@nextblock-cms/cortex 0.17.7 → 0.17.8

package/lib/ai-global-agent-db-tools.es.js

@@ -1,14 +1,125 @@
-import { tool as w } from "ai";
+import { tool as k } from "ai";
+import { isValidBlockType as Y, validateCortexBlockContent as H, validateCustomBlockInstanceContent as Z, loadCustomBlockDefinitions as ee } from "./block-content-schemas.es.js";
+import { cortexSiteBriefSchema as te } from "./site-brief.es.js";
 import "./zod-config.es.js";
-import { z as n } from "zod";
-const G = 100, J = 20, A = 100, k = 20, P = "[REDACTED]", M = "cortex_ai_openrouter_api_key", T = /* @__PURE__ */ new Set([
-  M,
+import { z as o } from "zod";
+const re = 100, ae = 20, x = 100, C = 20, D = "[REDACTED]", N = "cortex_ai_openrouter_api_key", K = /* @__PURE__ */ new Set([
+  N,
   "bot_protection_secret",
   "cortex_ai_pexels_api_key",
   "cortex_ai_unsplash_access_key",
   "email_secret",
   "payment_secret"
-]), I = {
+]), j = /* @__PURE__ */ new Set([
+  "cortex_ai_build_session",
+  "is_admin_created",
+  "migration_baseline_generation",
+  "security_settings"
+]), ie = {
+  active_logo_id: o.string().uuid().nullable(),
+  cortex_ai_site_brief: te,
+  footer_copyright: o.record(o.string().trim().min(2).max(12), o.string().max(500)),
+  footer_show_attribution: o.boolean(),
+  global_css: o.string().max(2e5),
+  onboarding_state: o.record(o.string(), o.unknown()),
+  site_description: o.string().max(1e3),
+  site_keywords: o.string().max(1e3),
+  site_title: o.string().max(200)
+};
+function oe(e) {
+  return e.map((t) => {
+    const r = t.path.map(String).join(".");
+    return r ? `${r}: ${t.message}` : t.message;
+  }).join("; ");
+}
+function A(e, t) {
+  if (j.has(e))
+    throw new Error(`The "${e}" site setting cannot be written through Cortex AI database tools.`);
+  const r = ie[e];
+  if (!r)
+    return;
+  const a = r.safeParse(t);
+  if (!a.success)
+    throw new Error(`Invalid value for site setting "${e}": ${oe(a.error.issues)}`);
+}
+async function R(e) {
+  const t = typeof e.blockType == "string" ? e.blockType : "";
+  if (!t)
+    throw new Error(`${e.label}: block_type is required.`);
+  if (!e.content || typeof e.content != "object" || Array.isArray(e.content))
+    throw new Error(`${e.label}: content must be a JSON object.`);
+  const r = e.content;
+  if (Y(t)) {
+    const i = H(t, r, e.context);
+    if (!i.isValid)
+      throw new Error(`${e.label}: content is invalid for block type "${t}": ${i.errors.join("; ")}`);
+    return;
+  }
+  const a = (await e.definitions()).find((i) => i.slug === t);
+  if (!a)
+    throw new Error(
+      `${e.label}: "${t}" is neither a built-in block type nor a custom block slug. Use list_custom_blocks to see the custom block definitions.`
+    );
+  const n = Z(a, r);
+  if (!n.isValid)
+    throw new Error(`${e.label}: content is invalid for custom block "${t}": ${n.errors.join("; ")}`);
+}
+async function L(e, t, r) {
+  if (t === "site_settings") {
+    for (const i of e.rows ?? [])
+      typeof i.key == "string" && A(i.key, i.value);
+    if (e.operation === "update" && e.values) {
+      const i = typeof e.values.key == "string" ? e.values.key : null, s = (e.filters ?? []).find(
+        (u) => u.column === "key" && u.operator === "eq" && typeof u.value == "string"
