@nextblock-cms/cortex 0.20.3 → 0.21.1

package/lib/site-brief.cjs

@@ -0,0 +1,2 @@
+require("./zod-config.cjs");let e=require("zod");var t=`cortex_ai_site_brief`,n=`cortex_ai_build_session`,r=e.z.string().trim().min(2).max(10),i=e.z.strictObject({purpose:e.z.string().trim().max(600).optional().describe(`What this page is for and what a visitor should do there.`),sections:e.z.array(e.z.string().trim().min(1).max(200)).max(20).optional().describe(`Planned sections, top to bottom, e.g. ["hero", "services", "testimonials", "contact form"].`),slug:e.z.string().trim().min(1).max(120).describe(`URL slug in the primary language, e.g. "home", "services", "contact".`),title:e.z.string().trim().min(1).max(200)}),a=e.z.strictObject({accent_color:e.z.string().trim().max(40).optional(),color_scheme:e.z.enum([`light`,`dark`]).optional().describe(`Overall look the client prefers.`),font_style:e.z.string().trim().max(120).optional().describe(`e.g. "clean sans-serif", "elegant serif".`),logo_notes:e.z.string().trim().max(600).optional().describe(`Whether they have a logo, where it is, or what to do meanwhile.`),primary_color:e.z.string().trim().max(40).optional().describe(`Hex or plain colour name, e.g. "#1e6f5c" or "forest green".`),secondary_color:e.z.string().trim().max(40).optional(),style_keywords:e.z.array(e.z.string().trim().min(1).max(60)).max(12).optional().describe(`e.g. ["minimal", "warm", "premium"].`),tone:e.z.string().trim().max(200).optional().describe(`Voice for the copy, e.g. "friendly and plain-spoken".`)}).partial(),o=e.z.strictObject({address:e.z.string().trim().max(400).optional(),email:e.z.string().trim().max(200).optional(),hours:e.z.string().trim().max(400).optional(),phone:e.z.string().trim().max(60).optional(),social:e.z.array(e.z.strictObject({platform:e.z.string().trim().min(1).max(60),url:e.z.string().trim().min(1).max(2048)})).max(12).optional()}).partial(),s=e.z.strictObject({audience:e.z.string().trim().max(1e3).optional().describe(`Who the site is for.`),brand:a.optional(),business_name:e.z.string().trim().min(1).max(160),contact:o.optional(),description:e.z.string().trim().max(3e3).optional().describe(`What the business does, in the client's own words where possible.`),ecommerce:e.z.strictObject({enabled:e.z.boolean().default(!1),products_summary:e.z.string().trim().max(1e3).optional()}).optional(),goals:e.z.array(e.z.string().trim().min(1).max(300)).max(10).optional().describe(`What the site must achieve, e.g. ["get quote requests", "show the menu"].`),keep_existing_content:e.z.boolean().default(!1).describe(`true when the client wants existing pages/posts kept rather than replaced.`),languages:e.z.array(r).min(1).max(10).default([`en`]).describe(`Locale codes the public site must offer, primary first.`),notes:e.z.string().trim().max(4e3).optional().describe(`Anything else the client said that matters.