@nextblock-cms/cortex 0.18.8 → 0.19.2

package/index.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const R=require("./lib/ai-block-generation.cjs.js"),T=require("./lib/ai-client.cjs.js"),t=require("./lib/ai-config.cjs.js"),A=require("./lib/ai-cortex-widget-builder.cjs.js"),u=require("./lib/ai-global-agent-custom-block-tools.cjs.js"),S=require("./lib/ai-global-agent-db-tools.cjs.js"),o=require("./lib/ai-global-agent-site-tools.cjs.js"),e=require("./lib/ai-global-agent-tools.cjs.js"),E=require("./lib/ai-key-crypto.cjs.js"),I=require("./lib/ai-key-verification.cjs.js"),O=require("./lib/ai-model-catalog.cjs.js"),r=require("./lib/ai-model-registry.cjs.js"),_=require("./lib/ai-seo-metadata.cjs.js"),l=require("./lib/ai-vision.cjs.js"),C=require("./lib/block-content-schemas.cjs.js"),m=require("./lib/cortex-widget-registry.cjs.js"),n=require("./lib/cortex-widget-schema.cjs.js"),i=require("./lib/mcp-server.cjs.js"),a=require("./lib/mcp-tokens.cjs.js"),c=require("./lib/mcp-tool-registry.cjs.js"),s=require("./lib/site-brief.cjs.js");require("./lib/zod-config.cjs.js");const d=require("zod");exports.INLINE_HTML_ASSISTANT_SYSTEM_PROMPT=R.INLINE_HTML_ASSISTANT_SYSTEM_PROMPT;exports.generateEditorBlocksRequestSchema=R.generateEditorBlocksRequestSchema;exports.generateEditorHtmlFragment=R.generateEditorHtmlFragment;exports.validateGeneratedEditorHtmlFragment=R.validateGeneratedEditorHtmlFragment;exports.createCortexAiOpenRouterClient=T.createCortexAiOpenRouterClient;exports.createCortexAiOpenRouterProvider=T.createCortexAiOpenRouterProvider;exports.generateCortexAiText=T.generateCortexAiText;exports.getStoredCortexAiModelSelection=T.getStoredCortexAiModelSelection;exports.resolveCortexAiOpenRouterCredential=T.resolveCortexAiOpenRouterCredential;exports.CORTEX_AI_AGENT_SETTINGS_BOUNDS=t.CORTEX_AI_AGENT_SETTINGS_BOUNDS;exports.CORTEX_AI_AGENT_SETTINGS_DEFAULTS=t.CORTEX_AI_AGENT_SETTINGS_DEFAULTS;exports.CORTEX_AI_AGENT_SETTINGS_KEY=t.CORTEX_AI_AGENT_SETTINGS_KEY;exports.CORTEX_AI_OPENROUTER_MODEL_SELECTION_SETTING_KEY=t.CORTEX_AI_OPENROUTER_MODEL_SELECTION_SETTING_KEY;exports.CORTEX_AI_OPENROUTER_SETTING_KEY=t.CORTEX_AI_OPENROUTER_SETTING_KEY;exports.CORTEX_AI_PACKAGE_ID=t.CORTEX_AI_PACKAGE_ID;exports.CORTEX_AI_PACKAGE_NAME=t.CORTEX_AI_PACKAGE_NAME;exports.CORTEX_AI_PEXELS_SETTING_KEY=t.CORTEX_AI_PEXELS_SETTING_KEY;exports.CORTEX_AI_UNSPLASH_APP_NAME_SETTING_KEY=t.CORTEX_AI_UNSPLASH_APP_NAME_SETTING_KEY;exports.CORTEX_AI_UNSPLASH_SETTING_KEY=t.CORTEX_AI_UNSPLASH_SETTING_KEY;exports.decryptStoredOpenRouterApiKey=t.decryptStoredOpenRouterApiKey;exports.encryptStoredOpenRouterApiKey=t.encryptStoredOpenRouterApiKey;exports.getCortexAiEnvConfig=t.getCortexAiEnvConfig;exports.getEnvOpenRouterKeyStatus=t.getEnvOpenRouterKeyStatus;exports.getOpenRouterEnvApiKey=t.getOpenRouterEnvApiKey;exports.getPexelsEnvApiKey=t.getPexelsEnvApiKey;exports.getStoredOpenRouterKeyStatus=t.getStoredOpenRouterKeyStatus;exports.getUnsplashEnvApiKey=t.getUnsplashEnvApiKey;exports.normalizeCortexAiAgentSettings=t.normalizeCortexAiAgentSettings;exports.resolveCortexAiAgentSettings=t.resolveCortexAiAgentSettings;exports.generateCortexWidgetDefinition=A.generateCortexWidgetDefinition;exports.createCortexCustomBlockTools=u.createCortexCustomBlockTools;exports.createCustomBlockInputSchema=u.createCustomBlockInputSchema;exports.deleteCustomBlockInputSchema=u.deleteCustomBlockInputSchema;exports.executeCreateCustomBlock=u.executeCreateCustomBlock;exports.executeDeleteCustomBlock=u.executeDeleteCustomBlock;exports.executeListCustomBlocks=u.executeListCustomBlocks;exports.executeUpdateCustomBlock=u.executeUpdateCustomBlock;exports.listCustomBlocksInputSchema=u.listCustomBlocksInputSchema;exports.updateCustomBlockInputSchema=u.updateCustomBlockInputSchema;exports.createCortexDatabaseAgentTools=S.createCortexDatabaseAgentTools;exports.describeDatabaseSchemaInputSchema=S.describeDatabaseSchemaInputSchema;exports.executeDatabaseActionPlan=S.executeDatabaseActionPlan;exports.executeDatabaseActionPlanInputSchema=S.executeDatabaseActionPlanInputSchema;exports.executeDatabaseMutation=S.executeDatabaseMutation;exports.executeDatabaseMutationInputSchema=S.executeDatabaseMutationInputSchema;exports.executeDescribeDatabaseSchema=S.executeDescribeDatabaseSchema;exports.executeReadDatabaseRecords=S.executeReadDatabaseRecords;exports.readDatabaseRecordsInputSchema=S.readDatabaseRecordsInputSchema;exports.NEXTBLOCK_SEED_MEDIA_OBJECT_KEYS=o.NEXTBLOCK_SEED_MEDIA_OBJECT_KEYS;exports.NEXTBLOCK_SEED_TRANSLATION_GROUP_IDS=o.NEXTBLOCK_SEED_TRANSLATION_GROUP_IDS;exports.createCortexSiteTools=o.createCortexSiteTools;exports.executeFinishSiteBuild=o.executeFinishSiteBuild;exports.executeGetSiteOverview=o.executeGetSiteOverview;exports.executeResetSiteContent=o.executeResetSiteContent;exports.executeSaveSiteBrief=o.executeSaveSiteBrief;exports.executeStartSiteBuild=o.executeStartSiteBuild;exports.executeUpdateSiteIdentity=o.executeUpdateSiteIdentity;exports.finishSiteBuildInputSchema=o.finishSiteBuildInputSchema;exports.formatCortexSiteOverviewForPrompt=o.formatCortexSiteOverviewForPrompt;exports.getSiteOverviewInputSchema=o.getSiteOverviewInputSchema;exports.readCortexBuildSession=o.readCortexBuildSession;exports.readCortexSiteBrief=o.readCortexSiteBrief;exports.resetSiteContentInputSchema=o.resetSiteContentInputSchema;exports.resolveCortexBuildSession=o.resolveCortexBuildSession;exports.saveSiteBriefInputSchema=o.saveSiteBriefInputSchema;exports.startSiteBuildInputSchema=o.startSiteBuildInputSchema;exports.updateSiteIdentityInputSchema=o.updateSiteIdentityInputSchema;exports.buildVisibleContactIntroActionPlan=e.buildVisibleContactIntroActionPlan;exports.cortexAiPageContextSchema=e.cortexAiPageContextSchema;exports.createCmsPageInputSchema=e.createCmsPageInputSchema;exports.createCmsPostInputSchema=e.createCmsPostInputSchema;exports.createCmsProductInputSchema=e.createCmsProductInputSchema;exports.createCortexGlobalAgentTools=e.createCortexGlobalAgentTools;exports.deleteCmsItemInputSchema=e.deleteCmsItemInputSchema;exports.executeCmsActionPlan=e.executeCmsActionPlan;exports.executeCmsActionPlanInputSchema=e.executeCmsActionPlanInputSchema;exports.executeCreateCmsPage=e.executeCreateCmsPage;exports.executeCreateCmsPost=e.executeCreateCmsPost;exports.executeCreateCmsProduct=e.executeCreateCmsProduct;exports.executeDeleteCmsItem=e.executeDeleteCmsItem;exports.executeFetchEcommerceStats=e.executeFetchEcommerceStats;exports.executeFetchUrlContent=e.executeFetchUrlContent;exports.executeInsertContentBlock=e.executeInsertContentBlock;exports.executeManageProductVariants=e.executeManageProductVariants;exports.executePrepareDeleteCmsItem=e.executePrepareDeleteCmsItem;exports.executePublishContentDraft=e.executePublishContentDraft;exports.executeReadCurrentCmsItem=e.executeReadCurrentCmsItem;exports.executeRewritePageDraft=e.executeRewritePageDraft;exports.executeSearchDocumentation=e.executeSearchDocumentation;exports.executeSearchDocumentationWithTimeout=e.executeSearchDocumentationWithTimeout;exports.executeSearchStockPhotos=e.executeSearchStockPhotos;exports.executeSetContentImages=e.executeSetContentImages;exports.executeTranslateContentBulk=e.executeTranslateContentBulk;exports.executeTranslatePage=e.executeTranslatePage;exports.executeUpdateCmsItemField=e.executeUpdateCmsItemField;exports.executeUpdateContentBlock=e.executeUpdateContentBlock;exports.executeUpdateCurrentCmsFields=e.executeUpdateCurrentCmsFields;exports.executeUpdateFooter=e.executeUpdateFooter;exports.executeUpdateNavigationBar=e.executeUpdateNavigationBar;exports.executeUpdateSectionColumnBlock=e.executeUpdateSectionColumnBlock;exports.fetchEcommerceStatsInputSchema=e.fetchEcommerceStatsInputSchema;exports.fetchUrlContentInputSchema=e.fetchUrlContentInputSchema;exports.insertContentBlockInputSchema=e.insertContentBlockInputSchema;exports.isBlockedFetchHost=e.isBlockedFetchHost;exports.manageProductVariantsInputSchema=e.manageProductVariantsInputSchema;exports.maybeTriggerStockPhotoDownloads=e.maybeTriggerStockPhotoDownloads;exports.navigationItemInputSchema=e.navigationItemInputSchema;exports.prepareDeleteCmsItemInputSchema=e.prepareDeleteCmsItemInputSchema;exports.publishContentDraftInputSchema=e.publishContentDraftInputSchema;exports.readCurrentCmsItemInputSchema=e.readCurrentCmsItemInputSchema;exports.resolveCortexAiStockPhotoProvider=e.resolveCortexAiStockPhotoProvider;exports.resolveCortexAiStockPhotoProviders=e.resolveCortexAiStockPhotoProviders;exports.rewritePageDraftInputSchema=e.rewritePageDraftInputSchema;exports.searchDocumentationInputSchema=e.searchDocumentationInputSchema;exports.searchStockPhotosInputSchema=e.searchStockPhotosInputSchema;exports.setContentImagesInputSchema=e.setContentImagesInputSchema;exports.translateContentBulkInputSchema=e.translateContentBulkInputSchema;exports.translatePageInputSchema=e.translatePageInputSchema;exports.updateCmsItemFieldInputSchema=e.updateCmsItemFieldInputSchema;exports.updateContentBlockInputSchema=e.updateContentBlockInputSchema;exports.updateCurrentCmsFieldsInputSchema=e.updateCurrentCmsFieldsInputSchema;exports.updateFooterInputSchema=e.updateFooterInputSchema;exports.updateNavigationBarInputSchema=e.updateNavigationBarInputSchema;exports.updateSectionColumnBlockInputSchema=e.updateSectionColumnBlockInputSchema;exports.CORTEX_AI_KEY_ALGORITHM=E.CORTEX_AI_KEY_ALGORITHM;exports.CORTEX_AI_KEY_ENVELOPE_VERSION=E.CORTEX_AI_KEY_ENVELOPE_VERSION;exports.decryptOpenRouterApiKey=E.decryptOpenRouterApiKey;exports.encryptOpenRouterApiKey=E.encryptOpenRouterApiKey;exports.getMaskedOpenRouterKey=E.getMaskedOpenRouterKey;exports.getOpenRouterKeyEnvelopeStatus=E.getOpenRouterKeyEnvelopeStatus;exports.verifyOpenRouterApiKey=I.verifyOpenRouterApiKey;exports.verifyPexelsApiKey=I.verifyPexelsApiKey;exports.verifyUnsplashAccessKey=I.verifyUnsplashAccessKey;exports.listCortexAiCompatibleOpenRouterModels=O.listCortexAiCompatibleOpenRouterModels;exports.CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY=r.CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY;exports.CORTEX_AI_MODEL_REGISTRY=r.CORTEX_AI_MODEL_REGISTRY;exports.CORTEX_AI_OPENROUTER_BASE_URL=r.CORTEX_AI_OPENROUTER_BASE_URL;exports.CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL=r.CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL;exports.CORTEX_AI_REQUIRED_MODEL_PARAMETERS=r.CORTEX_AI_REQUIRED_MODEL_PARAMETERS;exports.CortexAiRoutingError=r.CortexAiRoutingError;exports.buildCortexAiModelFallbackChain=r.buildCortexAiModelFallbackChain;exports.buildCortexAiRoutingPolicy=r.buildCortexAiRoutingPolicy;exports.createCortexAiStoredModelSelection=r.createCortexAiStoredModelSelection;exports.filterCortexAiCompatibleOpenRouterModels=r.filterCortexAiCompatibleOpenRouterModels;exports.getHttpStatusCode=r.getHttpStatusCode;exports.getOpenRouterErrorStatus=r.getOpenRouterErrorStatus;exports.isCortexAiFreeModelId=r.isCortexAiFreeModelId;exports.isOpenRouterRateLimitError=r.isOpenRouterRateLimitError;exports.isOpenRouterRecoverableRoutingError=r.isOpenRouterRecoverableRoutingError;exports.omitUnsupportedCortexAiModelOptions=r.omitUnsupportedCortexAiModelOptions;exports.runWithCortexAiModelFallback=r.runWithCortexAiModelFallback;exports.safeParseCortexAiModelSelection=r.safeParseCortexAiModelSelection;exports.summarizeCortexAiRoutingError=r.summarizeCortexAiRoutingError;exports.CORTEX_AI_SEO_METADATA_CONTENT_BUDGET=_.CORTEX_AI_SEO_METADATA_CONTENT_BUDGET;exports.CORTEX_AI_SEO_METADATA_LENGTH_BUDGETS=_.CORTEX_AI_SEO_METADATA_LENGTH_BUDGETS;exports.cortexAiSeoMetadataOutputSchema=_.cortexAiSeoMetadataOutputSchema;exports.extractJsonObject=_.extractJsonObject;exports.generateCortexAiSeoMetadata=_.generateCortexAiSeoMetadata;exports.truncateOnWordBoundary=_.truncateOnWordBoundary;exports.CORTEX_AI_DEFAULT_ALT_TEXT_MAX_LENGTH=l.CORTEX_AI_DEFAULT_ALT_TEXT_MAX_LENGTH;exports.CORTEX_AI_VISION_MODEL_FALLBACK_REGISTRY=l.CORTEX_AI_VISION_MODEL_FALLBACK_REGISTRY;exports.buildCortexAiVisionRoutingPolicy=l.buildCortexAiVisionRoutingPolicy;exports.generateCortexAiAltText=l.generateCortexAiAltText;exports.isKnownVisionCapableCortexAiModelId=l.isKnownVisionCapableCortexAiModelId;exports.normalizeGeneratedAltText=l.normalizeGeneratedAltText;exports.availableCortexAiBlockTypes=C.availableCortexAiBlockTypes;exports.cortexAiBlockTypeSchema=C.cortexAiBlockTypeSchema;exports.customBlockSlugPatternSchema=C.customBlockSlugPatternSchema;exports.fallbackBlockSchemas=C.fallbackBlockSchemas;exports.isValidBlockType=C.isValidBlockType;exports.loadCustomBlockDefinitions=C.loadCustomBlockDefinitions;exports.readCustomBlockFields=C.readCustomBlockFields;exports.sectionBlockFallbackSchema=C.sectionBlockFallbackSchema;exports.validateCortexBlockContent=C.validateCortexBlockContent;exports.validateCustomBlockInstanceContent=C.validateCustomBlockInstanceContent;exports.CORTEX_WIDGET_DEFINITION_SELECT=m.CORTEX_WIDGET_DEFINITION_SELECT;exports.CortexWidgetRegistryInsertError=m.CortexWidgetRegistryInsertError;exports.buildCortexWidgetDefinitionInsertPayload=m.buildCortexWidgetDefinitionInsertPayload;exports.insertCortexWidgetDefinition=m.insertCortexWidgetDefinition;exports.CORTEX_WIDGET_ALLOWED_RELATION_TABLES=n.CORTEX_WIDGET_ALLOWED_RELATION_TABLES;exports.buildCortexProfileCardVerificationDefinition=n.buildCortexProfileCardVerificationDefinition;exports.buildCortexWidgetBuilderPrompt=n.buildCortexWidgetBuilderPrompt;exports.buildCortexWidgetBuilderSystemPrompt=n.buildCortexWidgetBuilderSystemPrompt;exports.cortexWidgetBuildRequestSchema=n.cortexWidgetBuildRequestSchema;exports.cortexWidgetDbRelationFieldSchema=n.cortexWidgetDbRelationFieldSchema;exports.cortexWidgetDefinitionSchema=n.cortexWidgetDefinitionSchema;exports.cortexWidgetFieldSchema=n.cortexWidgetFieldSchema;exports.cortexWidgetImageR2FieldSchema=n.cortexWidgetImageR2FieldSchema;exports.cortexWidgetLayoutNodeSchema=n.cortexWidgetLayoutNodeSchema;exports.cortexWidgetRichTextFieldSchema=n.cortexWidgetRichTextFieldSchema;exports.cortexWidgetTextFieldSchema=n.cortexWidgetTextFieldSchema;exports.validateCortexWidgetDefinitionOutput=n.validateCortexWidgetDefinitionOutput;exports.CORTEX_MCP_DEFAULT_PROTOCOL_VERSION=i.CORTEX_MCP_DEFAULT_PROTOCOL_VERSION;exports.CORTEX_MCP_LATEST_LEGACY_PROTOCOL_VERSION=i.CORTEX_MCP_LATEST_LEGACY_PROTOCOL_VERSION;exports.CORTEX_MCP_MODERN_PROTOCOL_VERSION=i.CORTEX_MCP_MODERN_PROTOCOL_VERSION;exports.CORTEX_MCP_SERVER_NAME=i.CORTEX_MCP_SERVER_NAME;exports.CORTEX_MCP_SERVER_TITLE=i.CORTEX_MCP_SERVER_TITLE;exports.CORTEX_MCP_SUPPORTED_PROTOCOL_VERSIONS=i.CORTEX_MCP_SUPPORTED_PROTOCOL_VERSIONS;exports.JSON_RPC_INTERNAL_ERROR=i.JSON_RPC_INTERNAL_ERROR;exports.JSON_RPC_INVALID_PARAMS=i.JSON_RPC_INVALID_PARAMS;exports.JSON_RPC_INVALID_REQUEST=i.JSON_RPC_INVALID_REQUEST;exports.JSON_RPC_METHOD_NOT_FOUND=i.JSON_RPC_METHOD_NOT_FOUND;exports.JSON_RPC_PARSE_ERROR=i.JSON_RPC_PARSE_ERROR;exports.handleCortexMcpMessage=i.handleCortexMcpMessage;exports.isJsonRpcNotification=i.isJsonRpcNotification;exports.isModernEraMessage=i.isModernEraMessage;exports.CORTEX_AI_MCP_SCOPES=a.CORTEX_AI_MCP_SCOPES;exports.CORTEX_AI_MCP_SETTINGS_DEFAULTS=a.CORTEX_AI_MCP_SETTINGS_DEFAULTS;exports.CORTEX_AI_MCP_SETTINGS_KEY=a.CORTEX_AI_MCP_SETTINGS_KEY;exports.CORTEX_AI_MCP_TOKENS_TABLE=a.CORTEX_AI_MCP_TOKENS_TABLE;exports.CORTEX_AI_MCP_TOKEN_PREFIX=a.CORTEX_AI_MCP_TOKEN_PREFIX;exports.hashCortexAiMcpToken=a.hashCortexAiMcpToken;exports.isLocalhostHost=a.isLocalhostHost;exports.mintCortexAiMcpToken=a.mintCortexAiMcpToken;exports.normalizeCortexAiMcpSettings=a.normalizeCortexAiMcpSettings;exports.parseBearerToken=a.parseBearerToken;exports.resolveCortexAiMcpSettings=a.resolveCortexAiMcpSettings;exports.shouldTrustLocalMcpRequest=a.shouldTrustLocalMcpRequest;exports.touchCortexAiMcpToken=a.touchCortexAiMcpToken;exports.verifyCortexAiMcpToken=a.verifyCortexAiMcpToken;exports.CORTEX_MCP_PROMPTS=c.CORTEX_MCP_PROMPTS;exports.CORTEX_MCP_RESOURCES=c.CORTEX_MCP_RESOURCES;exports.CORTEX_MCP_TOOL_ALIASES=c.CORTEX_MCP_TOOL_ALIASES;exports.CORTEX_MCP_TOOL_KINDS=c.CORTEX_MCP_TOOL_KINDS;exports.CortexMcpForbiddenToolError=c.CortexMcpForbiddenToolError;exports.CortexMcpUnknownToolError=c.CortexMcpUnknownToolError;exports.assertCortexMcpToolCoverage=c.assertCortexMcpToolCoverage;exports.buildCortexMcpToolDefinitions=c.buildCortexMcpToolDefinitions;exports.callCortexMcpTool=c.callCortexMcpTool;exports.cortexMcpScopesAllow=c.cortexMcpScopesAllow;exports.getCortexMcpPrompt=c.getCortexMcpPrompt;exports.getCortexMcpToolKind=c.getCortexMcpToolKind;exports.readCortexMcpResource=c.readCortexMcpResource;exports.resolveCortexMcpToolName=c.resolveCortexMcpToolName;exports.CORTEX_AI_BUILD_SESSION_SETTING_KEY=s.CORTEX_AI_BUILD_SESSION_SETTING_KEY;exports.CORTEX_AI_SITE_BRIEF_SETTING_KEY=s.CORTEX_AI_SITE_BRIEF_SETTING_KEY;exports.cortexBuildSessionSchema=s.cortexBuildSessionSchema;exports.cortexSiteBriefInputSchema=s.cortexSiteBriefInputSchema;exports.cortexSiteBriefSchema=s.cortexSiteBriefSchema;exports.formatCortexSiteBriefForPrompt=s.formatCortexSiteBriefForPrompt;exports.isCortexBuildSessionUsable=s.isCortexBuildSessionUsable;exports.isCortexSiteBriefComplete=s.isCortexSiteBriefComplete;exports.safeParseCortexSiteBrief=s.safeParseCortexSiteBrief;Object.defineProperty(exports,"z",{enumerable:!0,get:()=>d.z});
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const R=require("./lib/ai-block-generation.cjs.js"),T=require("./lib/ai-client.cjs.js"),t=require("./lib/ai-config.cjs.js"),I=require("./lib/ai-cortex-widget-builder.cjs.js"),u=require("./lib/ai-global-agent-custom-block-tools.cjs.js"),S=require("./lib/ai-global-agent-db-tools.cjs.js"),o=require("./lib/ai-global-agent-site-tools.cjs.js"),e=require("./lib/ai-global-agent-tools.cjs.js"),_=require("./lib/ai-key-crypto.cjs.js"),m=require("./lib/ai-key-verification.cjs.js"),O=require("./lib/ai-model-catalog.cjs.js"),r=require("./lib/ai-model-registry.cjs.js"),s=require("./lib/ai-seo-metadata.cjs.js"),l=require("./lib/ai-vision.cjs.js"),C=require("./lib/block-content-schemas.cjs.js"),A=require("./lib/cortex-widget-registry.cjs.js"),n=require("./lib/cortex-widget-schema.cjs.js"),a=require("./lib/mcp-server.cjs.js"),i=require("./lib/mcp-tokens.cjs.js"),c=require("./lib/mcp-tool-registry.cjs.js"),E=require("./lib/site-brief.cjs.js");require("./lib/zod-config.cjs.js");const d=require("zod");exports.INLINE_HTML_ASSISTANT_SYSTEM_PROMPT=R.INLINE_HTML_ASSISTANT_SYSTEM_PROMPT;exports.generateEditorBlocksRequestSchema=R.generateEditorBlocksRequestSchema;exports.generateEditorHtmlFragment=R.generateEditorHtmlFragment;exports.validateGeneratedEditorHtmlFragment=R.validateGeneratedEditorHtmlFragment;exports.createCortexAiOpenRouterClient=T.createCortexAiOpenRouterClient;exports.createCortexAiOpenRouterProvider=T.createCortexAiOpenRouterProvider;exports.generateCortexAiText=T.generateCortexAiText;exports.getStoredCortexAiModelSelection=T.getStoredCortexAiModelSelection;exports.resolveCortexAiOpenRouterCredential=T.resolveCortexAiOpenRouterCredential;exports.CORTEX_AI_AGENT_SETTINGS_BOUNDS=t.CORTEX_AI_AGENT_SETTINGS_BOUNDS;exports.CORTEX_AI_AGENT_SETTINGS_DEFAULTS=t.CORTEX_AI_AGENT_SETTINGS_DEFAULTS;exports.CORTEX_AI_AGENT_SETTINGS_KEY=t.CORTEX_AI_AGENT_SETTINGS_KEY;exports.CORTEX_AI_OPENROUTER_MODEL_SELECTION_SETTING_KEY=t.CORTEX_AI_OPENROUTER_MODEL_SELECTION_SETTING_KEY;exports.CORTEX_AI_OPENROUTER_SETTING_KEY=t.CORTEX_AI_OPENROUTER_SETTING_KEY;exports.CORTEX_AI_PACKAGE_ID=t.CORTEX_AI_PACKAGE_ID;exports.CORTEX_AI_PACKAGE_NAME=t.CORTEX_AI_PACKAGE_NAME;exports.CORTEX_AI_PEXELS_SETTING_KEY=t.CORTEX_AI_PEXELS_SETTING_KEY;exports.CORTEX_AI_UNSPLASH_APP_NAME_SETTING_KEY=t.CORTEX_AI_UNSPLASH_APP_NAME_SETTING_KEY;exports.CORTEX_AI_UNSPLASH_SETTING_KEY=t.CORTEX_AI_UNSPLASH_SETTING_KEY;exports.decryptStoredOpenRouterApiKey=t.decryptStoredOpenRouterApiKey;exports.encryptStoredOpenRouterApiKey=t.encryptStoredOpenRouterApiKey;exports.getCortexAiEnvConfig=t.getCortexAiEnvConfig;exports.getEnvOpenRouterKeyStatus=t.getEnvOpenRouterKeyStatus;exports.getOpenRouterEnvApiKey=t.getOpenRouterEnvApiKey;exports.getPexelsEnvApiKey=t.getPexelsEnvApiKey;exports.getStoredOpenRouterKeyStatus=t.getStoredOpenRouterKeyStatus;exports.getUnsplashEnvApiKey=t.getUnsplashEnvApiKey;exports.normalizeCortexAiAgentSettings=t.normalizeCortexAiAgentSettings;exports.resolveCortexAiAgentSettings=t.resolveCortexAiAgentSettings;exports.generateCortexWidgetDefinition=I.generateCortexWidgetDefinition;exports.createCortexCustomBlockTools=u.createCortexCustomBlockTools;exports.createCustomBlockInputSchema=u.createCustomBlockInputSchema;exports.deleteCustomBlockInputSchema=u.deleteCustomBlockInputSchema;exports.executeCreateCustomBlock=u.executeCreateCustomBlock;exports.executeDeleteCustomBlock=u.executeDeleteCustomBlock;exports.executeListCustomBlocks=u.executeListCustomBlocks;exports.executeUpdateCustomBlock=u.executeUpdateCustomBlock;exports.listCustomBlocksInputSchema=u.listCustomBlocksInputSchema;exports.updateCustomBlockInputSchema=u.updateCustomBlockInputSchema;exports.createCortexDatabaseAgentTools=S.createCortexDatabaseAgentTools;exports.describeDatabaseSchemaInputSchema=S.describeDatabaseSchemaInputSchema;exports.executeDatabaseActionPlan=S.executeDatabaseActionPlan;exports.executeDatabaseActionPlanInputSchema=S.executeDatabaseActionPlanInputSchema;exports.executeDatabaseMutation=S.executeDatabaseMutation;exports.executeDatabaseMutationInputSchema=S.executeDatabaseMutationInputSchema;exports.executeDescribeDatabaseSchema=S.executeDescribeDatabaseSchema;exports.executeReadDatabaseRecords=S.executeReadDatabaseRecords;exports.readDatabaseRecordsInputSchema=S.readDatabaseRecordsInputSchema;exports.NEXTBLOCK_SEED_MEDIA_OBJECT_KEYS=o.NEXTBLOCK_SEED_MEDIA_OBJECT_KEYS;exports.NEXTBLOCK_SEED_TRANSLATION_GROUP_IDS=o.NEXTBLOCK_SEED_TRANSLATION_GROUP_IDS;exports.createCortexSiteTools=o.createCortexSiteTools;exports.executeFinishSiteBuild=o.executeFinishSiteBuild;exports.executeGetSiteOverview=o.executeGetSiteOverview;exports.executeResetSiteContent=o.executeResetSiteContent;exports.executeSaveSiteBrief=o.executeSaveSiteBrief;exports.executeStartSiteBuild=o.executeStartSiteBuild;exports.executeUpdateSiteIdentity=o.executeUpdateSiteIdentity;exports.finishSiteBuildInputSchema=o.finishSiteBuildInputSchema;exports.formatCortexSiteOverviewForPrompt=o.formatCortexSiteOverviewForPrompt;exports.getSiteOverviewInputSchema=o.getSiteOverviewInputSchema;exports.readCortexBuildSession=o.readCortexBuildSession;exports.readCortexSiteBrief=o.readCortexSiteBrief;exports.resetSiteContentInputSchema=o.resetSiteContentInputSchema;exports.resolveCortexBuildSession=o.resolveCortexBuildSession;exports.saveSiteBriefInputSchema=o.saveSiteBriefInputSchema;exports.startSiteBuildInputSchema=o.startSiteBuildInputSchema;exports.updateSiteIdentityInputSchema=o.updateSiteIdentityInputSchema;exports.buildVisibleContactIntroActionPlan=e.buildVisibleContactIntroActionPlan;exports.cortexAiPageContextSchema=e.cortexAiPageContextSchema;exports.createCmsPageInputSchema=e.createCmsPageInputSchema;exports.createCmsPostInputSchema=e.createCmsPostInputSchema;exports.createCmsProductInputSchema=e.createCmsProductInputSchema;exports.createCortexGlobalAgentTools=e.createCortexGlobalAgentTools;exports.deleteCmsItemInputSchema=e.deleteCmsItemInputSchema;exports.executeCmsActionPlan=e.executeCmsActionPlan;exports.executeCmsActionPlanInputSchema=e.executeCmsActionPlanInputSchema;exports.executeCreateCmsPage=e.executeCreateCmsPage;exports.executeCreateCmsPost=e.executeCreateCmsPost;exports.executeCreateCmsProduct=e.executeCreateCmsProduct;exports.executeDeleteCmsItem=e.executeDeleteCmsItem;exports.executeFetchEcommerceStats=e.executeFetchEcommerceStats;exports.executeFetchUrlContent=e.executeFetchUrlContent;exports.executeInsertContentBlock=e.executeInsertContentBlock;exports.executeManageProductVariants=e.executeManageProductVariants;exports.executePrepareDeleteCmsItem=e.executePrepareDeleteCmsItem;exports.executePublishContentDraft=e.executePublishContentDraft;exports.executeReadCurrentCmsItem=e.executeReadCurrentCmsItem;exports.executeRewritePageDraft=e.executeRewritePageDraft;exports.executeSearchDocumentation=e.executeSearchDocumentation;exports.executeSearchDocumentationWithTimeout=e.executeSearchDocumentationWithTimeout;exports.executeSearchStockPhotos=e.executeSearchStockPhotos;exports.executeSetContentImages=e.executeSetContentImages;exports.executeTranslateContentBulk=e.executeTranslateContentBulk;exports.executeTranslatePage=e.executeTranslatePage;exports.executeUpdateCmsItemField=e.executeUpdateCmsItemField;exports.executeUpdateContentBlock=e.executeUpdateContentBlock;exports.executeUpdateCurrentCmsFields=e.executeUpdateCurrentCmsFields;exports.executeUpdateFooter=e.executeUpdateFooter;exports.executeUpdateNavigationBar=e.executeUpdateNavigationBar;exports.executeUpdateSectionColumnBlock=e.executeUpdateSectionColumnBlock;exports.fetchEcommerceStatsInputSchema=e.fetchEcommerceStatsInputSchema;exports.fetchUrlContentInputSchema=e.fetchUrlContentInputSchema;exports.insertContentBlockInputSchema=e.insertContentBlockInputSchema;exports.isBlockedFetchHost=e.isBlockedFetchHost;exports.manageProductVariantsInputSchema=e.manageProductVariantsInputSchema;exports.maybeTriggerStockPhotoDownloads=e.maybeTriggerStockPhotoDownloads;exports.navigationItemInputSchema=e.navigationItemInputSchema;exports.prepareDeleteCmsItemInputSchema=e.prepareDeleteCmsItemInputSchema;exports.publishContentDraftInputSchema=e.publishContentDraftInputSchema;exports.readCurrentCmsItemInputSchema=e.readCurrentCmsItemInputSchema;exports.resolveCortexAiStockPhotoProvider=e.resolveCortexAiStockPhotoProvider;exports.resolveCortexAiStockPhotoProviders=e.resolveCortexAiStockPhotoProviders;exports.rewritePageDraftInputSchema=e.rewritePageDraftInputSchema;exports.searchDocumentationInputSchema=e.searchDocumentationInputSchema;exports.searchStockPhotosInputSchema=e.searchStockPhotosInputSchema;exports.setContentImagesInputSchema=e.setContentImagesInputSchema;exports.translateContentBulkInputSchema=e.translateContentBulkInputSchema;exports.translatePageInputSchema=e.translatePageInputSchema;exports.updateCmsItemFieldInputSchema=e.updateCmsItemFieldInputSchema;exports.updateContentBlockInputSchema=e.updateContentBlockInputSchema;exports.updateCurrentCmsFieldsInputSchema=e.updateCurrentCmsFieldsInputSchema;exports.updateFooterInputSchema=e.updateFooterInputSchema;exports.updateNavigationBarInputSchema=e.updateNavigationBarInputSchema;exports.updateSectionColumnBlockInputSchema=e.updateSectionColumnBlockInputSchema;exports.CORTEX_AI_KEY_ALGORITHM=_.CORTEX_AI_KEY_ALGORITHM;exports.CORTEX_AI_KEY_ENVELOPE_VERSION=_.CORTEX_AI_KEY_ENVELOPE_VERSION;exports.decryptOpenRouterApiKey=_.decryptOpenRouterApiKey;exports.encryptOpenRouterApiKey=_.encryptOpenRouterApiKey;exports.getMaskedOpenRouterKey=_.getMaskedOpenRouterKey;exports.getOpenRouterKeyEnvelopeStatus=_.getOpenRouterKeyEnvelopeStatus;exports.verifyOpenRouterApiKey=m.verifyOpenRouterApiKey;exports.verifyPexelsApiKey=m.verifyPexelsApiKey;exports.verifyUnsplashAccessKey=m.verifyUnsplashAccessKey;exports.listCortexAiCompatibleOpenRouterModels=O.listCortexAiCompatibleOpenRouterModels;exports.CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY=r.CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY;exports.CORTEX_AI_MODEL_REGISTRY=r.CORTEX_AI_MODEL_REGISTRY;exports.CORTEX_AI_OPENROUTER_BASE_URL=r.CORTEX_AI_OPENROUTER_BASE_URL;exports.CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL=r.CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL;exports.CORTEX_AI_REQUIRED_MODEL_PARAMETERS=r.CORTEX_AI_REQUIRED_MODEL_PARAMETERS;exports.CortexAiRoutingError=r.CortexAiRoutingError;exports.buildCortexAiModelFallbackChain=r.buildCortexAiModelFallbackChain;exports.buildCortexAiRoutingPolicy=r.buildCortexAiRoutingPolicy;exports.createCortexAiStoredModelSelection=r.createCortexAiStoredModelSelection;exports.filterCortexAiCompatibleOpenRouterModels=r.filterCortexAiCompatibleOpenRouterModels;exports.getHttpStatusCode=r.getHttpStatusCode;exports.getOpenRouterErrorStatus=r.getOpenRouterErrorStatus;exports.isCortexAiFreeModelId=r.isCortexAiFreeModelId;exports.isOpenRouterRateLimitError=r.isOpenRouterRateLimitError;exports.isOpenRouterRecoverableRoutingError=r.isOpenRouterRecoverableRoutingError;exports.omitUnsupportedCortexAiModelOptions=r.omitUnsupportedCortexAiModelOptions;exports.runWithCortexAiModelFallback=r.runWithCortexAiModelFallback;exports.safeParseCortexAiModelSelection=r.safeParseCortexAiModelSelection;exports.summarizeCortexAiRoutingError=r.summarizeCortexAiRoutingError;exports.CORTEX_AI_SEO_METADATA_CONTENT_BUDGET=s.CORTEX_AI_SEO_METADATA_CONTENT_BUDGET;exports.CORTEX_AI_SEO_METADATA_LENGTH_BUDGETS=s.CORTEX_AI_SEO_METADATA_LENGTH_BUDGETS;exports.cortexAiSeoMetadataOutputSchema=s.cortexAiSeoMetadataOutputSchema;exports.extractJsonObject=s.extractJsonObject;exports.generateCortexAiSeoMetadata=s.generateCortexAiSeoMetadata;exports.truncateOnWordBoundary=s.truncateOnWordBoundary;exports.CORTEX_AI_DEFAULT_ALT_TEXT_MAX_LENGTH=l.CORTEX_AI_DEFAULT_ALT_TEXT_MAX_LENGTH;exports.CORTEX_AI_VISION_MODEL_FALLBACK_REGISTRY=l.CORTEX_AI_VISION_MODEL_FALLBACK_REGISTRY;exports.buildCortexAiVisionRoutingPolicy=l.buildCortexAiVisionRoutingPolicy;exports.generateCortexAiAltText=l.generateCortexAiAltText;exports.isKnownVisionCapableCortexAiModelId=l.isKnownVisionCapableCortexAiModelId;exports.normalizeGeneratedAltText=l.normalizeGeneratedAltText;exports.availableCortexAiBlockTypes=C.availableCortexAiBlockTypes;exports.cortexAiBlockTypeSchema=C.cortexAiBlockTypeSchema;exports.customBlockSlugPatternSchema=C.customBlockSlugPatternSchema;exports.fallbackBlockSchemas=C.fallbackBlockSchemas;exports.isValidBlockType=C.isValidBlockType;exports.loadCustomBlockDefinitions=C.loadCustomBlockDefinitions;exports.readCustomBlockFields=C.readCustomBlockFields;exports.sectionBlockFallbackSchema=C.sectionBlockFallbackSchema;exports.validateCortexBlockContent=C.validateCortexBlockContent;exports.validateCustomBlockInstanceContent=C.validateCustomBlockInstanceContent;exports.CORTEX_WIDGET_DEFINITION_SELECT=A.CORTEX_WIDGET_DEFINITION_SELECT;exports.CortexWidgetRegistryInsertError=A.CortexWidgetRegistryInsertError;exports.buildCortexWidgetDefinitionInsertPayload=A.buildCortexWidgetDefinitionInsertPayload;exports.insertCortexWidgetDefinition=A.insertCortexWidgetDefinition;exports.CORTEX_WIDGET_ALLOWED_RELATION_TABLES=n.CORTEX_WIDGET_ALLOWED_RELATION_TABLES;exports.buildCortexProfileCardVerificationDefinition=n.buildCortexProfileCardVerificationDefinition;exports.buildCortexWidgetBuilderPrompt=n.buildCortexWidgetBuilderPrompt;exports.buildCortexWidgetBuilderSystemPrompt=n.buildCortexWidgetBuilderSystemPrompt;exports.cortexWidgetBuildRequestSchema=n.cortexWidgetBuildRequestSchema;exports.cortexWidgetDbRelationFieldSchema=n.cortexWidgetDbRelationFieldSchema;exports.cortexWidgetDefinitionSchema=n.cortexWidgetDefinitionSchema;exports.cortexWidgetFieldSchema=n.cortexWidgetFieldSchema;exports.cortexWidgetImageR2FieldSchema=n.cortexWidgetImageR2FieldSchema;exports.cortexWidgetLayoutNodeSchema=n.cortexWidgetLayoutNodeSchema;exports.cortexWidgetRichTextFieldSchema=n.cortexWidgetRichTextFieldSchema;exports.cortexWidgetTextFieldSchema=n.cortexWidgetTextFieldSchema;exports.validateCortexWidgetDefinitionOutput=n.validateCortexWidgetDefinitionOutput;exports.CORTEX_MCP_DEFAULT_PROTOCOL_VERSION=a.CORTEX_MCP_DEFAULT_PROTOCOL_VERSION;exports.CORTEX_MCP_LATEST_LEGACY_PROTOCOL_VERSION=a.CORTEX_MCP_LATEST_LEGACY_PROTOCOL_VERSION;exports.CORTEX_MCP_MODERN_PROTOCOL_VERSION=a.CORTEX_MCP_MODERN_PROTOCOL_VERSION;exports.CORTEX_MCP_SERVER_NAME=a.CORTEX_MCP_SERVER_NAME;exports.CORTEX_MCP_SERVER_TITLE=a.CORTEX_MCP_SERVER_TITLE;exports.CORTEX_MCP_SUPPORTED_PROTOCOL_VERSIONS=a.CORTEX_MCP_SUPPORTED_PROTOCOL_VERSIONS;exports.JSON_RPC_INTERNAL_ERROR=a.JSON_RPC_INTERNAL_ERROR;exports.JSON_RPC_INVALID_PARAMS=a.JSON_RPC_INVALID_PARAMS;exports.JSON_RPC_INVALID_REQUEST=a.JSON_RPC_INVALID_REQUEST;exports.JSON_RPC_METHOD_NOT_FOUND=a.JSON_RPC_METHOD_NOT_FOUND;exports.JSON_RPC_PARSE_ERROR=a.JSON_RPC_PARSE_ERROR;exports.handleCortexMcpMessage=a.handleCortexMcpMessage;exports.isJsonRpcNotification=a.isJsonRpcNotification;exports.isModernEraMessage=a.isModernEraMessage;exports.CORTEX_AI_MCP_ENV_TOKEN_MIN_LENGTH=i.CORTEX_AI_MCP_ENV_TOKEN_MIN_LENGTH;exports.CORTEX_AI_MCP_ENV_TOKEN_VAR=i.CORTEX_AI_MCP_ENV_TOKEN_VAR;exports.CORTEX_AI_MCP_SCOPES=i.CORTEX_AI_MCP_SCOPES;exports.CORTEX_AI_MCP_SETTINGS_DEFAULTS=i.CORTEX_AI_MCP_SETTINGS_DEFAULTS;exports.CORTEX_AI_MCP_SETTINGS_KEY=i.CORTEX_AI_MCP_SETTINGS_KEY;exports.CORTEX_AI_MCP_TOKENS_TABLE=i.CORTEX_AI_MCP_TOKENS_TABLE;exports.CORTEX_AI_MCP_TOKEN_PREFIX=i.CORTEX_AI_MCP_TOKEN_PREFIX;exports.hashCortexAiMcpToken=i.hashCortexAiMcpToken;exports.isLocalhostHost=i.isLocalhostHost;exports.matchesCortexAiMcpEnvToken=i.matchesCortexAiMcpEnvToken;exports.mintCortexAiMcpToken=i.mintCortexAiMcpToken;exports.normalizeCortexAiMcpSettings=i.normalizeCortexAiMcpSettings;exports.parseBearerToken=i.parseBearerToken;exports.readCortexAiMcpEnvToken=i.readCortexAiMcpEnvToken;exports.resolveCortexAiMcpSettings=i.resolveCortexAiMcpSettings;exports.shouldTrustLocalMcpRequest=i.shouldTrustLocalMcpRequest;exports.touchCortexAiMcpToken=i.touchCortexAiMcpToken;exports.verifyCortexAiMcpToken=i.verifyCortexAiMcpToken;exports.CORTEX_MCP_PROMPTS=c.CORTEX_MCP_PROMPTS;exports.CORTEX_MCP_RESOURCES=c.CORTEX_MCP_RESOURCES;exports.CORTEX_MCP_TOOL_ALIASES=c.CORTEX_MCP_TOOL_ALIASES;exports.CORTEX_MCP_TOOL_KINDS=c.CORTEX_MCP_TOOL_KINDS;exports.CortexMcpForbiddenToolError=c.CortexMcpForbiddenToolError;exports.CortexMcpUnknownToolError=c.CortexMcpUnknownToolError;exports.assertCortexMcpToolCoverage=c.assertCortexMcpToolCoverage;exports.buildCortexMcpToolDefinitions=c.buildCortexMcpToolDefinitions;exports.callCortexMcpTool=c.callCortexMcpTool;exports.cortexMcpScopesAllow=c.cortexMcpScopesAllow;exports.getCortexMcpPrompt=c.getCortexMcpPrompt;exports.getCortexMcpToolKind=c.getCortexMcpToolKind;exports.readCortexMcpResource=c.readCortexMcpResource;exports.resolveCortexMcpToolName=c.resolveCortexMcpToolName;exports.CORTEX_AI_BUILD_SESSION_SETTING_KEY=E.CORTEX_AI_BUILD_SESSION_SETTING_KEY;exports.CORTEX_AI_SITE_BRIEF_SETTING_KEY=E.CORTEX_AI_SITE_BRIEF_SETTING_KEY;exports.cortexBuildSessionSchema=E.cortexBuildSessionSchema;exports.cortexSiteBriefInputSchema=E.cortexSiteBriefInputSchema;exports.cortexSiteBriefSchema=E.cortexSiteBriefSchema;exports.formatCortexSiteBriefForPrompt=E.formatCortexSiteBriefForPrompt;exports.isCortexBuildSessionUsable=E.isCortexBuildSessionUsable;exports.isCortexSiteBriefComplete=E.isCortexSiteBriefComplete;exports.safeParseCortexSiteBrief=E.safeParseCortexSiteBrief;Object.defineProperty(exports,"z",{enumerable:!0,get:()=>d.z});

package/index.es.js

@@ -1,43 +1,45 @@
 import { INLINE_HTML_ASSISTANT_SYSTEM_PROMPT as r, generateEditorBlocksRequestSchema as a, generateEditorHtmlFragment as i, validateGeneratedEditorHtmlFragment as c } from "./lib/ai-block-generation.es.js";
-import { createCortexAiOpenRouterClient as C, createCortexAiOpenRouterProvider as S, generateCortexAiText as E, getStoredCortexAiModelSelection as u, resolveCortexAiOpenRouterCredential as _ } from "./lib/ai-client.es.js";
-import { CORTEX_AI_AGENT_SETTINGS_BOUNDS as l, CORTEX_AI_AGENT_SETTINGS_DEFAULTS as m, CORTEX_AI_AGENT_SETTINGS_KEY as T, CORTEX_AI_OPENROUTER_MODEL_SELECTION_SETTING_KEY as p, CORTEX_AI_OPENROUTER_SETTING_KEY as x, CORTEX_AI_PACKAGE_ID as R, CORTEX_AI_PACKAGE_NAME as I, CORTEX_AI_PEXELS_SETTING_KEY as A, CORTEX_AI_UNSPLASH_APP_NAME_SETTING_KEY as O, CORTEX_AI_UNSPLASH_SETTING_KEY as d, decryptStoredOpenRouterApiKey as h, encryptStoredOpenRouterApiKey as P, getCortexAiEnvConfig as M, getEnvOpenRouterKeyStatus as g, getOpenRouterEnvApiKey as N, getPexelsEnvApiKey as B, getStoredOpenRouterKeyStatus as D, getUnsplashEnvApiKey as f, normalizeCortexAiAgentSettings as L, resolveCortexAiAgentSettings as X } from "./lib/ai-config.es.js";
-import { generateCortexWidgetDefinition as b } from "./lib/ai-cortex-widget-builder.es.js";
-import { createCortexCustomBlockTools as F, createCustomBlockInputSchema as K, deleteCustomBlockInputSchema as U, executeCreateCustomBlock as y, executeDeleteCustomBlock as G, executeListCustomBlocks as W, executeUpdateCustomBlock as V, listCustomBlocksInputSchema as Y, updateCustomBlockInputSchema as H } from "./lib/ai-global-agent-custom-block-tools.es.js";
+import { createCortexAiOpenRouterClient as C, createCortexAiOpenRouterProvider as E, generateCortexAiText as _, getStoredCortexAiModelSelection as S, resolveCortexAiOpenRouterCredential as u } from "./lib/ai-client.es.js";
+import { CORTEX_AI_AGENT_SETTINGS_BOUNDS as l, CORTEX_AI_AGENT_SETTINGS_DEFAULTS as T, CORTEX_AI_AGENT_SETTINGS_KEY as m, CORTEX_AI_OPENROUTER_MODEL_SELECTION_SETTING_KEY as p, CORTEX_AI_OPENROUTER_SETTING_KEY as x, CORTEX_AI_PACKAGE_ID as R, CORTEX_AI_PACKAGE_NAME as I, CORTEX_AI_PEXELS_SETTING_KEY as A, CORTEX_AI_UNSPLASH_APP_NAME_SETTING_KEY as O, CORTEX_AI_UNSPLASH_SETTING_KEY as d, decryptStoredOpenRouterApiKey as P, encryptStoredOpenRouterApiKey as h, getCortexAiEnvConfig as M, getEnvOpenRouterKeyStatus as N, getOpenRouterEnvApiKey as g, getPexelsEnvApiKey as B, getStoredOpenRouterKeyStatus as D, getUnsplashEnvApiKey as f, normalizeCortexAiAgentSettings as L, resolveCortexAiAgentSettings as X } from "./lib/ai-config.es.js";
