+      payload: b(e.input),
+      payload_hash: q(e.input),
+      preview: b(e.preview),
       status: e.status,
       target_tables: e.targetTables,
       tool_name: e.toolName
@@ -656,20 +685,20 @@ async function A(e) {
     return { auditError: f(r), auditLogged: !1 };
   }
 }
-async function ae(e, t, r) {
+async function ie(e, t, r) {
   const o = _(t).primaryKey.join(",");
   let i;
-  e.operation === "insert" ? i = r.from(t).insert(e.rows).select(o) : e.operation === "upsert" ? i = r.from(t).upsert(e.rows).select(o) : e.operation === "update" ? (i = r.from(t).update(e.values), i = x(t, i, e.filters ?? []), i = i.select(o)) : (i = r.from(t).delete(), i = x(t, i, e.filters ?? []), i = i.select(o));
+  e.operation === "insert" ? i = r.from(t).insert(e.rows).select(o) : e.operation === "upsert" ? i = r.from(t).upsert(e.rows).select(o) : e.operation === "update" ? (i = r.from(t).update(e.values), i = v(t, i, e.filters ?? []), i = i.select(o)) : (i = r.from(t).delete(), i = v(t, i, e.filters ?? []), i = i.select(o));
   const { data: s, error: d } = await i;
   if (d)
     throw new Error(f(d));
   return Array.isArray(s) ? s : [];
 }
-async function ie(e) {
-  const t = R.parse(e), a = (t.table ? [T(t.table)] : Object.keys(j)).filter((o) => t.includeReadOnly || !_(o).readOnly).map((o) => {
+async function oe(e) {
+  const t = D.parse(e), a = (t.table ? [j(t.table)] : Object.keys(I)).filter((o) => t.includeReadOnly || !_(o).readOnly).map((o) => {
     const i = _(o);
     return {
-      columns: i.columns.filter((s) => !w(s)),
+      columns: i.columns.filter((s) => !h(s)),
       description: i.description,
       primaryKey: i.primaryKey,
       readOnly: !!i.readOnly,
@@ -681,16 +710,16 @@ async function ie(e) {
       "Use read_database_records for reads and execute_database_mutation/action_plan for writes.",
       "No auth schema access, no arbitrary SQL, no password/secret/API-key fields.",
       "profiles, user_addresses, and cortex_ai_db_mutation_audit are read-only.",
-      `site_settings.${g} is protected.`
+      `Protected site_settings keys (never readable or writable): ${[...T].sort().join(", ")}.`
     ],
     success: !0,
     tables: a
   };
 }
-async function oe(e, t) {
-  const r = D.parse(e), a = T(r.table), o = re(a, r.columns);
+async function ne(e, t) {
+  const r = N.parse(e), a = j(r.table), o = ae(a, r.columns);
   let i = E(t).from(a).select(o).range(r.offset, r.offset + r.limit - 1);
-  i = x(a, i, r.filters), r.orderBy && (b(a, r.orderBy.column), i = i.order(r.orderBy.column, { ascending: r.orderBy.ascending }));
+  i = v(a, i, r.filters), r.orderBy && (g(a, r.orderBy.column), i = i.order(r.orderBy.column, { ascending: r.orderBy.ascending }));
   const { data: s, error: d } = await i;
   if (d)
     throw new Error(`Failed to read database records: ${f(d)}`);
@@ -699,16 +728,16 @@ async function oe(e, t) {
     columns: o.split(","),
     limit: r.limit,
     offset: r.offset,
-    rows: Z(l),
+    rows: ee(l),
     success: !0,
     table: a
   };
 }
-async function X(e, t) {
-  const r = O.parse(e), a = U(r), o = E(t), i = r.operation === "update" || r.operation === "delete" ? await F(o, a, r.filters ?? []) : [], s = B({ input: r, table: a, targetRows: i }), d = {
+async function V(e, t) {
+  const r = O.parse(e), a = B(r), o = E(t), i = r.operation === "update" || r.operation === "delete" ? await U(o, a, r.filters ?? []) : [], s = X({ input: r, table: a, targetRows: i }), d = {
     input: r,
     targetIds: s.targetIds
-  }, l = q({
+  }, l = z({
     action: `DATABASE ${r.operation}`,
     context: t,
     payload: d,
@@ -718,7 +747,7 @@ async function X(e, t) {
   if (l)
     return l;
   try {
-    const m = await ae(r, a, o), p = t?.skipAudit ? { auditLogged: !1 } : await A({
+    const p = await ie(r, a, o), m = t?.skipAudit ? { auditLogged: !1 } : await x({
       context: t,
       input: d,
       preview: s,
@@ -728,20 +757,20 @@ async function X(e, t) {
       toolName: "execute_database_mutation"
     });
     return {
-      affectedCount: m.length || s.affectedCount,
-      auditLogged: p.auditLogged,
-      ...p.auditError ? { auditError: p.auditError } : {},
+      affectedCount: p.length || s.affectedCount,
+      auditLogged: m.auditLogged,
+      ...m.auditError ? { auditError: m.auditError } : {},
       mutationExecuted: !0,
       operation: r.operation,
-      sampleTargetIds: m.map((c) => z(c, _(a).primaryKey)).slice(0, 10),
+      sampleTargetIds: p.map((c) => F(c, _(a).primaryKey)).slice(0, 10),
       success: !0,
       summary: s.summary,
       table: a
     };
-  } catch (m) {
-    const p = f(m), c = t?.skipAudit ? { auditLogged: !1 } : await A({
+  } catch (p) {
+    const m = f(p), c = t?.skipAudit ? { auditLogged: !1 } : await x({
       context: t,
-      errorMessage: p,
+      errorMessage: m,
       input: d,
       preview: s,
       status: "failure",
@@ -752,7 +781,7 @@ async function X(e, t) {
     return {
       auditLogged: c.auditLogged,
       ...c.auditError ? { auditError: c.auditError } : {},
-      message: `Database mutation failed: ${p}`,