+      ), c = i ?? (s ? String(s.value) : null);
+      c && ("value" in e.values ? A(c, e.values.value) : j.has(c) && A(c, void 0));
+    }
+    return;
+  }
+  if (t !== "blocks")
+    return;
+  let a = null;
+  const n = () => a ??= ee(g(r));
+  if (e.operation === "insert" || e.operation === "upsert") {
+    for (const [i, s] of (e.rows ?? []).entries())
+      await R({
+        blockType: s.block_type,
+        content: s.content ?? {},
+        context: r,
+        definitions: n,
+        label: `rows[${i}]`
+      });
+    return;
+  }
+  if (e.operation === "update" && e.values) {
+    const i = "content" in e.values, s = "block_type" in e.values;
+    if (!i && !s)
+      return;
+    if (s && !i)
+      throw new Error("Changing block_type requires the new content for that type in the same update.");
+    const c = /* @__PURE__ */ new Set();
+    if (s)
+      c.add(String(e.values.block_type));
+    else {
+      let u = g(r).from("blocks").select("id, block_type").limit(x + 1);
+      u = w(t, u, e.filters ?? []);
+      const { data: _, error: m } = await u;
+      if (m)
+        throw new Error(`Failed to read the blocks to update: ${f(m)}`);
+      for (const d of Array.isArray(_) ? _ : [])
+        c.add(String(d.block_type ?? ""));
+    }
+    for (const u of c)
+      await R({
+        blockType: u,
+        content: e.values.content,
+        context: r,
+        definitions: n,
+        label: `values (block_type "${u}")`
+      });
+  }
+}
+const O = {
   blocks: {
     columns: ["id", "page_id", "post_id", "language_id", "block_type", "content", "order", "created_at", "updated_at"],
     description: "CMS page/post content blocks.",
@@ -446,35 +557,35 @@ const G = 100, J = 20, A = 100, k = 20, P = "[REDACTED]", M = "cortex_ai_openrou
     description: "Variant to attribute-term join rows.",
     primaryKey: ["variant_id", "attribute_term_id"]
   }
-}, Q = n.enum(["eq", "neq", "gt", "gte", "lt", "lte", "ilike", "in", "is"]), R = n.strictObject({
-  column: n.string().trim().min(1).max(120),
-  operator: Q.default("eq"),
-  value: n.unknown()
-}), W = n.strictObject({
-  ascending: n.boolean().default(!0),
-  column: n.string().trim().min(1).max(120)
-}), D = n.strictObject({
-  includeReadOnly: n.boolean().default(!0),
-  table: n.string().trim().min(1).max(120).optional()
-}), N = n.strictObject({
-  columns: n.array(n.string().trim().min(1).max(120)).min(1).max(40).optional(),
-  filters: n.array(R).max(12).default([]),
-  limit: n.number().int().min(1).max(G).default(J),
-  offset: n.number().int().min(0).max(1e4).default(0),
-  orderBy: W.optional(),
-  table: n.string().trim().min(1).max(120)
-}), O = n.strictObject({
-  filters: n.array(R).max(12).optional(),
-  operation: n.enum(["delete", "insert", "update", "upsert"]),
-  rows: n.array(n.record(n.string(), n.unknown())).min(1).max(k).optional(),
-  summary: n.string().trim().min(1).max(500).optional(),
-  table: n.string().trim().min(1).max(120),
-  values: n.record(n.string(), n.unknown()).optional()
-}), L = n.strictObject({
-  actions: n.array(O).min(1).max(8),
-  summary: n.string().trim().min(1).max(500).optional()