+import { generateCortexWidgetDefinition as v } from "./lib/ai-cortex-widget-builder.es.js";
+import { createCortexCustomBlockTools as b, createCustomBlockInputSchema as F, deleteCustomBlockInputSchema as U, executeCreateCustomBlock as y, executeDeleteCustomBlock as G, executeListCustomBlocks as V, executeUpdateCustomBlock as W, listCustomBlocksInputSchema as Y, updateCustomBlockInputSchema as H } from "./lib/ai-global-agent-custom-block-tools.es.js";
 import { createCortexDatabaseAgentTools as J, describeDatabaseSchemaInputSchema as z, executeDatabaseActionPlan as q, executeDatabaseActionPlanInputSchema as Q, executeDatabaseMutation as j, executeDatabaseMutationInputSchema as Z, executeDescribeDatabaseSchema as $, executeReadDatabaseRecords as ee, readDatabaseRecordsInputSchema as te } from "./lib/ai-global-agent-db-tools.es.js";
-import { NEXTBLOCK_SEED_MEDIA_OBJECT_KEYS as re, NEXTBLOCK_SEED_TRANSLATION_GROUP_IDS as ae, createCortexSiteTools as ie, executeFinishSiteBuild as ce, executeGetSiteOverview as ne, executeResetSiteContent as Ce, executeSaveSiteBrief as Se, executeStartSiteBuild as Ee, executeUpdateSiteIdentity as ue, finishSiteBuildInputSchema as _e, formatCortexSiteOverviewForPrompt as se, getSiteOverviewInputSchema as le, readCortexBuildSession as me, readCortexSiteBrief as Te, resetSiteContentInputSchema as pe, resolveCortexBuildSession as xe, saveSiteBriefInputSchema as Re, startSiteBuildInputSchema as Ie, updateSiteIdentityInputSchema as Ae } from "./lib/ai-global-agent-site-tools.es.js";
-import { buildVisibleContactIntroActionPlan as de, cortexAiPageContextSchema as he, createCmsPageInputSchema as Pe, createCmsPostInputSchema as Me, createCmsProductInputSchema as ge, createCortexGlobalAgentTools as Ne, deleteCmsItemInputSchema as Be, executeCmsActionPlan as De, executeCmsActionPlanInputSchema as fe, executeCreateCmsPage as Le, executeCreateCmsPost as Xe, executeCreateCmsProduct as ke, executeDeleteCmsItem as be, executeFetchEcommerceStats as ve, executeFetchUrlContent as Fe, executeInsertContentBlock as Ke, executeManageProductVariants as Ue, executePrepareDeleteCmsItem as ye, executePublishContentDraft as Ge, executeReadCurrentCmsItem as We, executeRewritePageDraft as Ve, executeSearchDocumentation as Ye, executeSearchDocumentationWithTimeout as He, executeSearchStockPhotos as we, executeSetContentImages as Je, executeTranslateContentBulk as ze, executeTranslatePage as qe, executeUpdateCmsItemField as Qe, executeUpdateContentBlock as je, executeUpdateCurrentCmsFields as Ze, executeUpdateFooter as $e, executeUpdateNavigationBar as et, executeUpdateSectionColumnBlock as tt, fetchEcommerceStatsInputSchema as ot, fetchUrlContentInputSchema as rt, insertContentBlockInputSchema as at, isBlockedFetchHost as it, manageProductVariantsInputSchema as ct, maybeTriggerStockPhotoDownloads as nt, navigationItemInputSchema as Ct, prepareDeleteCmsItemInputSchema as St, publishContentDraftInputSchema as Et, readCurrentCmsItemInputSchema as ut, resolveCortexAiStockPhotoProvider as _t, resolveCortexAiStockPhotoProviders as st, rewritePageDraftInputSchema as lt, searchDocumentationInputSchema as mt, searchStockPhotosInputSchema as Tt, setContentImagesInputSchema as pt, translateContentBulkInputSchema as xt, translatePageInputSchema as Rt, updateCmsItemFieldInputSchema as It, updateContentBlockInputSchema as At, updateCurrentCmsFieldsInputSchema as Ot, updateFooterInputSchema as dt, updateNavigationBarInputSchema as ht, updateSectionColumnBlockInputSchema as Pt } from "./lib/ai-global-agent-tools.es.js";
-import { CORTEX_AI_KEY_ALGORITHM as gt, CORTEX_AI_KEY_ENVELOPE_VERSION as Nt, decryptOpenRouterApiKey as Bt, encryptOpenRouterApiKey as Dt, getMaskedOpenRouterKey as ft, getOpenRouterKeyEnvelopeStatus as Lt } from "./lib/ai-key-crypto.es.js";
-import { verifyOpenRouterApiKey as kt, verifyPexelsApiKey as bt, verifyUnsplashAccessKey as vt } from "./lib/ai-key-verification.es.js";
-import { listCortexAiCompatibleOpenRouterModels as Kt } from "./lib/ai-model-catalog.es.js";
-import { CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY as yt, CORTEX_AI_MODEL_REGISTRY as Gt, CORTEX_AI_OPENROUTER_BASE_URL as Wt, CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL as Vt, CORTEX_AI_REQUIRED_MODEL_PARAMETERS as Yt, CortexAiRoutingError as Ht, buildCortexAiModelFallbackChain as wt, buildCortexAiRoutingPolicy as Jt, createCortexAiStoredModelSelection as zt, filterCortexAiCompatibleOpenRouterModels as qt, getHttpStatusCode as Qt, getOpenRouterErrorStatus as jt, isCortexAiFreeModelId as Zt, isOpenRouterRateLimitError as $t, isOpenRouterRecoverableRoutingError as eo, omitUnsupportedCortexAiModelOptions as to, runWithCortexAiModelFallback as oo, safeParseCortexAiModelSelection as ro, summarizeCortexAiRoutingError as ao } from "./lib/ai-model-registry.es.js";
-import { CORTEX_AI_SEO_METADATA_CONTENT_BUDGET as co, CORTEX_AI_SEO_METADATA_LENGTH_BUDGETS as no, cortexAiSeoMetadataOutputSchema as Co, extractJsonObject as So, generateCortexAiSeoMetadata as Eo, truncateOnWordBoundary as uo } from "./lib/ai-seo-metadata.es.js";
-import { CORTEX_AI_DEFAULT_ALT_TEXT_MAX_LENGTH as so, CORTEX_AI_VISION_MODEL_FALLBACK_REGISTRY as lo, buildCortexAiVisionRoutingPolicy as mo, generateCortexAiAltText as To, isKnownVisionCapableCortexAiModelId as po, normalizeGeneratedAltText as xo } from "./lib/ai-vision.es.js";
-import { availableCortexAiBlockTypes as Io, cortexAiBlockTypeSchema as Ao, customBlockSlugPatternSchema as Oo, fallbackBlockSchemas as ho, isValidBlockType as Po, loadCustomBlockDefinitions as Mo, readCustomBlockFields as go, sectionBlockFallbackSchema as No, validateCortexBlockContent as Bo, validateCustomBlockInstanceContent as Do } from "./lib/block-content-schemas.es.js";
-import { CORTEX_WIDGET_DEFINITION_SELECT as Lo, CortexWidgetRegistryInsertError as Xo, buildCortexWidgetDefinitionInsertPayload as ko, insertCortexWidgetDefinition as bo } from "./lib/cortex-widget-registry.es.js";
-import { CORTEX_WIDGET_ALLOWED_RELATION_TABLES as Fo, buildCortexProfileCardVerificationDefinition as Ko, buildCortexWidgetBuilderPrompt as Uo, buildCortexWidgetBuilderSystemPrompt as yo, cortexWidgetBuildRequestSchema as Go, cortexWidgetDbRelationFieldSchema as Wo, cortexWidgetDefinitionSchema as Vo, cortexWidgetFieldSchema as Yo, cortexWidgetImageR2FieldSchema as Ho, cortexWidgetLayoutNodeSchema as wo, cortexWidgetRichTextFieldSchema as Jo, cortexWidgetTextFieldSchema as zo, validateCortexWidgetDefinitionOutput as qo } from "./lib/cortex-widget-schema.es.js";
-import { CORTEX_MCP_DEFAULT_PROTOCOL_VERSION as jo, CORTEX_MCP_LATEST_LEGACY_PROTOCOL_VERSION as Zo, CORTEX_MCP_MODERN_PROTOCOL_VERSION as $o, CORTEX_MCP_SERVER_NAME as er, CORTEX_MCP_SERVER_TITLE as tr, CORTEX_MCP_SUPPORTED_PROTOCOL_VERSIONS as or, JSON_RPC_INTERNAL_ERROR as rr, JSON_RPC_INVALID_PARAMS as ar, JSON_RPC_INVALID_REQUEST as ir, JSON_RPC_METHOD_NOT_FOUND as cr, JSON_RPC_PARSE_ERROR as nr, handleCortexMcpMessage as Cr, isJsonRpcNotification as Sr, isModernEraMessage as Er } from "./lib/mcp-server.es.js";
-import { CORTEX_AI_MCP_SCOPES as _r, CORTEX_AI_MCP_SETTINGS_DEFAULTS as sr, CORTEX_AI_MCP_SETTINGS_KEY as lr, CORTEX_AI_MCP_TOKENS_TABLE as mr, CORTEX_AI_MCP_TOKEN_PREFIX as Tr, hashCortexAiMcpToken as pr, isLocalhostHost as xr, mintCortexAiMcpToken as Rr, normalizeCortexAiMcpSettings as Ir, parseBearerToken as Ar, resolveCortexAiMcpSettings as Or, shouldTrustLocalMcpRequest as dr, touchCortexAiMcpToken as hr, verifyCortexAiMcpToken as Pr } from "./lib/mcp-tokens.es.js";
-import { CORTEX_MCP_PROMPTS as gr, CORTEX_MCP_RESOURCES as Nr, CORTEX_MCP_TOOL_ALIASES as Br, CORTEX_MCP_TOOL_KINDS as Dr, CortexMcpForbiddenToolError as fr, CortexMcpUnknownToolError as Lr, assertCortexMcpToolCoverage as Xr, buildCortexMcpToolDefinitions as kr, callCortexMcpTool as br, cortexMcpScopesAllow as vr, getCortexMcpPrompt as Fr, getCortexMcpToolKind as Kr, readCortexMcpResource as Ur, resolveCortexMcpToolName as yr } from "./lib/mcp-tool-registry.es.js";
-import { CORTEX_AI_BUILD_SESSION_SETTING_KEY as Wr, CORTEX_AI_SITE_BRIEF_SETTING_KEY as Vr, cortexBuildSessionSchema as Yr, cortexSiteBriefInputSchema as Hr, cortexSiteBriefSchema as wr, formatCortexSiteBriefForPrompt as Jr, isCortexBuildSessionUsable as zr, isCortexSiteBriefComplete as qr, safeParseCortexSiteBrief as Qr } from "./lib/site-brief.es.js";
+import { NEXTBLOCK_SEED_MEDIA_OBJECT_KEYS as re, NEXTBLOCK_SEED_TRANSLATION_GROUP_IDS as ae, createCortexSiteTools as ie, executeFinishSiteBuild as ce, executeGetSiteOverview as ne, executeResetSiteContent as Ce, executeSaveSiteBrief as Ee, executeStartSiteBuild as _e, executeUpdateSiteIdentity as Se, finishSiteBuildInputSchema as ue, formatCortexSiteOverviewForPrompt as se, getSiteOverviewInputSchema as le, readCortexBuildSession as Te, readCortexSiteBrief as me, resetSiteContentInputSchema as pe, resolveCortexBuildSession as xe, saveSiteBriefInputSchema as Re, startSiteBuildInputSchema as Ie, updateSiteIdentityInputSchema as Ae } from "./lib/ai-global-agent-site-tools.es.js";
+import { buildVisibleContactIntroActionPlan as de, cortexAiPageContextSchema as Pe, createCmsPageInputSchema as he, createCmsPostInputSchema as Me, createCmsProductInputSchema as Ne, createCortexGlobalAgentTools as ge, deleteCmsItemInputSchema as Be, executeCmsActionPlan as De, executeCmsActionPlanInputSchema as fe, executeCreateCmsPage as Le, executeCreateCmsPost as Xe, executeCreateCmsProduct as ke, executeDeleteCmsItem as ve, executeFetchEcommerceStats as Ke, executeFetchUrlContent as be, executeInsertContentBlock as Fe, executeManageProductVariants as Ue, executePrepareDeleteCmsItem as ye, executePublishContentDraft as Ge, executeReadCurrentCmsItem as Ve, executeRewritePageDraft as We, executeSearchDocumentation as Ye, executeSearchDocumentationWithTimeout as He, executeSearchStockPhotos as we, executeSetContentImages as Je, executeTranslateContentBulk as ze, executeTranslatePage as qe, executeUpdateCmsItemField as Qe, executeUpdateContentBlock as je, executeUpdateCurrentCmsFields as Ze, executeUpdateFooter as $e, executeUpdateNavigationBar as et, executeUpdateSectionColumnBlock as tt, fetchEcommerceStatsInputSchema as ot, fetchUrlContentInputSchema as rt, insertContentBlockInputSchema as at, isBlockedFetchHost as it, manageProductVariantsInputSchema as ct, maybeTriggerStockPhotoDownloads as nt, navigationItemInputSchema as Ct, prepareDeleteCmsItemInputSchema as Et, publishContentDraftInputSchema as _t, readCurrentCmsItemInputSchema as St, resolveCortexAiStockPhotoProvider as ut, resolveCortexAiStockPhotoProviders as st, rewritePageDraftInputSchema as lt, searchDocumentationInputSchema as Tt, searchStockPhotosInputSchema as mt, setContentImagesInputSchema as pt, translateContentBulkInputSchema as xt, translatePageInputSchema as Rt, updateCmsItemFieldInputSchema as It, updateContentBlockInputSchema as At, updateCurrentCmsFieldsInputSchema as Ot, updateFooterInputSchema as dt, updateNavigationBarInputSchema as Pt, updateSectionColumnBlockInputSchema as ht } from "./lib/ai-global-agent-tools.es.js";
+import { CORTEX_AI_KEY_ALGORITHM as Nt, CORTEX_AI_KEY_ENVELOPE_VERSION as gt, decryptOpenRouterApiKey as Bt, encryptOpenRouterApiKey as Dt, getMaskedOpenRouterKey as ft, getOpenRouterKeyEnvelopeStatus as Lt } from "./lib/ai-key-crypto.es.js";
+import { verifyOpenRouterApiKey as kt, verifyPexelsApiKey as vt, verifyUnsplashAccessKey as Kt } from "./lib/ai-key-verification.es.js";
+import { listCortexAiCompatibleOpenRouterModels as Ft } from "./lib/ai-model-catalog.es.js";
+import { CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY as yt, CORTEX_AI_MODEL_REGISTRY as Gt, CORTEX_AI_OPENROUTER_BASE_URL as Vt, CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL as Wt, CORTEX_AI_REQUIRED_MODEL_PARAMETERS as Yt, CortexAiRoutingError as Ht, buildCortexAiModelFallbackChain as wt, buildCortexAiRoutingPolicy as Jt, createCortexAiStoredModelSelection as zt, filterCortexAiCompatibleOpenRouterModels as qt, getHttpStatusCode as Qt, getOpenRouterErrorStatus as jt, isCortexAiFreeModelId as Zt, isOpenRouterRateLimitError as $t, isOpenRouterRecoverableRoutingError as eo, omitUnsupportedCortexAiModelOptions as to, runWithCortexAiModelFallback as oo, safeParseCortexAiModelSelection as ro, summarizeCortexAiRoutingError as ao } from "./lib/ai-model-registry.es.js";