+      message: `Database mutation failed: ${m}`,
       mutationExecuted: !1,
       operation: r.operation,
       success: !1,
@@ -760,13 +789,13 @@ async function X(e, t) {
     };
   }
 }
-async function ne(e, t) {
-  const r = N.parse(e), a = [];
+async function se(e, t) {
+  const r = L.parse(e), a = [];
   for (const c of r.actions) {
-    const y = U(c), u = c.operation === "update" || c.operation === "delete" ? await F(E(t), y, c.filters ?? []) : [];
+    const y = B(c), u = c.operation === "update" || c.operation === "delete" ? await U(E(t), y, c.filters ?? []) : [];
     a.push({
       input: c,
-      preview: B({ input: c, table: y, targetRows: u }),
+      preview: X({ input: c, table: y, targetRows: u }),
       table: y
     });
   }
@@ -779,7 +808,7 @@ async function ne(e, t) {
     input: c,
     table: u,
     targetIds: y.targetIds
-  })), d = q({
+  })), d = z({
     action: "DATABASE ACTION PLAN",
     context: t,
     payload: s,
@@ -789,15 +818,15 @@ async function ne(e, t) {
   if (d)
     return d;
   const l = [];
-  let m = !1;
+  let p = !1;
   for (const [c, y] of a.entries()) {
-    const u = await X(y.input, {
+    const u = await V(y.input, {
       ...t,
       skipAudit: !0,
       skipConfirmation: !0
     });
-    if (l.push(u), u && typeof u == "object" && u.mutationExecuted === !0 && (m = !0), !u || typeof u != "object" || u.success === !1) {
-      const S = await A({
+    if (l.push(u), u && typeof u == "object" && u.mutationExecuted === !0 && (p = !0), !u || typeof u != "object" || u.success === !1) {
+      const S = await x({
         context: t,
         errorMessage: u && typeof u == "object" && typeof u.message == "string" ? u.message : `Database action ${c + 1} failed.`,
         input: s,
@@ -813,13 +842,13 @@ async function ne(e, t) {
         ...S.auditError ? { auditError: S.auditError } : {},
         failedActionIndex: c,
         message: u && typeof u == "object" && typeof u.message == "string" ? u.message : `Database action ${c + 1} failed.`,
-        mutationExecuted: m,
+        mutationExecuted: p,
         results: l,
         success: !1
       };
     }
   }
-  const p = await A({
+  const m = await x({
     context: t,
     input: s,
     preview: i,
@@ -830,50 +859,50 @@ async function ne(e, t) {
   });
   return {
     actionCount: a.length,
-    auditLogged: p.auditLogged,
-    ...p.auditError ? { auditError: p.auditError } : {},
-    mutationExecuted: m,
+    auditLogged: m.auditLogged,
+    ...m.auditError ? { auditError: m.auditError } : {},
+    mutationExecuted: p,
     results: l,
     success: !0,
     summary: r.summary ?? null
   };
 }
-function ue(e) {
+function le(e) {
   return {
-    describe_database_schema: v({
+    describe_database_schema: w({
       description: "Describe the public database tables Cortex AI can read or mutate, including read-only tables, primary keys, and writable columns. Use before broad database tasks when unsure about schema.",
-      execute: (t) => ie(t),
-      inputSchema: R,
+      execute: (t) => oe(t),
+      inputSchema: D,
       strict: !0
     }),
-    execute_database_action_plan: v({
+    execute_database_action_plan: w({
       description: "Execute up to 8 typed database mutations as one confirmed plan. Mutating: first returns one combined confirmation preview and Confirm button; after confirmation, runs each action in order and stops on the first failure.",
-      execute: (t) => ne(t, e),
-      inputSchema: N,
+      execute: (t) => se(t, e),
+      inputSchema: L,
       strict: !0
     }),
-    execute_database_mutation: v({
+    execute_database_mutation: w({
       description: "Run one typed insert, update, upsert, or delete against an allowed public database table. Mutating: always previews affected rows and requires exact user confirmation before execution. Does not support arbitrary SQL.",
-      execute: (t) => X(t, e),
+      execute: (t) => V(t, e),
       inputSchema: O,
       strict: !0
     }),
-    read_database_records: v({
+    read_database_records: w({
       description: "Read records from an allowed public database table with validated columns, filters, ordering, limit, and offset. Read-only and redacts protected secret-like values.",
-      execute: (t) => oe(t, e),
-      inputSchema: D,
+      execute: (t) => ne(t, e),
+      inputSchema: N,
       strict: !0
     })
   };
 }
 export {
-  ue as createCortexDatabaseAgentTools,
-  R as describeDatabaseSchemaInputSchema,
-  ne as executeDatabaseActionPlan,
-  N as executeDatabaseActionPlanInputSchema,
-  X as executeDatabaseMutation,
+  le as createCortexDatabaseAgentTools,
+  D as describeDatabaseSchemaInputSchema,
+  se as executeDatabaseActionPlan,
+  L as executeDatabaseActionPlanInputSchema,
+  V as executeDatabaseMutation,
   O as executeDatabaseMutationInputSchema,
-  ie as executeDescribeDatabaseSchema,
-  oe as executeReadDatabaseRecords,
-  D as readDatabaseRecordsInputSchema
+  oe as executeDescribeDatabaseSchema,
+  ne as executeReadDatabaseRecords,
+  N as readDatabaseRecordsInputSchema
 };