+}, ne = o.enum(["eq", "neq", "gt", "gte", "lt", "lte", "ilike", "in", "is"]), q = o.strictObject({
+  column: o.string().trim().min(1).max(120),
+  operator: ne.default("eq"),
+  value: o.unknown()
+}), se = o.strictObject({
+  ascending: o.boolean().default(!0),
+  column: o.string().trim().min(1).max(120)
+}), F = o.strictObject({
+  includeReadOnly: o.boolean().default(!0),
+  table: o.string().trim().min(1).max(120).optional()
+}), B = o.strictObject({
+  columns: o.array(o.string().trim().min(1).max(120)).min(1).max(40).optional(),
+  filters: o.array(q).max(12).default([]),
+  limit: o.number().int().min(1).max(re).default(ae),
+  offset: o.number().int().min(0).max(1e4).default(0),
+  orderBy: se.optional(),
+  table: o.string().trim().min(1).max(120)
+}), P = o.strictObject({
+  filters: o.array(q).max(12).optional(),
+  operation: o.enum(["delete", "insert", "update", "upsert"]),
+  rows: o.array(o.record(o.string(), o.unknown())).min(1).max(C).optional(),
+  summary: o.string().trim().min(1).max(500).optional(),
+  table: o.string().trim().min(1).max(120),
+  values: o.record(o.string(), o.unknown()).optional()
+}), z = o.strictObject({
+  actions: o.array(P).min(1).max(8),
+  summary: o.string().trim().min(1).max(500).optional()
 });
-function E(e) {
+function g(e) {
   if (!e?.supabase)
     throw new Error("Cortex AI database tools require a Supabase client.");
   return e.supabase;
@@ -482,104 +593,104 @@ function E(e) {
 function f(e) {
   return e ? typeof e == "object" && "message" in e ? String(e.message || "Unknown database error.") : String(e) : "Unknown database error.";
 }
-function C(e) {
-  return e === null || typeof e != "object" ? JSON.stringify(e) : Array.isArray(e) ? `[${e.map((t) => C(t)).join(",")}]` : `{${Object.keys(e).sort().map((t) => `${JSON.stringify(t)}:${C(e[t])}`).join(",")}}`;
+function $(e) {
+  return e === null || typeof e != "object" ? JSON.stringify(e) : Array.isArray(e) ? `[${e.map((t) => $(t)).join(",")}]` : `{${Object.keys(e).sort().map((t) => `${JSON.stringify(t)}:${$(e[t])}`).join(",")}}`;
 }
-function q(e) {
+function U(e) {
   let t = 2166136261;
-  const r = C(e);
+  const r = $(e);
   for (let a = 0; a < r.length; a++)
     t ^= r.charCodeAt(a), t = Math.imul(t, 16777619);
   return (t >>> 0).toString(16).padStart(8, "0");
 }
-function K(e) {
+function T(e) {
   return e.replace(/\s+/g, " ").trim().toUpperCase();
 }
-function Y(e, t, r) {
-  return `${K(`CONFIRM ${e} ${t}`)} #${q(r)}`;
+function ce(e, t, r) {
+  return `${T(`CONFIRM ${e} ${t}`)} #${U(r)}`;
 }
-function H(e) {
+function de(e) {
   return {
-    confirmationPhrase: Y(e.action, e.subject, e.payload),
+    confirmationPhrase: ce(e.action, e.subject, e.payload),
     mutationExecuted: !1,
     preview: e.preview,
     requiresConfirmation: !0,
     success: !0
   };
 }
-function z(e) {
+function V(e) {
   if (e.context?.skipConfirmation)
     return null;
-  const t = H(e), r = K(e.context?.latestUserMessage || ""), a = K(t.confirmationPhrase);
+  const t = de(e), r = T(e.context?.latestUserMessage || ""), a = T(t.confirmationPhrase);
   return r && !r.includes(a) ? {
     ...t,
     message: "The database target changed or the confirmation did not match. Please review and confirm again."