`),pages:e.z.array(i).max(30).default([]).describe(`The pages to build. A one-page landing site is a single "home" entry.`),primary_language:r.default(`en`),site_type:e.z.enum([`landing-page`,`multi-page`,`blog`,`store`,`portfolio`,`other`]).default(`multi-page`),status:e.z.enum([`draft`,`confirmed`,`built`]).default(`draft`).describe(`draft while interviewing, confirmed once the client approved the plan, built when the build finished.`),tagline:e.z.string().trim().max(200).optional(),updated_at:e.z.string().max(80).optional()}),c=s.partial(),l=e.z.strictObject({actorUserId:e.z.string().min(1),createdAt:e.z.string().min(1),expiresAt:e.z.string().min(1),id:e.z.string().min(1),summary:e.z.string().max(4e3)});function u(e){let t=s.safeParse(e);return t.success?t.data:null}function d(e){return!!(e&&e.business_name.trim()&&e.description?.trim())}function f(e,t){if(!e||!t.actorUserId||e.actorUserId!==t.actorUserId)return!1;let n=Date.parse(e.expiresAt),r=(t.now??new Date).getTime();return Number.isFinite(n)&&n>r}function p(e){let t=[`Business: ${e.business_name}${e.tagline?` — ${e.tagline}`:``}`];e.description&&t.push(`What they do: ${e.description}`),e.audience&&t.push(`Audience: ${e.audience}`),e.goals?.length&&t.push(`Goals: ${e.goals.join(`; `)}`),t.push(`Site type: ${e.site_type}. Languages: ${e.languages.join(`, `)} (primary ${e.primary_language}).`),e.pages.length>0&&t.push(`Pages: ${e.pages.map(e=>`${e.title} (/${e.slug})${e.purpose?` — ${e.purpose}`:``}`).join(`; `)}`);let n=e.brand;if(n&&Object.keys(n).length>0){let e=[n.primary_color?`primary ${n.primary_color}`:null,n.secondary_color?`secondary ${n.secondary_color}`:null,n.accent_color?`accent ${n.accent_color}`:null,n.color_scheme?`${n.color_scheme} scheme`:null,n.font_style?`fonts: ${n.font_style}`:null,n.tone?`tone: ${n.tone}`:null,n.style_keywords?.length?`style: ${n.style_keywords.join(`, `)}`:null,n.logo_notes?`logo: ${n.logo_notes}`:null].filter(Boolean);e.length>0&&t.push(`Brand: ${e.join(`; `)}`)}let r=e.contact;if(r&&Object.keys(r).length>0){let e=[r.email?`email ${r.email}`:null,r.phone?`phone ${r.phone}`:null,r.address?`address ${r.address}`:null,r.hours?`hours ${r.hours}`:null,r.social?.length?`social: ${r.social.map(e=>`${e.platform} ${e.url}`).join(`, `)}`:null].filter(Boolean);e.length>0&&t.push(`Contact: ${e.join(`; `)}`)}return e.ecommerce?.enabled&&t.push(`Ecommerce: yes${e.ecommerce.products_summary?` — ${e.ecommerce.products_summary}`:``}`),e.keep_existing_content&&t.push(`Keep existing content: yes (do not wipe pages or posts).`),e.notes&&t.push(`Notes: ${e.notes}`),t.push(`Brief status: ${e.status}.`),t.join(`
+`)}exports.CORTEX_AI_BUILD_SESSION_SETTING_KEY=n,exports.CORTEX_AI_SITE_BRIEF_SETTING_KEY=t,exports.cortexBuildSessionSchema=l,exports.cortexSiteBriefInputSchema=c,exports.cortexSiteBriefSchema=s,exports.formatCortexSiteBriefForPrompt=p,exports.isCortexBuildSessionUsable=f,exports.isCortexSiteBriefComplete=d,exports.safeParseCortexSiteBrief=u;