+import { CORTEX_AI_SEO_METADATA_CONTENT_BUDGET as co, CORTEX_AI_SEO_METADATA_LENGTH_BUDGETS as no, cortexAiSeoMetadataOutputSchema as Co, extractJsonObject as Eo, generateCortexAiSeoMetadata as _o, truncateOnWordBoundary as So } from "./lib/ai-seo-metadata.es.js";
+import { CORTEX_AI_DEFAULT_ALT_TEXT_MAX_LENGTH as so, CORTEX_AI_VISION_MODEL_FALLBACK_REGISTRY as lo, buildCortexAiVisionRoutingPolicy as To, generateCortexAiAltText as mo, isKnownVisionCapableCortexAiModelId as po, normalizeGeneratedAltText as xo } from "./lib/ai-vision.es.js";
+import { availableCortexAiBlockTypes as Io, cortexAiBlockTypeSchema as Ao, customBlockSlugPatternSchema as Oo, fallbackBlockSchemas as Po, isValidBlockType as ho, loadCustomBlockDefinitions as Mo, readCustomBlockFields as No, sectionBlockFallbackSchema as go, validateCortexBlockContent as Bo, validateCustomBlockInstanceContent as Do } from "./lib/block-content-schemas.es.js";
+import { CORTEX_WIDGET_DEFINITION_SELECT as Lo, CortexWidgetRegistryInsertError as Xo, buildCortexWidgetDefinitionInsertPayload as ko, insertCortexWidgetDefinition as vo } from "./lib/cortex-widget-registry.es.js";
+import { CORTEX_WIDGET_ALLOWED_RELATION_TABLES as bo, buildCortexProfileCardVerificationDefinition as Fo, buildCortexWidgetBuilderPrompt as Uo, buildCortexWidgetBuilderSystemPrompt as yo, cortexWidgetBuildRequestSchema as Go, cortexWidgetDbRelationFieldSchema as Vo, cortexWidgetDefinitionSchema as Wo, cortexWidgetFieldSchema as Yo, cortexWidgetImageR2FieldSchema as Ho, cortexWidgetLayoutNodeSchema as wo, cortexWidgetRichTextFieldSchema as Jo, cortexWidgetTextFieldSchema as zo, validateCortexWidgetDefinitionOutput as qo } from "./lib/cortex-widget-schema.es.js";
+import { CORTEX_MCP_DEFAULT_PROTOCOL_VERSION as jo, CORTEX_MCP_LATEST_LEGACY_PROTOCOL_VERSION as Zo, CORTEX_MCP_MODERN_PROTOCOL_VERSION as $o, CORTEX_MCP_SERVER_NAME as er, CORTEX_MCP_SERVER_TITLE as tr, CORTEX_MCP_SUPPORTED_PROTOCOL_VERSIONS as or, JSON_RPC_INTERNAL_ERROR as rr, JSON_RPC_INVALID_PARAMS as ar, JSON_RPC_INVALID_REQUEST as ir, JSON_RPC_METHOD_NOT_FOUND as cr, JSON_RPC_PARSE_ERROR as nr, handleCortexMcpMessage as Cr, isJsonRpcNotification as Er, isModernEraMessage as _r } from "./lib/mcp-server.es.js";
+import { CORTEX_AI_MCP_ENV_TOKEN_MIN_LENGTH as ur, CORTEX_AI_MCP_ENV_TOKEN_VAR as sr, CORTEX_AI_MCP_SCOPES as lr, CORTEX_AI_MCP_SETTINGS_DEFAULTS as Tr, CORTEX_AI_MCP_SETTINGS_KEY as mr, CORTEX_AI_MCP_TOKENS_TABLE as pr, CORTEX_AI_MCP_TOKEN_PREFIX as xr, hashCortexAiMcpToken as Rr, isLocalhostHost as Ir, matchesCortexAiMcpEnvToken as Ar, mintCortexAiMcpToken as Or, normalizeCortexAiMcpSettings as dr, parseBearerToken as Pr, readCortexAiMcpEnvToken as hr, resolveCortexAiMcpSettings as Mr, shouldTrustLocalMcpRequest as Nr, touchCortexAiMcpToken as gr, verifyCortexAiMcpToken as Br } from "./lib/mcp-tokens.es.js";
+import { CORTEX_MCP_PROMPTS as fr, CORTEX_MCP_RESOURCES as Lr, CORTEX_MCP_TOOL_ALIASES as Xr, CORTEX_MCP_TOOL_KINDS as kr, CortexMcpForbiddenToolError as vr, CortexMcpUnknownToolError as Kr, assertCortexMcpToolCoverage as br, buildCortexMcpToolDefinitions as Fr, callCortexMcpTool as Ur, cortexMcpScopesAllow as yr, getCortexMcpPrompt as Gr, getCortexMcpToolKind as Vr, readCortexMcpResource as Wr, resolveCortexMcpToolName as Yr } from "./lib/mcp-tool-registry.es.js";
+import { CORTEX_AI_BUILD_SESSION_SETTING_KEY as wr, CORTEX_AI_SITE_BRIEF_SETTING_KEY as Jr, cortexBuildSessionSchema as zr, cortexSiteBriefInputSchema as qr, cortexSiteBriefSchema as Qr, formatCortexSiteBriefForPrompt as jr, isCortexBuildSessionUsable as Zr, isCortexSiteBriefComplete as $r, safeParseCortexSiteBrief as ea } from "./lib/site-brief.es.js";
 import "./lib/zod-config.es.js";
-import { z as Zr } from "zod";
+import { z as oa } from "zod";
 export {
   l as CORTEX_AI_AGENT_SETTINGS_BOUNDS,
-  m as CORTEX_AI_AGENT_SETTINGS_DEFAULTS,
-  T as CORTEX_AI_AGENT_SETTINGS_KEY,
-  Wr as CORTEX_AI_BUILD_SESSION_SETTING_KEY,
+  T as CORTEX_AI_AGENT_SETTINGS_DEFAULTS,
+  m as CORTEX_AI_AGENT_SETTINGS_KEY,
+  wr as CORTEX_AI_BUILD_SESSION_SETTING_KEY,
   so as CORTEX_AI_DEFAULT_ALT_TEXT_MAX_LENGTH,
   yt as CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY,
-  gt as CORTEX_AI_KEY_ALGORITHM,
-  Nt as CORTEX_AI_KEY_ENVELOPE_VERSION,
-  _r as CORTEX_AI_MCP_SCOPES,
-  sr as CORTEX_AI_MCP_SETTINGS_DEFAULTS,
-  lr as CORTEX_AI_MCP_SETTINGS_KEY,
-  mr as CORTEX_AI_MCP_TOKENS_TABLE,
-  Tr as CORTEX_AI_MCP_TOKEN_PREFIX,
+  Nt as CORTEX_AI_KEY_ALGORITHM,
+  gt as CORTEX_AI_KEY_ENVELOPE_VERSION,
+  ur as CORTEX_AI_MCP_ENV_TOKEN_MIN_LENGTH,
+  sr as CORTEX_AI_MCP_ENV_TOKEN_VAR,
+  lr as CORTEX_AI_MCP_SCOPES,
+  Tr as CORTEX_AI_MCP_SETTINGS_DEFAULTS,
+  mr as CORTEX_AI_MCP_SETTINGS_KEY,
+  pr as CORTEX_AI_MCP_TOKENS_TABLE,
+  xr as CORTEX_AI_MCP_TOKEN_PREFIX,
   Gt as CORTEX_AI_MODEL_REGISTRY,
-  Wt as CORTEX_AI_OPENROUTER_BASE_URL,
-  Vt as CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL,
+  Vt as CORTEX_AI_OPENROUTER_BASE_URL,
+  Wt as CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL,
   p as CORTEX_AI_OPENROUTER_MODEL_SELECTION_SETTING_KEY,
   x as CORTEX_AI_OPENROUTER_SETTING_KEY,
   R as CORTEX_AI_PACKAGE_ID,
@@ -46,25 +48,25 @@ export {
   Yt as CORTEX_AI_REQUIRED_MODEL_PARAMETERS,
   co as CORTEX_AI_SEO_METADATA_CONTENT_BUDGET,
   no as CORTEX_AI_SEO_METADATA_LENGTH_BUDGETS,
-  Vr as CORTEX_AI_SITE_BRIEF_SETTING_KEY,
+  Jr as CORTEX_AI_SITE_BRIEF_SETTING_KEY,
   O as CORTEX_AI_UNSPLASH_APP_NAME_SETTING_KEY,
   d as CORTEX_AI_UNSPLASH_SETTING_KEY,
   lo as CORTEX_AI_VISION_MODEL_FALLBACK_REGISTRY,
   jo as CORTEX_MCP_DEFAULT_PROTOCOL_VERSION,
   Zo as CORTEX_MCP_LATEST_LEGACY_PROTOCOL_VERSION,
   $o as CORTEX_MCP_MODERN_PROTOCOL_VERSION,
-  gr as CORTEX_MCP_PROMPTS,
-  Nr as CORTEX_MCP_RESOURCES,
+  fr as CORTEX_MCP_PROMPTS,
+  Lr as CORTEX_MCP_RESOURCES,
   er as CORTEX_MCP_SERVER_NAME,
   tr as CORTEX_MCP_SERVER_TITLE,
   or as CORTEX_MCP_SUPPORTED_PROTOCOL_VERSIONS,
-  Br as CORTEX_MCP_TOOL_ALIASES,
-  Dr as CORTEX_MCP_TOOL_KINDS,
-  Fo as CORTEX_WIDGET_ALLOWED_RELATION_TABLES,
+  Xr as CORTEX_MCP_TOOL_ALIASES,
+  kr as CORTEX_MCP_TOOL_KINDS,
+  bo as CORTEX_WIDGET_ALLOWED_RELATION_TABLES,
   Lo as CORTEX_WIDGET_DEFINITION_SELECT,
   Ht as CortexAiRoutingError,
-  fr as CortexMcpForbiddenToolError,
-  Lr as CortexMcpUnknownToolError,
+  vr as CortexMcpForbiddenToolError,
+  Kr as CortexMcpUnknownToolError,
   Xo as CortexWidgetRegistryInsertError,
   r as INLINE_HTML_ASSISTANT_SYSTEM_PROMPT,
   rr as JSON_RPC_INTERNAL_ERROR,
@@ -74,52 +76,52 @@ export {
   nr as JSON_RPC_PARSE_ERROR,
   re as NEXTBLOCK_SEED_MEDIA_OBJECT_KEYS,
   ae as NEXTBLOCK_SEED_TRANSLATION_GROUP_IDS,
-  Xr as assertCortexMcpToolCoverage,
+  br as assertCortexMcpToolCoverage,
   Io as availableCortexAiBlockTypes,
   wt as buildCortexAiModelFallbackChain,
   Jt as buildCortexAiRoutingPolicy,
-  mo as buildCortexAiVisionRoutingPolicy,
-  kr as buildCortexMcpToolDefinitions,
-  Ko as buildCortexProfileCardVerificationDefinition,
+  To as buildCortexAiVisionRoutingPolicy,
+  Fr as buildCortexMcpToolDefinitions,
+  Fo as buildCortexProfileCardVerificationDefinition,
   Uo as buildCortexWidgetBuilderPrompt,
   yo as buildCortexWidgetBuilderSystemPrompt,
   ko as buildCortexWidgetDefinitionInsertPayload,
   de as buildVisibleContactIntroActionPlan,
-  br as callCortexMcpTool,
+  Ur as callCortexMcpTool,
   Ao as cortexAiBlockTypeSchema,
-  he as cortexAiPageContextSchema,
+  Pe as cortexAiPageContextSchema,
   Co as cortexAiSeoMetadataOutputSchema,
-  Yr as cortexBuildSessionSchema,
-  vr as cortexMcpScopesAllow,
-  Hr as cortexSiteBriefInputSchema,
-  wr as cortexSiteBriefSchema,
+  zr as cortexBuildSessionSchema,
+  yr as cortexMcpScopesAllow,
+  qr as cortexSiteBriefInputSchema,
+  Qr as cortexSiteBriefSchema,
   Go as cortexWidgetBuildRequestSchema,
-  Wo as cortexWidgetDbRelationFieldSchema,
-  Vo as cortexWidgetDefinitionSchema,
+  Vo as cortexWidgetDbRelationFieldSchema,
+  Wo as cortexWidgetDefinitionSchema,
   Yo as cortexWidgetFieldSchema,
   Ho as cortexWidgetImageR2FieldSchema,
   wo as cortexWidgetLayoutNodeSchema,
   Jo as cortexWidgetRichTextFieldSchema,
   zo as cortexWidgetTextFieldSchema,
-  Pe as createCmsPageInputSchema,
+  he as createCmsPageInputSchema,
   Me as createCmsPostInputSchema,
-  ge as createCmsProductInputSchema,
+  Ne as createCmsProductInputSchema,
   C as createCortexAiOpenRouterClient,
-  S as createCortexAiOpenRouterProvider,
+  E as createCortexAiOpenRouterProvider,
   zt as createCortexAiStoredModelSelection,
-  F as createCortexCustomBlockTools,
+  b as createCortexCustomBlockTools,
   J as createCortexDatabaseAgentTools,
-  Ne as createCortexGlobalAgentTools,
+  ge as createCortexGlobalAgentTools,
   ie as createCortexSiteTools,
-  K as createCustomBlockInputSchema,
+  F as createCustomBlockInputSchema,
   Oo as customBlockSlugPatternSchema,
   Bt as decryptOpenRouterApiKey,
-  h as decryptStoredOpenRouterApiKey,
+  P as decryptStoredOpenRouterApiKey,
   Be as deleteCmsItemInputSchema,
   U as deleteCustomBlockInputSchema,
   z as describeDatabaseSchemaInputSchema,
   Dt as encryptOpenRouterApiKey,
-  P as encryptStoredOpenRouterApiKey,
+  h as encryptStoredOpenRouterApiKey,
   De as executeCmsActionPlan,
   fe as executeCmsActionPlanInputSchema,
   Le as executeCreateCmsPage,
@@ -130,140 +132,142 @@ export {
   Q as executeDatabaseActionPlanInputSchema,
   j as executeDatabaseMutation,
   Z as executeDatabaseMutationInputSchema,
-  be as executeDeleteCmsItem,
+  ve as executeDeleteCmsItem,
   G as executeDeleteCustomBlock,
   $ as executeDescribeDatabaseSchema,
-  ve as executeFetchEcommerceStats,
-  Fe as executeFetchUrlContent,
+  Ke as executeFetchEcommerceStats,
+  be as executeFetchUrlContent,
   ce as executeFinishSiteBuild,
   ne as executeGetSiteOverview,
-  Ke as executeInsertContentBlock,
-  W as executeListCustomBlocks,
+  Fe as executeInsertContentBlock,
+  V as executeListCustomBlocks,
   Ue as executeManageProductVariants,
   ye as executePrepareDeleteCmsItem,
   Ge as executePublishContentDraft,
-  We as executeReadCurrentCmsItem,
+  Ve as executeReadCurrentCmsItem,
   ee as executeReadDatabaseRecords,
   Ce as executeResetSiteContent,
-  Ve as executeRewritePageDraft,
-  Se as executeSaveSiteBrief,
+  We as executeRewritePageDraft,
+  Ee as executeSaveSiteBrief,
   Ye as executeSearchDocumentation,
   He as executeSearchDocumentationWithTimeout,
   we as executeSearchStockPhotos,
   Je as executeSetContentImages,
-  Ee as executeStartSiteBuild,
+  _e as executeStartSiteBuild,
   ze as executeTranslateContentBulk,
   qe as executeTranslatePage,
   Qe as executeUpdateCmsItemField,
   je as executeUpdateContentBlock,
   Ze as executeUpdateCurrentCmsFields,
-  V as executeUpdateCustomBlock,
+  W as executeUpdateCustomBlock,
   $e as executeUpdateFooter,
   et as executeUpdateNavigationBar,
   tt as executeUpdateSectionColumnBlock,
-  ue as executeUpdateSiteIdentity,
-  So as extractJsonObject,
-  ho as fallbackBlockSchemas,
+  Se as executeUpdateSiteIdentity,
+  Eo as extractJsonObject,
+  Po as fallbackBlockSchemas,
   ot as fetchEcommerceStatsInputSchema,
   rt as fetchUrlContentInputSchema,
   qt as filterCortexAiCompatibleOpenRouterModels,
-  _e as finishSiteBuildInputSchema,
-  Jr as formatCortexSiteBriefForPrompt,
+  ue as finishSiteBuildInputSchema,
+  jr as formatCortexSiteBriefForPrompt,
   se as formatCortexSiteOverviewForPrompt,
-  To as generateCortexAiAltText,
-  Eo as generateCortexAiSeoMetadata,
-  E as generateCortexAiText,
-  b as generateCortexWidgetDefinition,
+  mo as generateCortexAiAltText,
+  _o as generateCortexAiSeoMetadata,
+  _ as generateCortexAiText,
+  v as generateCortexWidgetDefinition,
   a as generateEditorBlocksRequestSchema,
   i as generateEditorHtmlFragment,
   M as getCortexAiEnvConfig,
-  Fr as getCortexMcpPrompt,
-  Kr as getCortexMcpToolKind,
-  g as getEnvOpenRouterKeyStatus,
+  Gr as getCortexMcpPrompt,
+  Vr as getCortexMcpToolKind,
+  N as getEnvOpenRouterKeyStatus,
   Qt as getHttpStatusCode,
   ft as getMaskedOpenRouterKey,