   } : r.includes(a) ? null : t;
 }
-function Z(e) {
-  return Object.prototype.hasOwnProperty.call(I, e);
+function ue(e) {
+  return Object.prototype.hasOwnProperty.call(O, e);
 }
-function j(e) {
+function M(e) {
   const t = e.trim();
   if (t.includes(".") || t.toLowerCase().startsWith("auth"))
     throw new Error("Cortex AI cannot access auth schema tables.");
-  if (!Z(t))
+  if (!ue(t))
     throw new Error(`Table "${t}" is not available to Cortex AI database tools.`);
   return t;
 }
-function _(e) {
-  return I[e];
+function p(e) {
+  return O[e];
 }
-function h(e) {
+function v(e) {
   return /(?:password|token|secret|api[_-]?key|private[_-]?key|credential)/i.test(e);
 }
-function g(e, t) {
-  if (!_(e).columns.includes(t))
+function b(e, t) {
+  if (!p(e).columns.includes(t))
     throw new Error(`Column "${t}" is not available on table "${e}".`);
-  if (h(t))
+  if (v(t))
     throw new Error(`Column "${t}" is protected and cannot be used through Cortex AI.`);
 }
-function $(e, t = "payload") {
+function I(e, t = "payload") {
   if (Array.isArray(e)) {
-    e.forEach((r, a) => $(r, `${t}[${a}]`));
+    e.forEach((r, a) => I(r, `${t}[${a}]`));
     return;
   }
   if (!(!e || typeof e != "object"))
     for (const [r, a] of Object.entries(e)) {
-      if (h(r))
+      if (v(r))
         throw new Error(`Protected field "${t}.${r}" cannot be written through Cortex AI.`);
-      $(a, `${t}.${r}`);
+      I(a, `${t}.${r}`);
     }
 }
-function b(e) {
+function h(e) {
   if (Array.isArray(e))
-    return e.map((r) => b(r));
+    return e.map((r) => h(r));
   if (!e || typeof e != "object")
     return e;
   const t = {};
   for (const [r, a] of Object.entries(e))
-    t[r] = h(r) ? P : b(a);
+    t[r] = v(r) ? D : h(a);
   return t;
 }
-function ee(e) {
+function le(e) {
   return e.map((t) => {
     if (t && typeof t == "object" && !Array.isArray(t)) {
       const r = t.key;
-      if (typeof r == "string" && T.has(r))
-        return { key: r, value: P };
+      if (typeof r == "string" && K.has(r))
+        return { key: r, value: D };
     }
-    return b(t);
+    return h(t);
   });
 }
-function te(e, t) {
+function _e(e, t) {
   if (e !== "site_settings")
     return;
   const r = JSON.stringify(t).toLowerCase();
-  for (const a of T)
+  for (const a of K)
     if (r.includes(a))
       throw new Error(`The "${a}" site setting is protected.`);
 }
-function re(e, t) {
+function me(e, t) {
   switch (t.operator) {
     case "eq":
       return e.eq(t.column, t.value);
@@ -605,77 +716,77 @@ function re(e, t) {
       return e.is(t.column, t.value);
   }
 }
-function v(e, t, r) {
+function w(e, t, r) {
   let a = t;
-  for (const o of r)
-    g(e, o.column), a = re(a, o);
-  return e === "site_settings" && (a = a.neq("key", M)), a;
+  for (const n of r)
+    b(e, n.column), a = me(a, n);
+  return e === "site_settings" && (a = a.neq("key", N)), a;
 }
-function ae(e, t) {
-  const r = _(e), a = t?.length ? t : r.columns.filter((o) => !h(o));
-  return a.forEach((o) => g(e, o)), a.join(",");
+function pe(e, t) {
+  const r = p(e), a = t?.length ? t : r.columns.filter((n) => !v(n));
+  return a.forEach((n) => b(e, n)), a.join(",");
 }
-function F(e, t) {
+function G(e, t) {
   return t.map((r) => `${r}=${String(e[r] ?? "")}`).join("|");
 }
-async function U(e, t, r) {
-  const a = _(t);
-  let o = e.from(t).select(a.primaryKey.join(",")).limit(A + 1);
-  o = v(t, o, r);
-  const { data: i, error: s } = await o;
+async function X(e, t, r) {
+  const a = p(t);
+  let n = e.from(t).select(a.primaryKey.join(",")).limit(x + 1);
+  n = w(t, n, r);
+  const { data: i, error: s } = await n;
   if (s)
     throw new Error(`Failed to preview database mutation: ${f(s)}`);
-  const d = Array.isArray(i) ? i : [];
-  if (d.length > A)