package/lib/site-brief.es.js

@@ -1,113 +1,107 @@
-import "./zod-config.es.js";
-import { z as e } from "zod";
-const g = "cortex_ai_site_brief", h = "cortex_ai_build_session", r = e.string().trim().min(2).max(10), c = e.strictObject({
-  purpose: e.string().trim().max(600).optional().describe("What this page is for and what a visitor should do there."),
-  sections: e.array(e.string().trim().min(1).max(200)).max(20).optional().describe('Planned sections, top to bottom, e.g. ["hero", "services", "testimonials", "contact form"].'),
-  slug: e.string().trim().min(1).max(120).describe('URL slug in the primary language, e.g. "home", "services", "contact".'),
-  title: e.string().trim().min(1).max(200)
-}), m = e.strictObject({
-  accent_color: e.string().trim().max(40).optional(),
-  color_scheme: e.enum(["light", "dark"]).optional().describe("Overall look the client prefers."),
-  font_style: e.string().trim().max(120).optional().describe('e.g. "clean sans-serif", "elegant serif".'),
-  logo_notes: e.string().trim().max(600).optional().describe("Whether they have a logo, where it is, or what to do meanwhile."),
-  primary_color: e.string().trim().max(40).optional().describe('Hex or plain colour name, e.g. "#1e6f5c" or "forest green".'),
-  secondary_color: e.string().trim().max(40).optional(),
-  style_keywords: e.array(e.string().trim().min(1).max(60)).max(12).optional().describe('e.g. ["minimal", "warm", "premium"].'),
-  tone: e.string().trim().max(200).optional().describe('Voice for the copy, e.g. "friendly and plain-spoken".')
-}).partial(), p = e.strictObject({
-  address: e.string().trim().max(400).optional(),
-  email: e.string().trim().max(200).optional(),
-  hours: e.string().trim().max(400).optional(),
-  phone: e.string().trim().max(60).optional(),
-  social: e.array(
-    e.strictObject({
-      platform: e.string().trim().min(1).max(60),
-      url: e.string().trim().min(1).max(2048)
-    })
-  ).max(12).optional()
-}).partial(), l = e.strictObject({
-  audience: e.string().trim().max(1e3).optional().describe("Who the site is for."),
-  brand: m.optional(),
-  business_name: e.string().trim().min(1).max(160),
-  contact: p.optional(),
-  description: e.string().trim().max(3e3).optional().describe("What the business does, in the client's own words where possible."),
-  ecommerce: e.strictObject({
-    enabled: e.boolean().default(!1),
-    products_summary: e.string().trim().max(1e3).optional()
-  }).optional(),
-  goals: e.array(e.string().trim().min(1).max(300)).max(10).optional().describe('What the site must achieve, e.g. ["get quote requests", "show the menu"].'),
-  keep_existing_content: e.boolean().default(!1).describe("true when the client wants existing pages/posts kept rather than replaced."),
-  languages: e.array(r).min(1).max(10).default(["en"]).describe("Locale codes the public site must offer, primary first."),
-  notes: e.string().trim().max(4e3).optional().describe("Anything else the client said that matters."),
-  pages: e.array(c).max(30).default([]).describe('The pages to build. A one-page landing site is a single "home" entry.'),
-  primary_language: r.default("en"),
-  site_type: e.enum(["landing-page", "multi-page", "blog", "store", "portfolio", "other"]).default("multi-page"),
-  status: e.enum(["draft", "confirmed", "built"]).default("draft").describe("draft while interviewing, confirmed once the client approved the plan, built when the build finished."),
-  tagline: e.string().trim().max(200).optional(),
-  updated_at: e.string().max(80).optional()
-}), _ = l.partial(), x = e.strictObject({
-  actorUserId: e.string().min(1),
-  createdAt: e.string().min(1),
-  expiresAt: e.string().min(1),
-  id: e.string().min(1),
-  summary: e.string().max(4e3)
+import { z as e } from "./zod-config.es.js";
+//#region src/lib/site-brief.ts
+var t = "cortex_ai_site_brief", n = "cortex_ai_build_session", r = e.string().trim().min(2).max(10), i = e.strictObject({
+	purpose: e.string().trim().max(600).optional().describe("What this page is for and what a visitor should do there."),
+	sections: e.array(e.string().trim().min(1).max(200)).max(20).optional().describe("Planned sections, top to bottom, e.g. [\"hero\", \"services\", \"testimonials\", \"contact form\"]."),