-  N as getOpenRouterEnvApiKey,
+  g as getOpenRouterEnvApiKey,
   jt as getOpenRouterErrorStatus,
   Lt as getOpenRouterKeyEnvelopeStatus,
   B as getPexelsEnvApiKey,
   le as getSiteOverviewInputSchema,
-  u as getStoredCortexAiModelSelection,
+  S as getStoredCortexAiModelSelection,
   D as getStoredOpenRouterKeyStatus,
   f as getUnsplashEnvApiKey,
   Cr as handleCortexMcpMessage,
-  pr as hashCortexAiMcpToken,
+  Rr as hashCortexAiMcpToken,
   at as insertContentBlockInputSchema,
-  bo as insertCortexWidgetDefinition,
+  vo as insertCortexWidgetDefinition,
   it as isBlockedFetchHost,
   Zt as isCortexAiFreeModelId,
-  zr as isCortexBuildSessionUsable,
-  qr as isCortexSiteBriefComplete,
-  Sr as isJsonRpcNotification,
+  Zr as isCortexBuildSessionUsable,
+  $r as isCortexSiteBriefComplete,
+  Er as isJsonRpcNotification,
   po as isKnownVisionCapableCortexAiModelId,
-  xr as isLocalhostHost,
-  Er as isModernEraMessage,
+  Ir as isLocalhostHost,
+  _r as isModernEraMessage,
   $t as isOpenRouterRateLimitError,
   eo as isOpenRouterRecoverableRoutingError,
-  Po as isValidBlockType,
-  Kt as listCortexAiCompatibleOpenRouterModels,
+  ho as isValidBlockType,
+  Ft as listCortexAiCompatibleOpenRouterModels,
   Y as listCustomBlocksInputSchema,
   Mo as loadCustomBlockDefinitions,
   ct as manageProductVariantsInputSchema,
+  Ar as matchesCortexAiMcpEnvToken,
   nt as maybeTriggerStockPhotoDownloads,
-  Rr as mintCortexAiMcpToken,
+  Or as mintCortexAiMcpToken,
   Ct as navigationItemInputSchema,
   L as normalizeCortexAiAgentSettings,
-  Ir as normalizeCortexAiMcpSettings,
+  dr as normalizeCortexAiMcpSettings,
   xo as normalizeGeneratedAltText,
   to as omitUnsupportedCortexAiModelOptions,
-  Ar as parseBearerToken,
-  St as prepareDeleteCmsItemInputSchema,
-  Et as publishContentDraftInputSchema,
-  me as readCortexBuildSession,
-  Ur as readCortexMcpResource,
-  Te as readCortexSiteBrief,
-  ut as readCurrentCmsItemInputSchema,
-  go as readCustomBlockFields,
+  Pr as parseBearerToken,
+  Et as prepareDeleteCmsItemInputSchema,
+  _t as publishContentDraftInputSchema,
+  hr as readCortexAiMcpEnvToken,
+  Te as readCortexBuildSession,
+  Wr as readCortexMcpResource,
+  me as readCortexSiteBrief,
+  St as readCurrentCmsItemInputSchema,
+  No as readCustomBlockFields,
   te as readDatabaseRecordsInputSchema,
   pe as resetSiteContentInputSchema,
   X as resolveCortexAiAgentSettings,
-  Or as resolveCortexAiMcpSettings,
-  _ as resolveCortexAiOpenRouterCredential,
-  _t as resolveCortexAiStockPhotoProvider,
+  Mr as resolveCortexAiMcpSettings,
+  u as resolveCortexAiOpenRouterCredential,
+  ut as resolveCortexAiStockPhotoProvider,
   st as resolveCortexAiStockPhotoProviders,
   xe as resolveCortexBuildSession,
-  yr as resolveCortexMcpToolName,
+  Yr as resolveCortexMcpToolName,
   lt as rewritePageDraftInputSchema,
   oo as runWithCortexAiModelFallback,
   ro as safeParseCortexAiModelSelection,
-  Qr as safeParseCortexSiteBrief,
+  ea as safeParseCortexSiteBrief,
   Re as saveSiteBriefInputSchema,
-  mt as searchDocumentationInputSchema,
-  Tt as searchStockPhotosInputSchema,
-  No as sectionBlockFallbackSchema,
+  Tt as searchDocumentationInputSchema,
+  mt as searchStockPhotosInputSchema,
+  go as sectionBlockFallbackSchema,
   pt as setContentImagesInputSchema,
-  dr as shouldTrustLocalMcpRequest,
+  Nr as shouldTrustLocalMcpRequest,
   Ie as startSiteBuildInputSchema,
   ao as summarizeCortexAiRoutingError,
-  hr as touchCortexAiMcpToken,
+  gr as touchCortexAiMcpToken,
   xt as translateContentBulkInputSchema,
   Rt as translatePageInputSchema,
-  uo as truncateOnWordBoundary,
+  So as truncateOnWordBoundary,
   It as updateCmsItemFieldInputSchema,
   At as updateContentBlockInputSchema,
   Ot as updateCurrentCmsFieldsInputSchema,
   H as updateCustomBlockInputSchema,
   dt as updateFooterInputSchema,
-  ht as updateNavigationBarInputSchema,
-  Pt as updateSectionColumnBlockInputSchema,
+  Pt as updateNavigationBarInputSchema,
+  ht as updateSectionColumnBlockInputSchema,
   Ae as updateSiteIdentityInputSchema,
   Bo as validateCortexBlockContent,
   qo as validateCortexWidgetDefinitionOutput,
   Do as validateCustomBlockInstanceContent,
   c as validateGeneratedEditorHtmlFragment,
-  Pr as verifyCortexAiMcpToken,
+  Br as verifyCortexAiMcpToken,
   kt as verifyOpenRouterApiKey,
-  bt as verifyPexelsApiKey,
-  vt as verifyUnsplashAccessKey,
-  Zr as z
+  vt as verifyPexelsApiKey,
+  Kt as verifyUnsplashAccessKey,
+  oa as z
 };

package/lib/mcp-tokens.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const c=require("node:crypto"),p="Cortex AI MCP token utilities can only be imported from server-side code.";function l(){if(!(typeof window>"u"))throw new Error(p)}const T="cortex_ai_mcp_settings",u="mcp_access_tokens",i="nbmcp_",A=32,k=8,d=["read","write"],s={allowLocalhostWithoutToken:!0,enabled:!1};function h(e){const t=e&&typeof e=="object"&&!Array.isArray(e)?e:{};return{allowLocalhostWithoutToken:typeof t.allowLocalhostWithoutToken=="boolean"?t.allowLocalhostWithoutToken:s.allowLocalhostWithoutToken,enabled:typeof t.enabled=="boolean"?t.enabled:s.enabled}}async function m(e){if(e)try{const{data:t}=await e.from("site_settings").select("value").eq("key",T).maybeSingle();if(t?.value)return h(t.value)}catch{}return{...s}}function a(e){return l(),c.createHash("sha256").update(e.trim(),"utf8").digest("hex")}function M(){l();const e=`${i}${c.randomBytes(A).toString("base64url")}`;return{token:e,tokenHash:a(e),tokenPrefix:e.slice(0,i.length+k)}}function O(e){const t=e?.trim();if(!t)return null;const o=/^Bearer\s+(.+)$/i.exec(t);return(o?o[1]:t).trim()||null}function y(e){const o=(Array.isArray(e)?e:[]).filter(n=>d.includes(n));return o.length>0?Array.from(new Set(o)):["read"]}async function x(e,t,o=new Date){l();const n=t?.trim();if(!n||n.length<16)return{reason:"malformed",valid:!1};const _=a(n),{data:f,error:E}=await e.from(u).select("id, name, scopes, token_prefix, created_at, created_by, expires_at, last_used_at, revoked_at").eq("token_hash",_).maybeSingle();if(E||!f)return{reason:"unknown",valid:!1};const S=Buffer.from(_,"utf8");if(!c.timingSafeEqual(S,Buffer.from(a(n),"utf8")))return{reason:"unknown",valid:!1};const r=f;return r.revoked_at?{reason:"revoked",valid:!1}:r.expires_at&&new Date(r.expires_at).getTime()<=o.getTime()?{reason:"expired",valid:!1}:{scopes:y(r.scopes),token:r,valid:!0}}async function R(e,t,o=new Date){try{await e.from(u).update({last_used_at:o.toISOString()}).eq("id",t)}catch{}}const v=new Set(["localhost","127.0.0.1","[::1]","::1","0.0.0.0"]);function C(e){const t=e?.trim().toLowerCase();if(!t)return!1;const o=t.startsWith("[")?t.replace(/\]:\d+$/,"]"):t.replace(/:\d+$/,"");return v.has(o)||o.endsWith(".localhost")}function I(e){return!e.settings.allowLocalhostWithoutToken||process.env.NODE_ENV==="production"?!1:C(e.hostHeader)}exports.CORTEX_AI_MCP_SCOPES=d;exports.CORTEX_AI_MCP_SETTINGS_DEFAULTS=s;exports.CORTEX_AI_MCP_SETTINGS_KEY=T;exports.CORTEX_AI_MCP_TOKENS_TABLE=u;exports.CORTEX_AI_MCP_TOKEN_PREFIX=i;exports.hashCortexAiMcpToken=a;exports.isLocalhostHost=C;exports.mintCortexAiMcpToken=M;exports.normalizeCortexAiMcpSettings=h;exports.parseBearerToken=O;exports.resolveCortexAiMcpSettings=m;exports.shouldTrustLocalMcpRequest=I;exports.touchCortexAiMcpToken=R;exports.verifyCortexAiMcpToken=x;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const i=require("node:crypto"),M="Cortex AI MCP token utilities can only be imported from server-side code.";function c(){if(!(typeof window>"u"))throw new Error(M)}const E="cortex_ai_mcp_settings",l="mcp_access_tokens",_="nbmcp_",m=32,k=8,C=["read","write"],a={allowLocalhostWithoutToken:!0,enabled:!1};function d(e){const t=e&&typeof e=="object"&&!Array.isArray(e)?e:{};return{allowLocalhostWithoutToken:typeof t.allowLocalhostWithoutToken=="boolean"?t.allowLocalhostWithoutToken:a.allowLocalhostWithoutToken,enabled:typeof t.enabled=="boolean"?t.enabled:a.enabled}}async function O(e){if(e)try{const{data:t}=await e.from("site_settings").select("value").eq("key",E).maybeSingle();if(t?.value)return d(t.value)}catch{}return{...a}}function r(e){return c(),i.createHash("sha256").update(e.trim(),"utf8").digest("hex")}function R(){c();const e=`${_}${i.randomBytes(m).toString("base64url")}`;return{token:e,tokenHash:r(e),tokenPrefix:e.slice(0,_.length+k)}}function v(e){const t=e?.trim();if(!t)return null;const o=/^Bearer\s+(.+)$/i.exec(t);return(o?o[1]:t).trim()||null}function x(e){const o=(Array.isArray(e)?e:[]).filter(n=>C.includes(n));return o.length>0?Array.from(new Set(o)):["read"]}async function I(e,t,o=new Date){c();const n=t?.trim();if(!n||n.length<16)return{reason:"malformed",valid:!1};const f=r(n),{data:T,error:p}=await e.from(l).select("id, name, scopes, token_prefix, created_at, created_by, expires_at, last_used_at, revoked_at").eq("token_hash",f).maybeSingle();if(p||!T)return{reason:"unknown",valid:!1};const S=Buffer.from(f,"utf8");if(!i.timingSafeEqual(S,Buffer.from(r(n),"utf8")))return{reason:"unknown",valid:!1};const s=T;return s.revoked_at?{reason:"revoked",valid:!1}:s.expires_at&&new Date(s.expires_at).getTime()<=o.getTime()?{reason:"expired",valid:!1}:{scopes:x(s.scopes),token:s,valid:!0}}async function N(e,t,o=new Date){try{await e.from(l).update({last_used_at:o.toISOString()}).eq("id",t)}catch{}}const y=new Set(["localhost","127.0.0.1","[::1]","::1","0.0.0.0"]);function A(e){const t=e?.trim().toLowerCase();if(!t)return!1;const o=t.startsWith("[")?t.replace(/\]:\d+$/,"]"):t.replace(/:\d+$/,"");return y.has(o)||o.endsWith(".localhost")}function P(e){return!e.settings.allowLocalhostWithoutToken||process.env.NODE_ENV==="production"?!1:A(e.hostHeader)}const h="MCP_BEARER_TOKEN",u=32;function g(e=process.env){const t=e[h]?.trim();return!t||t.length<u?null:t}function L(e,t){c();const o=e?.trim(),n=t?.trim();return!o||!n||n.length<u?!1:i.timingSafeEqual(Buffer.from(r(o),"utf8"),Buffer.from(r(n),"utf8"))}exports.CORTEX_AI_MCP_ENV_TOKEN_MIN_LENGTH=u;exports.CORTEX_AI_MCP_ENV_TOKEN_VAR=h;exports.CORTEX_AI_MCP_SCOPES=C;exports.CORTEX_AI_MCP_SETTINGS_DEFAULTS=a;exports.CORTEX_AI_MCP_SETTINGS_KEY=E;exports.CORTEX_AI_MCP_TOKENS_TABLE=l;exports.CORTEX_AI_MCP_TOKEN_PREFIX=_;exports.hashCortexAiMcpToken=r;exports.isLocalhostHost=A;exports.matchesCortexAiMcpEnvToken=L;exports.mintCortexAiMcpToken=R;exports.normalizeCortexAiMcpSettings=d;exports.parseBearerToken=v;exports.readCortexAiMcpEnvToken=g;exports.resolveCortexAiMcpSettings=O;exports.shouldTrustLocalMcpRequest=P;exports.touchCortexAiMcpToken=N;exports.verifyCortexAiMcpToken=I;

package/lib/mcp-tokens.d.ts

@@ -92,4 +92,31 @@ export declare function shouldTrustLocalMcpRequest(params: {
     hostHeader: string | null | undefined;
     settings: CortexAiMcpSettings;
 }): boolean;
+/**
+ * Name of the environment variable that carries an operator-provisioned MCP bearer
+ * token. `create-nextblock --non-interactive` generates one at scaffold time and writes
+ * it to the project's `.env` / `.env.local` (Docker / cloud) together with the agent
+ * client configs, so a coding agent can reach `/api/mcp` before any admin has opened
+ * the dashboard to mint a database token.
+ *
+ * Setting the variable is the opt-in: the endpoint accepts this token even while the
+ * database `enabled` flag is still off (the flag guards *unattended* exposure, and an
+ * operator who put a secret in the environment has attended to it). Everything else
+ * still applies — the Cortex AI license gate, the Origin check, and the scope rules.
+ */
+export declare const CORTEX_AI_MCP_ENV_TOKEN_VAR = "MCP_BEARER_TOKEN";
+/**
+ * Anything shorter is refused outright rather than honoured: a short value is far more
+ * likely to be a placeholder left in an example file than a deliberate secret.
+ */
+export declare const CORTEX_AI_MCP_ENV_TOKEN_MIN_LENGTH = 32;
+/** Read the configured environment token, or null when unset, blank or too short. */
+export declare function readCortexAiMcpEnvToken(env?: Record<string, string | undefined>): string | null;
+/**
+ * Constant-time comparison of a presented bearer credential against the configured
+ * environment token. Both sides are hashed first so the comparison length never
+ * depends on the caller's input, which keeps `timingSafeEqual`'s precondition (equal
+ * buffer lengths) satisfied without leaking the configured token's length.