-    throw new Error(`Refusing to mutate more than ${A} rows.`);
-  return d;
+  const c = Array.isArray(i) ? i : [];
+  if (c.length > x)
+    throw new Error(`Refusing to mutate more than ${x} rows.`);
+  return c;
 }
-function B(e) {
-  const t = j(e.table), r = _(t), a = e.operation;
+function J(e) {
+  const t = M(e.table), r = p(t), a = e.operation;
   if (r.readOnly)
     throw new Error(`Table "${t}" is read-only for Cortex AI.`);
-  if (te(t, e), (a === "update" || a === "delete") && (!e.filters || e.filters.length === 0))
+  if (_e(t, e), (a === "update" || a === "delete") && (!e.filters || e.filters.length === 0))
     throw new Error(`${a} operations require at least one filter.`);
   if ((a === "insert" || a === "upsert") && (!e.rows || e.rows.length === 0))
     throw new Error(`${a} operations require rows.`);
   if (a === "update" && (!e.values || Object.keys(e.values).length === 0))
     throw new Error("update operations require values.");
-  if (e.rows && e.rows.length > k)
-    throw new Error(`Refusing to mutate more than ${k} input rows.`);
-  const o = e.rows ?? (e.values ? [e.values] : []);
-  for (const i of o) {
-    $(i);
+  if (e.rows && e.rows.length > C)
+    throw new Error(`Refusing to mutate more than ${C} input rows.`);
+  const n = e.rows ?? (e.values ? [e.values] : []);
+  for (const i of n) {
+    I(i);
     for (const s of Object.keys(i))
-      g(t, s);
+      b(t, s);
   }
   for (const i of e.filters ?? [])
-    g(t, i.column);
+    b(t, i.column);
   return t;
 }
-function X(e) {
-  const { input: t, table: r, targetRows: a } = e, o = _(r), i = a.map((p) => F(p, o.primaryKey)).sort(), s = t.rows?.length ?? 0, d = t.operation === "insert" || t.operation === "upsert" ? s : a.length, l = t.summary || `${t.operation} ${d} ${d === 1 ? "row" : "rows"} in ${r}.`;
+function W(e) {
+  const { input: t, table: r, targetRows: a } = e, n = p(r), i = a.map((_) => G(_, n.primaryKey)).sort(), s = t.rows?.length ?? 0, c = t.operation === "insert" || t.operation === "upsert" ? s : a.length, u = t.summary || `${t.operation} ${c} ${c === 1 ? "row" : "rows"} in ${r}.`;
   return {
-    affectedCount: d,
+    affectedCount: c,
     operation: t.operation,
     sampleTargetIds: i.slice(0, 10),
-    summary: l,
+    summary: u,
     table: r,
     targetIds: i
   };
 }
-async function x(e) {
+async function E(e) {
   const t = e.context?.actorUserId;
   if (!t)
     return { auditError: "Missing actor user id.", auditLogged: !1 };
   try {
-    const { error: r } = await E(e.context).from("cortex_ai_db_mutation_audit").insert({
+    const { error: r } = await g(e.context).from("cortex_ai_db_mutation_audit").insert({
       action_name: e.toolName,
       actor_user_id: t,
       error_message: e.errorMessage ?? null,
       operation_summary: e.summary,
-      payload: b(e.input),
-      payload_hash: q(e.input),
-      preview: b(e.preview),
+      payload: h(e.input),
+      payload_hash: U(e.input),
+      preview: h(e.preview),
       status: e.status,
       target_tables: e.targetTables,
       tool_name: e.toolName
@@ -685,24 +796,24 @@ async function x(e) {
     return { auditError: f(r), auditLogged: !1 };
   }
 }
-async function ie(e, t, r) {
-  const o = _(t).primaryKey.join(",");
+async function ye(e, t, r) {
+  const n = p(t).primaryKey.join(",");
   let i;
-  e.operation === "insert" ? i = r.from(t).insert(e.rows).select(o) : e.operation === "upsert" ? i = r.from(t).upsert(e.rows).select(o) : e.operation === "update" ? (i = r.from(t).update(e.values), i = v(t, i, e.filters ?? []), i = i.select(o)) : (i = r.from(t).delete(), i = v(t, i, e.filters ?? []), i = i.select(o));
-  const { data: s, error: d } = await i;
-  if (d)
-    throw new Error(f(d));