+	slug: e.string().trim().min(1).max(120).describe("URL slug in the primary language, e.g. \"home\", \"services\", \"contact\"."),
+	title: e.string().trim().min(1).max(200)
+}), a = e.strictObject({
+	accent_color: e.string().trim().max(40).optional(),
+	color_scheme: e.enum(["light", "dark"]).optional().describe("Overall look the client prefers."),
+	font_style: e.string().trim().max(120).optional().describe("e.g. \"clean sans-serif\", \"elegant serif\"."),
+	logo_notes: e.string().trim().max(600).optional().describe("Whether they have a logo, where it is, or what to do meanwhile."),
+	primary_color: e.string().trim().max(40).optional().describe("Hex or plain colour name, e.g. \"#1e6f5c\" or \"forest green\"."),
+	secondary_color: e.string().trim().max(40).optional(),
+	style_keywords: e.array(e.string().trim().min(1).max(60)).max(12).optional().describe("e.g. [\"minimal\", \"warm\", \"premium\"]."),
+	tone: e.string().trim().max(200).optional().describe("Voice for the copy, e.g. \"friendly and plain-spoken\".")
+}).partial(), o = e.strictObject({
+	address: e.string().trim().max(400).optional(),
+	email: e.string().trim().max(200).optional(),
+	hours: e.string().trim().max(400).optional(),
+	phone: e.string().trim().max(60).optional(),
+	social: e.array(e.strictObject({
+		platform: e.string().trim().min(1).max(60),
+		url: e.string().trim().min(1).max(2048)
+	})).max(12).optional()
+}).partial(), s = e.strictObject({
+	audience: e.string().trim().max(1e3).optional().describe("Who the site is for."),
+	brand: a.optional(),
+	business_name: e.string().trim().min(1).max(160),
+	contact: o.optional(),
+	description: e.string().trim().max(3e3).optional().describe("What the business does, in the client's own words where possible."),
+	ecommerce: e.strictObject({
+		enabled: e.boolean().default(!1),
+		products_summary: e.string().trim().max(1e3).optional()
+	}).optional(),
+	goals: e.array(e.string().trim().min(1).max(300)).max(10).optional().describe("What the site must achieve, e.g. [\"get quote requests\", \"show the menu\"]."),
+	keep_existing_content: e.boolean().default(!1).describe("true when the client wants existing pages/posts kept rather than replaced."),
+	languages: e.array(r).min(1).max(10).default(["en"]).describe("Locale codes the public site must offer, primary first."),
+	notes: e.string().trim().max(4e3).optional().describe("Anything else the client said that matters."),
+	pages: e.array(i).max(30).default([]).describe("The pages to build. A one-page landing site is a single \"home\" entry."),
+	primary_language: r.default("en"),
+	site_type: e.enum([
+		"landing-page",
+		"multi-page",
+		"blog",
+		"store",
+		"portfolio",
+		"other"
+	]).default("multi-page"),
+	status: e.enum([
+		"draft",
+		"confirmed",
+		"built"
+	]).default("draft").describe("draft while interviewing, confirmed once the client approved the plan, built when the build finished."),
+	tagline: e.string().trim().max(200).optional(),
+	updated_at: e.string().max(80).optional()
+}), c = s.partial(), l = e.strictObject({
+	actorUserId: e.string().min(1),
+	createdAt: e.string().min(1),
+	expiresAt: e.string().min(1),
+	id: e.string().min(1),
+	summary: e.string().max(4e3)
 });
-function y(t) {
-  const o = l.safeParse(t);
-  return o.success ? o.data : null;
+function u(e) {
+	let t = s.safeParse(e);
+	return t.success ? t.data : null;
 }
-function f(t) {
-  return !!(t && t.business_name.trim() && t.description?.trim());
+function d(e) {
+	return !!(e && e.business_name.trim() && e.description?.trim());
 }
-function $(t, o) {
-  if (!t || !o.actorUserId || t.actorUserId !== o.actorUserId)
-    return !1;
-  const i = Date.parse(t.expiresAt), n = (o.now ?? /* @__PURE__ */ new Date()).getTime();
-  return Number.isFinite(i) && i > n;
+function f(e, t) {
+	if (!e || !t.actorUserId || e.actorUserId !== t.actorUserId) return !1;
+	let n = Date.parse(e.expiresAt), r = (t.now ?? /* @__PURE__ */ new Date()).getTime();
+	return Number.isFinite(n) && n > r;
 }
-function b(t) {
-  const o = [
-    `Business: ${t.business_name}${t.tagline ? ` — ${t.tagline}` : ""}`
-  ];
-  t.description && o.push(`What they do: ${t.description}`), t.audience && o.push(`Audience: ${t.audience}`), t.goals?.length && o.push(`Goals: ${t.goals.join("; ")}`), o.push(`Site type: ${t.site_type}. Languages: ${t.languages.join(", ")} (primary ${t.primary_language}).`), t.pages.length > 0 && o.push(
-    `Pages: ${t.pages.map((s) => `${s.title} (/${s.slug})${s.purpose ? ` — ${s.purpose}` : ""}`).join("; ")}`
-  );
-  const i = t.brand;
-  if (i && Object.keys(i).length > 0) {
-    const s = [
-      i.primary_color ? `primary ${i.primary_color}` : null,
-      i.secondary_color ? `secondary ${i.secondary_color}` : null,
-      i.accent_color ? `accent ${i.accent_color}` : null,
-      i.color_scheme ? `${i.color_scheme} scheme` : null,
-      i.font_style ? `fonts: ${i.font_style}` : null,
-      i.tone ? `tone: ${i.tone}` : null,
-      i.style_keywords?.length ? `style: ${i.style_keywords.join(", ")}` : null,
-      i.logo_notes ? `logo: ${i.logo_notes}` : null
-    ].filter(Boolean);
-    s.length > 0 && o.push(`Brand: ${s.join("; ")}`);
-  }
-  const n = t.contact;
-  if (n && Object.keys(n).length > 0) {
-    const s = [
-      n.email ? `email ${n.email}` : null,
-      n.phone ? `phone ${n.phone}` : null,
-      n.address ? `address ${n.address}` : null,
-      n.hours ? `hours ${n.hours}` : null,
-      n.social?.length ? `social: ${n.social.map((a) => `${a.platform} ${a.url}`).join(", ")}` : null
-    ].filter(Boolean);
-    s.length > 0 && o.push(`Contact: ${s.join("; ")}`);
-  }
-  return t.ecommerce?.enabled && o.push(`Ecommerce: yes${t.ecommerce.products_summary ? ` — ${t.ecommerce.products_summary}` : ""}`), t.keep_existing_content && o.push("Keep existing content: yes (do not wipe pages or posts)."), t.notes && o.push(`Notes: ${t.notes}`), o.push(`Brief status: ${t.status}.`), o.join(`
-`);
+function p(e) {
+	let t = [`Business: ${e.business_name}${e.tagline ? ` — ${e.tagline}` : ""}`];
+	e.description && t.push(`What they do: ${e.description}`), e.audience && t.push(`Audience: ${e.audience}`), e.goals?.length && t.push(`Goals: ${e.goals.join("; ")}`), t.push(`Site type: ${e.site_type}. Languages: ${e.languages.join(", ")} (primary ${e.primary_language}).`), e.pages.length > 0 && t.push(`Pages: ${e.pages.map((e) => `${e.title} (/${e.slug})${e.purpose ? ` — ${e.purpose}` : ""}`).join("; ")}`);
+	let n = e.brand;
+	if (n && Object.keys(n).length > 0) {
+		let e = [
+			n.primary_color ? `primary ${n.primary_color}` : null,
+			n.secondary_color ? `secondary ${n.secondary_color}` : null,
+			n.accent_color ? `accent ${n.accent_color}` : null,
+			n.color_scheme ? `${n.color_scheme} scheme` : null,
+			n.font_style ? `fonts: ${n.font_style}` : null,
+			n.tone ? `tone: ${n.tone}` : null,
+			n.style_keywords?.length ? `style: ${n.style_keywords.join(", ")}` : null,
+			n.logo_notes ? `logo: ${n.logo_notes}` : null
+		].filter(Boolean);
+		e.length > 0 && t.push(`Brand: ${e.join("; ")}`);
+	}
+	let r = e.contact;
+	if (r && Object.keys(r).length > 0) {
+		let e = [
+			r.email ? `email ${r.email}` : null,
+			r.phone ? `phone ${r.phone}` : null,
+			r.address ? `address ${r.address}` : null,
+			r.hours ? `hours ${r.hours}` : null,
+			r.social?.length ? `social: ${r.social.map((e) => `${e.platform} ${e.url}`).join(", ")}` : null
+		].filter(Boolean);
+		e.length > 0 && t.push(`Contact: ${e.join("; ")}`);
+	}
+	return e.ecommerce?.enabled && t.push(`Ecommerce: yes${e.ecommerce.products_summary ? ` — ${e.ecommerce.products_summary}` : ""}`), e.keep_existing_content && t.push("Keep existing content: yes (do not wipe pages or posts)."), e.notes && t.push(`Notes: ${e.notes}`), t.push(`Brief status: ${e.status}.`), t.join("\n");
 }
-export {
-  h as CORTEX_AI_BUILD_SESSION_SETTING_KEY,
-  g as CORTEX_AI_SITE_BRIEF_SETTING_KEY,
-  x as cortexBuildSessionSchema,
-  _ as cortexSiteBriefInputSchema,
-  l as cortexSiteBriefSchema,
-  b as formatCortexSiteBriefForPrompt,
-  $ as isCortexBuildSessionUsable,
-  f as isCortexSiteBriefComplete,
-  y as safeParseCortexSiteBrief
-};
+//#endregion
+export { n as CORTEX_AI_BUILD_SESSION_SETTING_KEY, t as CORTEX_AI_SITE_BRIEF_SETTING_KEY, l as cortexBuildSessionSchema, c as cortexSiteBriefInputSchema, s as cortexSiteBriefSchema, p as formatCortexSiteBriefForPrompt, f as isCortexBuildSessionUsable, d as isCortexSiteBriefComplete, u as safeParseCortexSiteBrief };