+ */
+export declare function matchesCortexAiMcpEnvToken(presented: string | null | undefined, configured: string | null | undefined): boolean;
 export {};

package/lib/mcp-tokens.es.js

@@ -1,104 +1,121 @@
-import { createHash as h, randomBytes as T, timingSafeEqual as p } from "node:crypto";
-const m = "Cortex AI MCP token utilities can only be imported from server-side code.";
-function i() {
+import { createHash as E, timingSafeEqual as f, randomBytes as m } from "node:crypto";
+const p = "Cortex AI MCP token utilities can only be imported from server-side code.";
+function a() {
   if (!(typeof window > "u"))
-    throw new Error(m);
+    throw new Error(p);
 }
-const k = "cortex_ai_mcp_settings", f = "mcp_access_tokens", u = "nbmcp_", E = 32, S = 8, A = ["read", "write"], s = {
+const C = "cortex_ai_mcp_settings", _ = "mcp_access_tokens", u = "nbmcp_", A = 32, k = 8, S = ["read", "write"], i = {
   allowLocalhostWithoutToken: !0,
   enabled: !1
 };
-function C(e) {
+function O(e) {
   const t = e && typeof e == "object" && !Array.isArray(e) ? e : {};
   return {
-    allowLocalhostWithoutToken: typeof t.allowLocalhostWithoutToken == "boolean" ? t.allowLocalhostWithoutToken : s.allowLocalhostWithoutToken,
-    enabled: typeof t.enabled == "boolean" ? t.enabled : s.enabled
+    allowLocalhostWithoutToken: typeof t.allowLocalhostWithoutToken == "boolean" ? t.allowLocalhostWithoutToken : i.allowLocalhostWithoutToken,
+    enabled: typeof t.enabled == "boolean" ? t.enabled : i.enabled
   };
 }
-async function x(e) {
+async function R(e) {
   if (e)
     try {
-      const { data: t } = await e.from("site_settings").select("value").eq("key", k).maybeSingle();
+      const { data: t } = await e.from("site_settings").select("value").eq("key", C).maybeSingle();
       if (t?.value)
-        return C(t.value);
+        return O(t.value);
     } catch {
     }
-  return { ...s };
+  return { ...i };
 }
-function a(e) {
-  return i(), h("sha256").update(e.trim(), "utf8").digest("hex");
+function s(e) {
+  return a(), E("sha256").update(e.trim(), "utf8").digest("hex");
 }
-function M() {
-  i();
-  const e = `${u}${T(E).toString(
+function g() {
+  a();
+  const e = `${u}${m(A).toString(
     "base64url"
   )}`;
   return {
     token: e,
-    tokenHash: a(e),
+    tokenHash: s(e),
     tokenPrefix: e.slice(
       0,
-      u.length + S
+      u.length + k
     )
   };
 }
-function g(e) {
+function N(e) {
   const t = e?.trim();
   if (!t)
     return null;
   const o = /^Bearer\s+(.+)$/i.exec(t);
   return (o ? o[1] : t).trim() || null;
 }
-function y(e) {
+function M(e) {
   const o = (Array.isArray(e) ? e : []).filter(
-    (n) => A.includes(n)
+    (n) => S.includes(n)
   );
   return o.length > 0 ? Array.from(new Set(o)) : ["read"];
 }
-async function L(e, t, o = /* @__PURE__ */ new Date()) {
-  i();
+async function I(e, t, o = /* @__PURE__ */ new Date()) {
+  a();
   const n = t?.trim();
   if (!n || n.length < 16)
     return { reason: "malformed", valid: !1 };
-  const c = a(n), { data: l, error: _ } = await e.from(f).select("id, name, scopes, token_prefix, created_at, created_by, expires_at, last_used_at, revoked_at").eq("token_hash", c).maybeSingle();
-  if (_ || !l)
+  const c = s(n), { data: l, error: h } = await e.from(_).select("id, name, scopes, token_prefix, created_at, created_by, expires_at, last_used_at, revoked_at").eq("token_hash", c).maybeSingle();
+  if (h || !l)
     return { reason: "unknown", valid: !1 };
-  const d = Buffer.from(c, "utf8");
-  if (!p(d, Buffer.from(a(n), "utf8")))
+  const T = Buffer.from(c, "utf8");
+  if (!f(T, Buffer.from(s(n), "utf8")))
     return { reason: "unknown", valid: !1 };
   const r = l;
-  return r.revoked_at ? { reason: "revoked", valid: !1 } : r.expires_at && new Date(r.expires_at).getTime() <= o.getTime() ? { reason: "expired", valid: !1 } : { scopes: y(r.scopes), token: r, valid: !0 };
+  return r.revoked_at ? { reason: "revoked", valid: !1 } : r.expires_at && new Date(r.expires_at).getTime() <= o.getTime() ? { reason: "expired", valid: !1 } : { scopes: M(r.scopes), token: r, valid: !0 };
 }
-async function R(e, t, o = /* @__PURE__ */ new Date()) {
+async function L(e, t, o = /* @__PURE__ */ new Date()) {
   try {
-    await e.from(f).update({ last_used_at: o.toISOString() }).eq("id", t);
+    await e.from(_).update({ last_used_at: o.toISOString() }).eq("id", t);
   } catch {
   }
 }
-const w = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]", "::1", "0.0.0.0"]);
-function O(e) {
+const v = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]", "::1", "0.0.0.0"]);
+function y(e) {
   const t = e?.trim().toLowerCase();
   if (!t)
     return !1;
   const o = t.startsWith("[") ? t.replace(/\]:\d+$/, "]") : t.replace(/:\d+$/, "");
-  return w.has(o) || o.endsWith(".localhost");
+  return v.has(o) || o.endsWith(".localhost");
+}
+function P(e) {
+  return !e.settings.allowLocalhostWithoutToken || process.env.NODE_ENV === "production" ? !1 : y(e.hostHeader);
 }
-function b(e) {
-  return !e.settings.allowLocalhostWithoutToken || process.env.NODE_ENV === "production" ? !1 : O(e.hostHeader);
+const w = "MCP_BEARER_TOKEN", d = 32;
+function b(e = process.env) {
+  const t = e[w]?.trim();
+  return !t || t.length < d ? null : t;
+}
+function B(e, t) {
+  a();
+  const o = e?.trim(), n = t?.trim();
+  return !o || !n || n.length < d ? !1 : f(
+    Buffer.from(s(o), "utf8"),
+    Buffer.from(s(n), "utf8")
+  );
 }
 export {
-  A as CORTEX_AI_MCP_SCOPES,
-  s as CORTEX_AI_MCP_SETTINGS_DEFAULTS,
-  k as CORTEX_AI_MCP_SETTINGS_KEY,
-  f as CORTEX_AI_MCP_TOKENS_TABLE,
+  d as CORTEX_AI_MCP_ENV_TOKEN_MIN_LENGTH,
+  w as CORTEX_AI_MCP_ENV_TOKEN_VAR,
+  S as CORTEX_AI_MCP_SCOPES,
+  i as CORTEX_AI_MCP_SETTINGS_DEFAULTS,
+  C as CORTEX_AI_MCP_SETTINGS_KEY,
+  _ as CORTEX_AI_MCP_TOKENS_TABLE,
   u as CORTEX_AI_MCP_TOKEN_PREFIX,
-  a as hashCortexAiMcpToken,
-  O as isLocalhostHost,
-  M as mintCortexAiMcpToken,
-  C as normalizeCortexAiMcpSettings,
-  g as parseBearerToken,
-  x as resolveCortexAiMcpSettings,
-  b as shouldTrustLocalMcpRequest,
-  R as touchCortexAiMcpToken,
-  L as verifyCortexAiMcpToken
+  s as hashCortexAiMcpToken,
+  y as isLocalhostHost,
+  B as matchesCortexAiMcpEnvToken,
+  g as mintCortexAiMcpToken,
+  O as normalizeCortexAiMcpSettings,
+  N as parseBearerToken,
+  b as readCortexAiMcpEnvToken,
+  R as resolveCortexAiMcpSettings,
+  P as shouldTrustLocalMcpRequest,
+  L as touchCortexAiMcpToken,
+  I as verifyCortexAiMcpToken
 };

package/lib/mcp-tool-registry.cjs.js

@@ -1,6 +1,6 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const k=require("./ai-global-agent-tools.cjs.js"),x=require("./block-content-schemas.cjs.js");require("./zod-config.cjs.js");const v=require("zod"),n={create_cms_page:"write",create_cms_post:"write",create_cms_product:"write",create_custom_block:"write",delete_cms_item:"write",delete_custom_block:"write",describe_database_schema:"read",execute_cms_action_plan:"write",execute_database_action_plan:"write",execute_database_mutation:"write",fetch_ecommerce_stats:"read",fetch_url_content:"read",finish_site_build:"write",get_site_overview:"read",insert_content_block:"write",list_custom_blocks:"read",list_media:"read",list_product_categories:"read",list_site_script_revisions:"read",list_site_scripts:"read",list_site_themes:"read",manage_language:"write",manage_product_category:"write",manage_product_variants:"write",manage_site_script:"write",manage_site_theme:"write",prepare_delete_cms_item:"read",publish_content_draft:"write",read_current_cms_item:"read",read_database_records:"read",reset_site_content:"write",revert_site_script:"write",rewrite_page_draft:"write",save_site_brief:"write",search_documentation:"read",search_stock_photos:"read",set_content_images:"write",start_site_build:"write",translate_content_bulk:"write",translate_page:"write",update_cms_item_field:"write",upload_media:"write",update_content_block:"write",update_current_cms_fields:"write",update_custom_block:"write",update_footer:"write",update_global_css:"write",update_navigation_bar:"write",update_section_column_block:"write",update_site_identity:"write"},s={generate_jsonb_layout:{canonical:"rewrite_page_draft",description:"Generate a complete, strictly-validated JSONB block layout and write it into a target page or post. Blocks are normalized and validated against the NextBlock block schema, then staged as a Live Draft on the target record — nothing goes live until an editor publishes the draft, and publishing snapshots a revision so the change is reversible. Use for whole-page builds and redesigns. Alias of `rewrite_page_draft`.",title:"Generate JSONB layout"},get_database_schema:{canonical:"describe_database_schema",description:"Return the current CMS database structure: every table Cortex AI may read or mutate, its columns, primary keys, and whether it is read-only. Pair with `list_custom_blocks` for the active data-defined block definitions and with the `cortex://schema/blocks` resource for the built-in block types. Read-only. Alias of `describe_database_schema`.",title:"Get database schema"},query_site_analytics:{canonical:"fetch_ecommerce_stats",description:"Query quantitative site analytics: revenue, order counts, order-status breakdowns, and top-selling products over a time range. Read-only. For inventory levels and post/page metrics that this report does not cover, use `read_database_records` against the `products`, `product_variants`, `posts`, or `pages` tables. Alias of `fetch_ecommerce_stats`.",title:"Query site analytics"},search_stock_media:{canonical:"search_stock_photos",description:"Search free stock media (Pexels, then Unsplash) for contextually relevant imagery, returning direct image URLs with dimensions, alt text, and photographer attribution. Drop a returned `url` straight into an image block's `external_url` or a section background. Read-only and zero cost. Requires a stock provider key in CMS Settings → Cortex AI. Alias of `search_stock_photos`.",title:"Search stock media"},update_site_navigation:{canonical:"update_navigation_bar",description:'Alter the public site navigation: header menu items and their nested child hierarchy, per locale. Use mode "append" to add links while preserving the existing menu, "update" to rename or re-point one link, and "replace" only when rebuilding the whole menu. For footer links and copyright use `update_footer`. Alias of `update_navigation_bar`.',title:"Update site navigation"}};function h(e){return e in s?s[e].canonical:e in n?e:null}function b(e){const t=h(e);return t?n[t]:null}function c(e,t){const r=b(t);return r?r==="read"?e.length>0:e.includes("write"):!1}function g(e){return e.split("_").map((r,a)=>a===0?r.charAt(0).toUpperCase()+r.slice(1):r).join(" ")}function _(e){const t={additionalProperties:!1,type:"object"};if(!e||typeof e!="object")return t;try{const r=v.z.toJSONSchema(e,{cycles:"ref",io:"input",reused:"inline",target:"draft-2020-12",unrepresentable:"any"});return delete r.$schema,r.type==="object"?r:t}catch{return t}}function l(e){return k.createCortexGlobalAgentTools(e)}function C(e){const t=Object.keys(l(e)),r=Object.keys(n);return{missingFromRegistry:r.filter(a=>!t.includes(a)),unclassified:t.filter(a=>!r.includes(a))}}function T(e){const t=l(e.context),r=[];for(const[a,i]of Object.entries(t))!(a in n)||!c(e.scopes,a)||r.push({description:i.description??`Cortex AI ${g(a)} tool.`,inputSchema:_(i.inputSchema),name:a,title:g(a)});for(const[a,i]of Object.entries(s)){const o=t[i.canonical];!o||!c(e.scopes,a)||r.push({description:i.description,inputSchema:_(o.inputSchema),name:a,title:i.title})}return r.sort((a,i)=>a.name.localeCompare(i.name))}function m(e,t){return{content:[{text:e,type:"text"}],isError:t}}function S(e){return e.issues.map(t=>`${t.path.length>0?t.path.join("."):"(root)"}: ${t.message}`).join("; ")}class p extends Error{constructor(t){super(`Unknown tool: ${t}`),this.name="CortexMcpUnknownToolError"}}class f extends Error{constructor(t){super(`Tool "${t}" requires the "write" scope. This MCP token is read-only — mint a read+write token in CMS Settings → Cortex AI.`),this.name="CortexMcpForbiddenToolError"}}async function M(e){const t=h(e.name);if(!t)throw new p(e.name);if(!c(e.scopes,e.name))throw new f(e.name);const a=l(e.context)[t];if(!a||typeof a.execute!="function")throw new p(e.name);const i=e.args&&typeof e.args=="object"?e.args:{};if(a.inputSchema&&typeof a.inputSchema.safeParse=="function"){const o=a.inputSchema.safeParse(i);if(!o.success)return m(`Invalid arguments for "${e.name}": ${S(o.error)}`,!0)}try{const o=await a.execute(i),u=JSON.stringify(o??{success:!0},null,2),d=o&&typeof o=="object"&&!Array.isArray(o)?o:null,w=d?.success===!1;return{content:[{text:u,type:"text"}],isError:w,...d?{structuredContent:d}:{}}}catch(o){const u=o instanceof Error?o.message:String(o);return m(`Tool "${e.name}" failed: ${u}`,!0)}}const R=[{description:"The CMS database structure Cortex AI can read and mutate: tables, columns, primary keys, and read-only flags.",mimeType:"application/json",name:"database-schema",title:"NextBlock database schema",uri:"cortex://schema/database"},{description:"The built-in NextBlock block types available when composing page, post, and product layouts.",mimeType:"application/json",name:"block-types",title:"NextBlock block types",uri:"cortex://schema/blocks"},{description:"Data-defined custom block definitions registered in this workspace, keyed by the slug used as a block instance `block_type`.",mimeType:"application/json",name:"custom-blocks",title:"NextBlock custom block definitions",uri:"cortex://schema/custom-blocks"}];async function O(e){const t=l(e.context);if(e.uri==="cortex://schema/database"){const r=await t.describe_database_schema?.execute?.({includeReadOnly:!0});return{mimeType:"application/json",text:JSON.stringify(r??{},null,2),uri:e.uri}}if(e.uri==="cortex://schema/blocks")return{mimeType:"application/json",text:JSON.stringify({blockTypes:x.availableCortexAiBlockTypes},null,2),uri:e.uri};if(e.uri==="cortex://schema/custom-blocks"){const r=await t.list_custom_blocks?.execute?.({});return{mimeType:"application/json",text:JSON.stringify(r??{},null,2),uri:e.uri}}return null}const y=[{arguments:[{description:'Everything known about the client and the site they want: business, audience, goals, pages (or "one landing page"), languages, brand, contact details. Leave blank to be asked.',name:"brief",required:!1}],description:"Build (or rebuild) the whole NextBlock site from a brief: remove the sample content, set the identity and theme, create and publish every page, the menus, the footer, and the translations.",name:"build-site",title:"Build the whole site"},{arguments:[{description:"What the page is for, and any brand or tone notes.",name:"brief",required:!0},{description:'Slug of the page or post to rewrite, e.g. "home".',name:"slug",required:!0}],description:"Build or redesign a NextBlock page from a brief, following the section-based layout recipe, and stage it as a reviewable Live Draft.",name:"build-page",title:"Build a NextBlock page"},{arguments:[{description:"Source URL to draw structure and copy from.",name:"url",required:!0},{description:"Slug of the page to write the result into.",name:"slug",required:!0}],description:"Read an external page and rebuild an equivalent NextBlock page from it, reusing its imagery where available.",name:"clone-from-url",title:"Rebuild a page from a URL"},{arguments:[{description:'Target language code, e.g. "fr".',name:"languageCode",required:!0},{description:"Slug of the page or post to translate.",name:"slug",required:!0}],description:"Translate an existing page or post into another language, preserving its layout and imagery.",name:"translate-content",title:"Translate a page or post"}],E={"build-site":e=>["Build the whole NextBlock site for this client.","",e.brief?.trim()?`Brief:
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const k=require("./ai-global-agent-tools.cjs.js"),x=require("./block-content-schemas.cjs.js");require("./zod-config.cjs.js");const v=require("zod"),n={create_cms_page:"write",create_cms_post:"write",create_cms_product:"write",create_custom_block:"write",delete_cms_item:"write",delete_custom_block:"write",describe_database_schema:"read",execute_cms_action_plan:"write",execute_database_action_plan:"write",execute_database_mutation:"write",fetch_ecommerce_stats:"read",fetch_url_content:"read",finish_site_build:"write",get_site_overview:"read",insert_content_block:"write",list_custom_blocks:"read",list_media:"read",list_product_categories:"read",list_site_script_revisions:"read",list_site_scripts:"read",list_site_themes:"read",manage_language:"write",manage_product_category:"write",manage_product_variants:"write",manage_site_script:"write",manage_site_theme:"write",prepare_delete_cms_item:"read",publish_content_draft:"write",read_current_cms_item:"read",read_database_records:"read",reset_site_content:"write",revert_site_script:"write",rewrite_page_draft:"write",save_site_brief:"write",search_documentation:"read",search_stock_photos:"read",set_content_images:"write",start_site_build:"write",translate_content_bulk:"write",translate_page:"write",update_cms_item_field:"write",upload_media:"write",update_content_block:"write",update_current_cms_fields:"write",update_custom_block:"write",update_footer:"write",update_global_css:"write",update_navigation_bar:"write",update_section_column_block:"write",update_site_identity:"write"},s={create_page_layout:{canonical:"create_cms_page",description:'Create a new page from a slug, a title and a strictly typed block layout in one call. Every block is normalized and validated against the NextBlock block schema (built-in types from the `cortex://schema/blocks` resource, or a custom block slug from `list_custom_blocks`) before anything is written; an invalid block rejects the whole call. Pass `status: "published"` to go live immediately, or leave the default draft and publish later. To rewrite an existing page instead, use `generate_jsonb_layout`. Alias of `create_cms_page`.',title:"Create page layout"},generate_jsonb_layout:{canonical:"rewrite_page_draft",description:"Generate a complete, strictly-validated JSONB block layout and write it into a target page or post. Blocks are normalized and validated against the NextBlock block schema, then staged as a Live Draft on the target record — nothing goes live until an editor publishes the draft, and publishing snapshots a revision so the change is reversible. Use for whole-page builds and redesigns. Alias of `rewrite_page_draft`.",title:"Generate JSONB layout"},get_database_schema:{canonical:"describe_database_schema",description:"Return the current CMS database structure: every table Cortex AI may read or mutate, its columns, primary keys, and whether it is read-only. Pair with `list_custom_blocks` for the active data-defined block definitions and with the `cortex://schema/blocks` resource for the built-in block types. Read-only. Alias of `describe_database_schema`.",title:"Get database schema"},query_site_analytics:{canonical:"fetch_ecommerce_stats",description:"Query quantitative site analytics: revenue, order counts, order-status breakdowns, and top-selling products over a time range. Read-only. For inventory levels and post/page metrics that this report does not cover, use `read_database_records` against the `products`, `product_variants`, `posts`, or `pages` tables. Alias of `fetch_ecommerce_stats`.",title:"Query site analytics"},search_stock_media:{canonical:"search_stock_photos",description:"Search free stock media (Pexels, then Unsplash) for contextually relevant imagery, returning direct image URLs with dimensions, alt text, and photographer attribution. Drop a returned `url` straight into an image block's `external_url` or a section background. Read-only and zero cost. Requires a stock provider key in CMS Settings → Cortex AI. Alias of `search_stock_photos`.",title:"Search stock media"},update_site_navigation:{canonical:"update_navigation_bar",description:'Alter the public site navigation: header menu items and their nested child hierarchy, per locale. Use mode "append" to add links while preserving the existing menu, "update" to rename or re-point one link, and "replace" only when rebuilding the whole menu. For footer links and copyright use `update_footer`. Alias of `update_navigation_bar`.',title:"Update site navigation"}};function h(e){return e in s?s[e].canonical:e in n?e:null}function b(e){const t=h(e);return t?n[t]:null}function c(e,t){const a=b(t);return a?a==="read"?e.length>0:e.includes("write"):!1}function g(e){return e.split("_").map((a,r)=>r===0?a.charAt(0).toUpperCase()+a.slice(1):a).join(" ")}function _(e){const t={additionalProperties:!1,type:"object"};if(!e||typeof e!="object")return t;try{const a=v.z.toJSONSchema(e,{cycles:"ref",io:"input",reused:"inline",target:"draft-2020-12",unrepresentable:"any"});return delete a.$schema,a.type==="object"?a:t}catch{return t}}function l(e){return k.createCortexGlobalAgentTools(e)}function C(e){const t=Object.keys(l(e)),a=Object.keys(n);return{missingFromRegistry:a.filter(r=>!t.includes(r)),unclassified:t.filter(r=>!a.includes(r))}}function T(e){const t=l(e.context),a=[];for(const[r,i]of Object.entries(t))!(r in n)||!c(e.scopes,r)||a.push({description:i.description??`Cortex AI ${g(r)} tool.`,inputSchema:_(i.inputSchema),name:r,title:g(r)});for(const[r,i]of Object.entries(s)){const o=t[i.canonical];!o||!c(e.scopes,r)||a.push({description:i.description,inputSchema:_(o.inputSchema),name:r,title:i.title})}return a.sort((r,i)=>r.name.localeCompare(i.name))}function m(e,t){return{content:[{text:e,type:"text"}],isError:t}}function S(e){return e.issues.map(t=>`${t.path.length>0?t.path.join("."):"(root)"}: ${t.message}`).join("; ")}class p extends Error{constructor(t){super(`Unknown tool: ${t}`),this.name="CortexMcpUnknownToolError"}}class f extends Error{constructor(t){super(`Tool "${t}" requires the "write" scope. This MCP token is read-only — mint a read+write token in CMS Settings → Cortex AI.`),this.name="CortexMcpForbiddenToolError"}}async function M(e){const t=h(e.name);if(!t)throw new p(e.name);if(!c(e.scopes,e.name))throw new f(e.name);const r=l(e.context)[t];if(!r||typeof r.execute!="function")throw new p(e.name);const i=e.args&&typeof e.args=="object"?e.args:{};if(r.inputSchema&&typeof r.inputSchema.safeParse=="function"){const o=r.inputSchema.safeParse(i);if(!o.success)return m(`Invalid arguments for "${e.name}": ${S(o.error)}`,!0)}try{const o=await r.execute(i),u=JSON.stringify(o??{success:!0},null,2),d=o&&typeof o=="object"&&!Array.isArray(o)?o:null,w=d?.success===!1;return{content:[{text:u,type:"text"}],isError:w,...d?{structuredContent:d}:{}}}catch(o){const u=o instanceof Error?o.message:String(o);return m(`Tool "${e.name}" failed: ${u}`,!0)}}const R=[{description:"The CMS database structure Cortex AI can read and mutate: tables, columns, primary keys, and read-only flags.",mimeType:"application/json",name:"database-schema",title:"NextBlock database schema",uri:"cortex://schema/database"},{description:"The built-in NextBlock block types available when composing page, post, and product layouts.",mimeType:"application/json",name:"block-types",title:"NextBlock block types",uri:"cortex://schema/blocks"},{description:"Data-defined custom block definitions registered in this workspace, keyed by the slug used as a block instance `block_type`.",mimeType:"application/json",name:"custom-blocks",title:"NextBlock custom block definitions",uri:"cortex://schema/custom-blocks"}];async function O(e){const t=l(e.context);if(e.uri==="cortex://schema/database"){const a=await t.describe_database_schema?.execute?.({includeReadOnly:!0});return{mimeType:"application/json",text:JSON.stringify(a??{},null,2),uri:e.uri}}if(e.uri==="cortex://schema/blocks")return{mimeType:"application/json",text:JSON.stringify({blockTypes:x.availableCortexAiBlockTypes},null,2),uri:e.uri};if(e.uri==="cortex://schema/custom-blocks"){const a=await t.list_custom_blocks?.execute?.({});return{mimeType:"application/json",text:JSON.stringify(a??{},null,2),uri:e.uri}}return null}const y=[{arguments:[{description:'Everything known about the client and the site they want: business, audience, goals, pages (or "one landing page"), languages, brand, contact details. Leave blank to be asked.',name:"brief",required:!1}],description:"Build (or rebuild) the whole NextBlock site from a brief: remove the sample content, set the identity and theme, create and publish every page, the menus, the footer, and the translations.",name:"build-site",title:"Build the whole site"},{arguments:[{description:"What the page is for, and any brand or tone notes.",name:"brief",required:!0},{description:'Slug of the page or post to rewrite, e.g. "home".',name:"slug",required:!0}],description:"Build or redesign a NextBlock page from a brief, following the section-based layout recipe, and stage it as a reviewable Live Draft.",name:"build-page",title:"Build a NextBlock page"},{arguments:[{description:"Source URL to draw structure and copy from.",name:"url",required:!0},{description:"Slug of the page to write the result into.",name:"slug",required:!0}],description:"Read an external page and rebuild an equivalent NextBlock page from it, reusing its imagery where available.",name:"clone-from-url",title:"Rebuild a page from a URL"},{arguments:[{description:'Target language code, e.g. "fr".',name:"languageCode",required:!0},{description:"Slug of the page or post to translate.",name:"slug",required:!0}],description:"Translate an existing page or post into another language, preserving its layout and imagery.",name:"translate-content",title:"Translate a page or post"}],j={"build-site":e=>["Build the whole NextBlock site for this client.","",e.brief?.trim()?`Brief:
 ${e.brief}`:"A site brief may already be saved (get_site_overview returns it under `brief`): if it is, use it and skip the questions; otherwise ask, in one short numbered list, about the business and what it does, the audience and the one action visitors should take, the site shape (one landing page or which pages), the languages, brand colours and tone, contact details, and whether existing content is kept.","","Process:","1. Call get_site_overview to see what exists, the active languages, and whether the NextBlock demo content is still present. Record what you know with save_site_brief.","2. Present the plan (what is removed, every page with its sections, menus, footer, theme, languages) and call start_site_build with `summary`, `brief`, and `reset` (keepLanguages = the languages wanted) unless existing content is kept. Over MCP the host approves the call; there is no chat confirmation.",'3. Build: update_site_identity (title, description, keywords, copyright, and social_image for the share preview of pages without a feature image); manage_language as needed; manage_site_theme with the brand colours; search_stock_media for imagery when available; rewrite the empty "home" page with generate_jsonb_layout then publish_content_draft; create_cms_page (status "published") for every other page; update_site_navigation (mode "replace") and update_footer for every language; translate_content_bulk for each extra language.',"4. Call finish_site_build with a summary, then report every page with its URL.","Write real copy from the brief, never placeholders. Every page must exist in every active language.","Conventions: mark each page's opening section is_hero:true (priority image loading, centred content); slider:true with a slides array makes a rotating banner; NEVER set feature_image_id on the home page or on a page that opens with a hero section — on a page it renders a full-width title banner above the blocks — but give every post one."].join(`
 `),"build-page":e=>[`Build the NextBlock page with slug "${e.slug??"<slug>"}" from this brief:`,"",e.brief??"<brief>","","Process:","1. Call get_database_schema and read_current_cms_item (or read_database_records on `pages`) to ground yourself in what exists.",'2. Compose the page from `section` blocks: one column entry per grid track, the first section a hero (is_hero:true), alternating none / theme:"muted" / theme:"primary" backgrounds for rhythm. Use discrete heading blocks rather than <h2> inside text HTML. Do not set feature_image_id on a page that opens with a hero: on a page it renders a full-width title banner above the blocks.',"3. Call search_stock_media for real photography; copy each photo's attribution fields onto the image block.","4. Write the result with generate_jsonb_layout. It stages a Live Draft — tell the user to preview and publish it."].join(`
 `),"clone-from-url":e=>[`Rebuild the NextBlock page "${e.slug??"<slug>"}" based on ${e.url??"<url>"}.`,"","Process:","1. Call fetch_url_content on the URL first. Use its headings, text, and mainImage — never invent an image URL.","2. Map the source structure onto NextBlock `section` blocks; do not copy its markup verbatim.","3. Write the result with generate_jsonb_layout so it lands as a reviewable Live Draft."].join(`
 `),"translate-content":e=>[`Translate the page or post "${e.slug??"<slug>"}" into "${e.languageCode??"<languageCode>"}".`,"","Use the translate_page tool: it copies layout, structure, and imagery automatically and links the copy to the original translation group. Supply only the text translations — every visible string, including headings, paragraph text, button labels, image alt text, and captions. Do not rebuild the layout and do not search for new imagery."].join(`
-`)};function N(e){const t=y.find(a=>a.name===e.name),r=E[e.name];return!t||!r?null:{description:t.description,messages:[{content:{text:r(e.args??{}),type:"text"},role:"user"}]}}exports.CORTEX_MCP_PROMPTS=y;exports.CORTEX_MCP_RESOURCES=R;exports.CORTEX_MCP_TOOL_ALIASES=s;exports.CORTEX_MCP_TOOL_KINDS=n;exports.CortexMcpForbiddenToolError=f;exports.CortexMcpUnknownToolError=p;exports.assertCortexMcpToolCoverage=C;exports.buildCortexMcpToolDefinitions=T;exports.callCortexMcpTool=M;exports.cortexMcpScopesAllow=c;exports.getCortexMcpPrompt=N;exports.getCortexMcpToolKind=b;exports.readCortexMcpResource=O;exports.resolveCortexMcpToolName=h;
+`)};function E(e){const t=y.find(r=>r.name===e.name),a=j[e.name];return!t||!a?null:{description:t.description,messages:[{content:{text:a(e.args??{}),type:"text"},role:"user"}]}}exports.CORTEX_MCP_PROMPTS=y;exports.CORTEX_MCP_RESOURCES=R;exports.CORTEX_MCP_TOOL_ALIASES=s;exports.CORTEX_MCP_TOOL_KINDS=n;exports.CortexMcpForbiddenToolError=f;exports.CortexMcpUnknownToolError=p;exports.assertCortexMcpToolCoverage=C;exports.buildCortexMcpToolDefinitions=T;exports.callCortexMcpTool=M;exports.cortexMcpScopesAllow=c;exports.getCortexMcpPrompt=E;exports.getCortexMcpToolKind=b;exports.readCortexMcpResource=O;exports.resolveCortexMcpToolName=h;

package/lib/mcp-tool-registry.d.ts

@@ -89,6 +89,11 @@ export type CortexMcpCanonicalToolName = keyof typeof CORTEX_MCP_TOOL_KINDS;
  * in-app vocabulary.
  */
 export declare const CORTEX_MCP_TOOL_ALIASES: {
+    readonly create_page_layout: {
+        readonly canonical: "create_cms_page";
+        readonly description: "Create a new page from a slug, a title and a strictly typed block layout in one call. Every block is normalized and validated against the NextBlock block schema (built-in types from the `cortex://schema/blocks` resource, or a custom block slug from `list_custom_blocks`) before anything is written; an invalid block rejects the whole call. Pass `status: \"published\"` to go live immediately, or leave the default draft and publish later. To rewrite an existing page instead, use `generate_jsonb_layout`. Alias of `create_cms_page`.";
+        readonly title: "Create page layout";
+    };
     readonly generate_jsonb_layout: {
         readonly canonical: "rewrite_page_draft";
         readonly description: "Generate a complete, strictly-validated JSONB block layout and write it into a target page or post. Blocks are normalized and validated against the NextBlock block schema, then staged as a Live Draft on the target record — nothing goes live until an editor publishes the draft, and publishing snapshots a revision so the change is reversible. Use for whole-page builds and redesigns. Alias of `rewrite_page_draft`.";

package/lib/mcp-tool-registry.es.js

@@ -54,6 +54,11 @@ const n = {
   update_section_column_block: "write",
   update_site_identity: "write"
 }, u = {
+  create_page_layout: {
+    canonical: "create_cms_page",
+    description: 'Create a new page from a slug, a title and a strictly typed block layout in one call. Every block is normalized and validated against the NextBlock block schema (built-in types from the `cortex://schema/blocks` resource, or a custom block slug from `list_custom_blocks`) before anything is written; an invalid block rejects the whole call. Pass `status: "published"` to go live immediately, or leave the default draft and publish later. To rewrite an existing page instead, use `generate_jsonb_layout`. Alias of `create_cms_page`.',
+    title: "Create page layout"
+  },
   generate_jsonb_layout: {
     canonical: "rewrite_page_draft",
     description: "Generate a complete, strictly-validated JSONB block layout and write it into a target page or post. Blocks are normalized and validated against the NextBlock block schema, then staged as a Live Draft on the target record — nothing goes live until an editor publishes the draft, and publishing snapshots a revision so the change is reversible. Use for whole-page builds and redesigns. Alias of `rewrite_page_draft`.",
@@ -114,14 +119,14 @@ function h(e) {
 function s(e) {
   return f(e);
 }
-function M(e) {
+function N(e) {
   const t = Object.keys(s(e)), a = Object.keys(n);
   return {
     missingFromRegistry: a.filter((r) => !t.includes(r)),
     unclassified: t.filter((r) => !a.includes(r))
   };
 }
-function N(e) {
+function M(e) {
   const t = s(e.context), a = [];
   for (const [r, o] of Object.entries(t))
     !(r in n) || !d(e.scopes, r) || a.push({
@@ -338,8 +343,8 @@ export {
   n as CORTEX_MCP_TOOL_KINDS,
   x as CortexMcpForbiddenToolError,
   m as CortexMcpUnknownToolError,
-  M as assertCortexMcpToolCoverage,
-  N as buildCortexMcpToolDefinitions,
+  N as assertCortexMcpToolCoverage,
+  M as buildCortexMcpToolDefinitions,
   O as callCortexMcpTool,
   d as cortexMcpScopesAllow,
   P as getCortexMcpPrompt,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextblock-cms/cortex",
-  "version": "0.18.8",
+  "version": "0.19.2",
   "license": "AGPL-3.0-or-later",
   "publishConfig": {
     "access": "public"
@@ -28,9 +28,9 @@
   },
   "dependencies": {
     "@ai-sdk/openai-compatible": "^2.0.42",
-    "@nextblock-cms/db": "^0.18.8",
-    "@nextblock-cms/ecommerce": "npm:@nextblock-cms/ecom@^0.18.8",
-    "@nextblock-cms/utils": "^0.18.8",
+    "@nextblock-cms/db": "^0.19.2",
+    "@nextblock-cms/ecommerce": "npm:@nextblock-cms/ecom@^0.19.2",
+    "@nextblock-cms/utils": "^0.19.2",
     "ai": "^6.0.170",
     "zod": "^4.3.6"
   },