+  e.operation === "insert" ? i = r.from(t).insert(e.rows).select(n) : e.operation === "upsert" ? i = r.from(t).upsert(e.rows).select(n) : e.operation === "update" ? (i = r.from(t).update(e.values), i = w(t, i, e.filters ?? []), i = i.select(n)) : (i = r.from(t).delete(), i = w(t, i, e.filters ?? []), i = i.select(n));
+  const { data: s, error: c } = await i;
+  if (c)
+    throw new Error(f(c));
   return Array.isArray(s) ? s : [];
 }
-async function oe(e) {
-  const t = D.parse(e), a = (t.table ? [j(t.table)] : Object.keys(I)).filter((o) => t.includeReadOnly || !_(o).readOnly).map((o) => {
-    const i = _(o);
+async function fe(e) {
+  const t = F.parse(e), a = (t.table ? [M(t.table)] : Object.keys(O)).filter((n) => t.includeReadOnly || !p(n).readOnly).map((n) => {
+    const i = p(n);
     return {
-      columns: i.columns.filter((s) => !h(s)),
+      columns: i.columns.filter((s) => !v(s)),
       description: i.description,
       primaryKey: i.primaryKey,
       readOnly: !!i.readOnly,
-      table: o
+      table: n
     };
   });
   return {
@@ -710,46 +821,50 @@ async function oe(e) {
       "Use read_database_records for reads and execute_database_mutation/action_plan for writes.",
       "No auth schema access, no arbitrary SQL, no password/secret/API-key fields.",
       "profiles, user_addresses, and cortex_ai_db_mutation_audit are read-only.",
-      `Protected site_settings keys (never readable or writable): ${[...T].sort().join(", ")}.`
+      `Protected site_settings keys (never readable or writable): ${[...K].sort().join(", ")}.`,
+      `Write-protected site_settings keys (readable, never writable here): ${[...j].sort().join(", ")}.`,
+      "blocks.content is validated against its block_type (built-in schema or custom block definition) before any insert, upsert, or update; prefer the typed content tools, which also normalize and record revisions."
     ],
     success: !0,
     tables: a
   };
 }
-async function ne(e, t) {
-  const r = N.parse(e), a = j(r.table), o = ae(a, r.columns);
-  let i = E(t).from(a).select(o).range(r.offset, r.offset + r.limit - 1);
-  i = v(a, i, r.filters), r.orderBy && (g(a, r.orderBy.column), i = i.order(r.orderBy.column, { ascending: r.orderBy.ascending }));
-  const { data: s, error: d } = await i;
-  if (d)
-    throw new Error(`Failed to read database records: ${f(d)}`);
-  const l = Array.isArray(s) ? s : [];
+async function ge(e, t) {
+  const r = B.parse(e), a = M(r.table), n = pe(a, r.columns);
+  let i = g(t).from(a).select(n).range(r.offset, r.offset + r.limit - 1);
+  i = w(a, i, r.filters), r.orderBy && (b(a, r.orderBy.column), i = i.order(r.orderBy.column, { ascending: r.orderBy.ascending }));
+  const { data: s, error: c } = await i;
+  if (c)
+    throw new Error(`Failed to read database records: ${f(c)}`);
+  const u = Array.isArray(s) ? s : [];
   return {
-    columns: o.split(","),
+    columns: n.split(","),
     limit: r.limit,
     offset: r.offset,
-    rows: ee(l),
+    rows: le(u),
     success: !0,
     table: a
   };
 }
-async function V(e, t) {
-  const r = O.parse(e), a = B(r), o = E(t), i = r.operation === "update" || r.operation === "delete" ? await U(o, a, r.filters ?? []) : [], s = X({ input: r, table: a, targetRows: i }), d = {
+async function Q(e, t) {
+  const r = P.parse(e), a = J(r), n = g(t);
+  await L(r, a, t);
+  const i = r.operation === "update" || r.operation === "delete" ? await X(n, a, r.filters ?? []) : [], s = W({ input: r, table: a, targetRows: i }), c = {
     input: r,
     targetIds: s.targetIds
-  }, l = z({
+  }, u = V({
     action: `DATABASE ${r.operation}`,
     context: t,
-    payload: d,
+    payload: c,
     preview: s,
     subject: a
   });
-  if (l)
-    return l;
+  if (u)
+    return u;
   try {
-    const p = await ie(r, a, o), m = t?.skipAudit ? { auditLogged: !1 } : await x({