package/lib/vision-image-download.cjs

@@ -0,0 +1 @@
+const e=require("./fetch-host-guard.cjs");let t=require("node:dns"),n=require("node:http"),r=require("node:https"),i=require("node:net");var a=20971520,o=5,s=2e4,c=(()=>{let e=new i.BlockList;for(let[t,n]of[[`0.0.0.0`,8],[`10.0.0.0`,8],[`100.64.0.0`,10],[`127.0.0.0`,8],[`169.254.0.0`,16],[`172.16.0.0`,12],[`192.0.0.0`,24],[`192.0.2.0`,24],[`192.168.0.0`,16],[`198.18.0.0`,15],[`198.51.100.0`,24],[`203.0.113.0`,24],[`224.0.0.0`,4],[`240.0.0.0`,4]])e.addSubnet(t,n,`ipv4`);for(let[t,n]of[[`::`,128],[`::1`,128],[`64:ff9b::`,96],[`100::`,64],[`2001:db8::`,32],[`fc00::`,7],[`fe80::`,10],[`ff00::`,8]])e.addSubnet(t,n,`ipv6`);return e})();function l(e){let t=(0,i.isIP)(e);return t===4?c.check(e,`ipv4`):t!==6||c.check(e,`ipv6`)}var u=(e,n)=>(0,t.lookup)(e,{all:!0},(e,t)=>n(e,t??[]));function d(e=u){return(t,n,r)=>{e(t,(e,i)=>{if(e){r(e,``);return}let a=i.find(e=>l(e.address));if(i.length===0||a){r(Error(a?`Refusing to download the image: ${t} resolves to a private address (${a.address}).`:`Refusing to download the image: ${t} did not resolve to any address.`),``);return}if(n.all){r(null,i);return}let[o]=i;r(null,o.address,o.family)})}}function f(e,t,i){return new Promise((a,o)=>{let s=(e.protocol===`https:`?r.request:n.request)(e,{headers:{accept:`image/*`,"user-agent":`NextBlock-Cortex-AI`},lookup:t,method:`GET`,signal:i});s.on(`response`,a),s.on(`error`,o),s.end()})}async function p(e,t){let n=[],r=0;for await(let i of e){let a=i;if(r+=a.length,r>t)throw e.destroy(),Error(`The image is larger than the ${t}-byte limit for alt-text generation.`);n.push(a)}return new Uint8Array(Buffer.concat(n))}function m(e){let t=t=>e[t];if(e.length>=8&&t(0)===137&&t(1)===80&&t(2)===78&&t(3)===71)return`image/png`;if(e.length>=3&&t(0)===255&&t(1)===216&&t(2)===255)return`image/jpeg`;if(e.length>=6&&t(0)===71&&t(1)===73&&t(2)===70&&t(3)===56)return`image/gif`;if(e.length>=12&&t(0)===82&&t(1)===73&&t(2)===70&&t(3)===70&&t(8)===87&&t(9)===69&&t(10)===66&&t(11)===80)return`image/webp`;if(e.length>=12&&t(4)===102&&t(5)===116&&t(6)===121&&t(7)===112){let t=String.fromCharCode(...e.subarray(8,12));if(t===`avif`||t===`avis`)return`image/avif`}return null}async function h(t,n={}){let r=n.lookup??d(),a=n.maxBytes??20971520,c=n.abortSignal?AbortSignal.any([n.abortSignal,AbortSignal.timeout(s)]):AbortSignal.timeout(s),u=t;for(let t=0;;t++){if(u.protocol!==`https:`&&u.protocol!==`http:`)throw Error(`Refusing to download the image: ${u.protocol} URLs are not allowed.`);let n=u.hostname.replace(/^\[|\]$/g,``);if(e.isBlockedFetchHost(n)||(0,i.isIP)(n)!==0&&l(n))throw Error(`Refusing to download the image from ${u.hostname}: private or local host.`);let s=await f(u,r,c),d=s.statusCode??0;if(d>=300&&d<400&&s.headers.location){if(s.resume(),t>=o)throw Error(`Too many redirects while downloading the image.`);u=new URL(s.headers.location,u);continue}if(d<200||d>=300)throw s.resume(),Error(`The image URL answered HTTP ${d}.`);let h=await p(s,a),[g=``]=String(s.headers[`content-type`]??``).split(`;`),_=g.trim().toLowerCase(),v=_.startsWith(`image/`)?_:m(h);if(!v)throw Error(`The URL did not return an image (Content-Type: ${_||`none`}).`);return{data:h,mediaType:v}}}exports.CORTEX_AI_VISION_MAX_IMAGE_BYTES=a,exports.createPinnedLookup=d,exports.downloadCortexVisionImage=h,exports.isPrivateAddress=l,exports.sniffImageMediaType=m;

package/lib/vision-image-download.d.ts

@@ -0,0 +1,43 @@
+import { LookupAddress } from 'node:dns';
+import { LookupFunction } from 'node:net';
+/**
+ * Download the image Cortex AI describes for alt text, so the AI SDK never has to.
+ *
+ * AI SDK 7 downloads a URL file part itself through a DNS-pinned undici Agent that
+ * @ai-sdk/provider-utils loads at runtime with `createRequire(...)('undici')`. That dynamic
+ * require is invisible to Next's output file tracer, so undici was missing from Vercel
+ * functions and from standalone builds, and every alt-text request threw there. Tracing it
+ * in next.config.js is not a fix for this repo: the glob that reaches the monorepo root
+ * breaks a scaffold's Turbopack build, and `npm run update` never rewrites an existing
+ * project's next.config.js. So the image is fetched here with Node's own http/https and
+ * handed to the model as bytes.
+ *
+ * The SSRF protection matches the SDK's: the hostname is checked first, and the DNS lookup
+ * is PINNED (the address that is checked is the address the socket connects to, so a
+ * rebinding hostname cannot swap in a private address afterwards). Redirects are followed
+ * by hand and every hop is checked the same way. The body is capped, and the media type
+ * comes from Content-Type or, when that is not an image type, from the file signature.
+ */
+/** Largest image accepted for alt-text generation. The model request inlines it as base64. */
+export declare const CORTEX_AI_VISION_MAX_IMAGE_BYTES: number;
+export declare function isPrivateAddress(address: string): boolean;
+type ResolveAll = (hostname: string, callback: (error: NodeJS.ErrnoException | null, addresses: LookupAddress[]) => void) => void;
+/**
+ * A `lookup` for http(s).request that refuses any answer containing a private address.
+ * `resolveAll` is injectable so tests can simulate DNS without the network.
+ */
+export declare function createPinnedLookup(resolveAll?: ResolveAll): LookupFunction;
+export type DownloadedVisionImage = {
+    data: Uint8Array;
+    mediaType: string;
+};
+export type DownloadVisionImageOptions = {
+    abortSignal?: AbortSignal;
+    /** Override for tests. Defaults to the pinned DNS lookup. */
+    lookup?: LookupFunction;
+    maxBytes?: number;
+};
+/** The media type from the first bytes, for servers that send no or a generic Content-Type. */
+export declare function sniffImageMediaType(bytes: Uint8Array): string | null;
+export declare function downloadCortexVisionImage(url: URL, options?: DownloadVisionImageOptions): Promise<DownloadedVisionImage>;
+export {};