+    const _ = await ye(r, a, n), m = t?.skipAudit ? { auditLogged: !1 } : await E({
       context: t,
-      input: d,
+      input: c,
       preview: s,
       status: "success",
       summary: String(s.summary),
@@ -757,21 +872,21 @@ async function V(e, t) {
       toolName: "execute_database_mutation"
     });
     return {
-      affectedCount: p.length || s.affectedCount,
+      affectedCount: _.length || s.affectedCount,
       auditLogged: m.auditLogged,
       ...m.auditError ? { auditError: m.auditError } : {},
       mutationExecuted: !0,
       operation: r.operation,
-      sampleTargetIds: p.map((c) => F(c, _(a).primaryKey)).slice(0, 10),
+      sampleTargetIds: _.map((d) => G(d, p(a).primaryKey)).slice(0, 10),
       success: !0,
       summary: s.summary,
       table: a
     };
-  } catch (p) {
-    const m = f(p), c = t?.skipAudit ? { auditLogged: !1 } : await x({
+  } catch (_) {
+    const m = f(_), d = t?.skipAudit ? { auditLogged: !1 } : await E({
       context: t,
       errorMessage: m,
-      input: d,
+      input: c,
       preview: s,
       status: "failure",
       summary: String(s.summary),
@@ -779,8 +894,8 @@ async function V(e, t) {
       toolName: "execute_database_mutation"
     });
     return {
-      auditLogged: c.auditLogged,
-      ...c.auditError ? { auditError: c.auditError } : {},
+      auditLogged: d.auditLogged,
+      ...d.auditError ? { auditError: d.auditError } : {},
       message: `Database mutation failed: ${m}`,
       mutationExecuted: !1,
       operation: r.operation,
@@ -789,46 +904,48 @@ async function V(e, t) {
     };
   }
 }
-async function se(e, t) {
-  const r = L.parse(e), a = [];
-  for (const c of r.actions) {
-    const y = B(c), u = c.operation === "update" || c.operation === "delete" ? await U(E(t), y, c.filters ?? []) : [];
+async function be(e, t) {
+  const r = z.parse(e), a = [];
+  for (const d of r.actions) {
+    const y = J(d);
+    await L(d, y, t);
+    const l = d.operation === "update" || d.operation === "delete" ? await X(g(t), y, d.filters ?? []) : [];
     a.push({
-      input: c,
-      preview: X({ input: c, table: y, targetRows: u }),
+      input: d,
+      preview: W({ input: d, table: y, targetRows: l }),
       table: y
     });
   }
-  const o = a.map(({ preview: c }) => String(c.summary)), i = {
+  const n = a.map(({ preview: d }) => String(d.summary)), i = {
     actionCount: a.length,
-    actionSummaries: o,
+    actionSummaries: n,
     summary: r.summary || `Run ${a.length} confirmed database actions.`,
-    tables: Array.from(new Set(a.map((c) => c.table)))
-  }, s = a.map(({ input: c, preview: y, table: u }) => ({
-    input: c,
-    table: u,
+    tables: Array.from(new Set(a.map((d) => d.table)))
+  }, s = a.map(({ input: d, preview: y, table: l }) => ({
+    input: d,
+    table: l,
     targetIds: y.targetIds
-  })), d = z({
+  })), c = V({
     action: "DATABASE ACTION PLAN",
     context: t,
     payload: s,
     preview: i,
     subject: `${a.length} actions`
   });
-  if (d)
-    return d;
-  const l = [];
-  let p = !1;
-  for (const [c, y] of a.entries()) {
-    const u = await V(y.input, {
+  if (c)
+    return c;
+  const u = [];
+  let _ = !1;
+  for (const [d, y] of a.entries()) {
+    const l = await Q(y.input, {
       ...t,
       skipAudit: !0,
       skipConfirmation: !0
     });
-    if (l.push(u), u && typeof u == "object" && u.mutationExecuted === !0 && (p = !0), !u || typeof u != "object" || u.success === !1) {
-      const S = await x({
+    if (u.push(l), l && typeof l == "object" && l.mutationExecuted === !0 && (_ = !0), !l || typeof l != "object" || l.success === !1) {
+      const S = await E({
         context: t,
-        errorMessage: u && typeof u == "object" && typeof u.message == "string" ? u.message : `Database action ${c + 1} failed.`,
+        errorMessage: l && typeof l == "object" && typeof l.message == "string" ? l.message : `Database action ${d + 1} failed.`,
         input: s,
         preview: i,
         status: "failure",
@@ -840,15 +957,15 @@ async function se(e, t) {
         actionCount: a.length,
         auditLogged: S.auditLogged,
         ...S.auditError ? { auditError: S.auditError } : {},
-        failedActionIndex: c,
-        message: u && typeof u == "object" && typeof u.message == "string" ? u.message : `Database action ${c + 1} failed.`,
-        mutationExecuted: p,
-        results: l,
+        failedActionIndex: d,
+        message: l && typeof l == "object" && typeof l.message == "string" ? l.message : `Database action ${d + 1} failed.`,
+        mutationExecuted: _,
+        results: u,
         success: !1
       };
     }
   }
-  const m = await x({
+  const m = await E({
     context: t,
     input: s,
     preview: i,
@@ -861,48 +978,48 @@ async function se(e, t) {
     actionCount: a.length,
     auditLogged: m.auditLogged,
     ...m.auditError ? { auditError: m.auditError } : {},
-    mutationExecuted: p,
-    results: l,
+    mutationExecuted: _,
+    results: u,
     success: !0,
     summary: r.summary ?? null
   };
 }
-function le(e) {
+function Ee(e) {
   return {
-    describe_database_schema: w({
+    describe_database_schema: k({
       description: "Describe the public database tables Cortex AI can read or mutate, including read-only tables, primary keys, and writable columns. Use before broad database tasks when unsure about schema.",
-      execute: (t) => oe(t),
-      inputSchema: D,
+      execute: (t) => fe(t),
+      inputSchema: F,
       strict: !0
     }),
-    execute_database_action_plan: w({
+    execute_database_action_plan: k({
       description: "Execute up to 8 typed database mutations as one confirmed plan. Mutating: first returns one combined confirmation preview and Confirm button; after confirmation, runs each action in order and stops on the first failure.",
-      execute: (t) => se(t, e),
-      inputSchema: L,
+      execute: (t) => be(t, e),
+      inputSchema: z,
       strict: !0
     }),
-    execute_database_mutation: w({
+    execute_database_mutation: k({
       description: "Run one typed insert, update, upsert, or delete against an allowed public database table. Mutating: always previews affected rows and requires exact user confirmation before execution. Does not support arbitrary SQL.",
-      execute: (t) => V(t, e),
-      inputSchema: O,
+      execute: (t) => Q(t, e),
+      inputSchema: P,
       strict: !0
     }),
-    read_database_records: w({
+    read_database_records: k({
       description: "Read records from an allowed public database table with validated columns, filters, ordering, limit, and offset. Read-only and redacts protected secret-like values.",
-      execute: (t) => ne(t, e),
-      inputSchema: N,
+      execute: (t) => ge(t, e),
+      inputSchema: B,
       strict: !0
     })
   };
 }
 export {
-  le as createCortexDatabaseAgentTools,
-  D as describeDatabaseSchemaInputSchema,
-  se as executeDatabaseActionPlan,
-  L as executeDatabaseActionPlanInputSchema,
-  V as executeDatabaseMutation,
-  O as executeDatabaseMutationInputSchema,
-  oe as executeDescribeDatabaseSchema,
-  ne as executeReadDatabaseRecords,
-  N as readDatabaseRecordsInputSchema
+  Ee as createCortexDatabaseAgentTools,
+  F as describeDatabaseSchemaInputSchema,
+  be as executeDatabaseActionPlan,
+  z as executeDatabaseActionPlanInputSchema,
+  Q as executeDatabaseMutation,
+  P as executeDatabaseMutationInputSchema,
+  fe as executeDescribeDatabaseSchema,
+  ge as executeReadDatabaseRecords,
+  B as readDatabaseRecordsInputSchema
 };