package/lib/vision-image-download.es.js

@@ -0,0 +1,120 @@
+import { isBlockedFetchHost as e } from "./fetch-host-guard.es.js";
+import { lookup as t } from "node:dns";
+import { request as n } from "node:http";
+import { request as r } from "node:https";
+import { BlockList as i, isIP as a } from "node:net";
+//#region src/lib/vision-image-download.ts
+var o = 20971520, s = 5, c = 2e4, l = (() => {
+	let e = new i();
+	for (let [t, n] of [
+		["0.0.0.0", 8],
+		["10.0.0.0", 8],
+		["100.64.0.0", 10],
+		["127.0.0.0", 8],
+		["169.254.0.0", 16],
+		["172.16.0.0", 12],
+		["192.0.0.0", 24],
+		["192.0.2.0", 24],
+		["192.168.0.0", 16],
+		["198.18.0.0", 15],
+		["198.51.100.0", 24],
+		["203.0.113.0", 24],
+		["224.0.0.0", 4],
+		["240.0.0.0", 4]
+	]) e.addSubnet(t, n, "ipv4");
+	for (let [t, n] of [
+		["::", 128],
+		["::1", 128],
+		["64:ff9b::", 96],
+		["100::", 64],
+		["2001:db8::", 32],
+		["fc00::", 7],
+		["fe80::", 10],
+		["ff00::", 8]
+	]) e.addSubnet(t, n, "ipv6");
+	return e;
+})();
+function u(e) {
+	let t = a(e);
+	return t === 4 ? l.check(e, "ipv4") : t !== 6 || l.check(e, "ipv6");
+}
+var d = (e, n) => t(e, { all: !0 }, (e, t) => n(e, t ?? []));
+function f(e = d) {
+	return (t, n, r) => {
+		e(t, (e, i) => {
+			if (e) {
+				r(e, "");
+				return;
+			}
+			let a = i.find((e) => u(e.address));
+			if (i.length === 0 || a) {
+				r(/* @__PURE__ */ Error(a ? `Refusing to download the image: ${t} resolves to a private address (${a.address}).` : `Refusing to download the image: ${t} did not resolve to any address.`), "");
+				return;
+			}
+			if (n.all) {
+				r(null, i);
+				return;
+			}
+			let [o] = i;
+			r(null, o.address, o.family);
+		});
+	};
+}
+function p(e, t, i) {
+	return new Promise((a, o) => {
+		let s = (e.protocol === "https:" ? r : n)(e, {
+			headers: {
+				accept: "image/*",
+				"user-agent": "NextBlock-Cortex-AI"
+			},
+			lookup: t,
+			method: "GET",
+			signal: i
+		});
+		s.on("response", a), s.on("error", o), s.end();
+	});
+}
+async function m(e, t) {
+	let n = [], r = 0;
+	for await (let i of e) {
+		let a = i;
+		if (r += a.length, r > t) throw e.destroy(), Error(`The image is larger than the ${t}-byte limit for alt-text generation.`);
+		n.push(a);
+	}
+	return new Uint8Array(Buffer.concat(n));
+}
+function h(e) {
+	let t = (t) => e[t];
+	if (e.length >= 8 && t(0) === 137 && t(1) === 80 && t(2) === 78 && t(3) === 71) return "image/png";
+	if (e.length >= 3 && t(0) === 255 && t(1) === 216 && t(2) === 255) return "image/jpeg";
+	if (e.length >= 6 && t(0) === 71 && t(1) === 73 && t(2) === 70 && t(3) === 56) return "image/gif";
+	if (e.length >= 12 && t(0) === 82 && t(1) === 73 && t(2) === 70 && t(3) === 70 && t(8) === 87 && t(9) === 69 && t(10) === 66 && t(11) === 80) return "image/webp";
+	if (e.length >= 12 && t(4) === 102 && t(5) === 116 && t(6) === 121 && t(7) === 112) {
+		let t = String.fromCharCode(...e.subarray(8, 12));
+		if (t === "avif" || t === "avis") return "image/avif";
+	}
+	return null;
+}
+async function g(t, n = {}) {
+	let r = n.lookup ?? f(), i = n.maxBytes ?? 20971520, o = n.abortSignal ? AbortSignal.any([n.abortSignal, AbortSignal.timeout(c)]) : AbortSignal.timeout(c), l = t;
+	for (let t = 0;; t++) {
+		if (l.protocol !== "https:" && l.protocol !== "http:") throw Error(`Refusing to download the image: ${l.protocol} URLs are not allowed.`);
+		let n = l.hostname.replace(/^\[|\]$/g, "");
+		if (e(n) || a(n) !== 0 && u(n)) throw Error(`Refusing to download the image from ${l.hostname}: private or local host.`);
+		let c = await p(l, r, o), d = c.statusCode ?? 0;
+		if (d >= 300 && d < 400 && c.headers.location) {
+			if (c.resume(), t >= s) throw Error("Too many redirects while downloading the image.");
+			l = new URL(c.headers.location, l);
+			continue;
+		}
+		if (d < 200 || d >= 300) throw c.resume(), Error(`The image URL answered HTTP ${d}.`);
+		let f = await m(c, i), [g = ""] = String(c.headers["content-type"] ?? "").split(";"), _ = g.trim().toLowerCase(), v = _.startsWith("image/") ? _ : h(f);
+		if (!v) throw Error(`The URL did not return an image (Content-Type: ${_ || "none"}).`);
+		return {
+			data: f,
+			mediaType: v
+		};
+	}
+}
+//#endregion
+export { o as CORTEX_AI_VISION_MAX_IMAGE_BYTES, f as createPinnedLookup, g as downloadCortexVisionImage, u as isPrivateAddress, h as sniffImageMediaType };

package/lib/zod-config.cjs

@@ -0,0 +1 @@
+let e=require("zod");e.z.config({jitless:!0}),exports.z=e.z;

package/lib/zod-config.es.js

@@ -1,6 +1,5 @@
-import { z as o } from "zod";
-import { z as f } from "zod";
-o.config({ jitless: !0 });
-export {
-  f as z
-};
+import { z as e } from "zod";
+//#region src/lib/zod-config.ts
+e.config({ jitless: !0 });
+//#endregion
+export { e as z };

package/package.json

@@ -1,40 +1,41 @@
 {
   "name": "@nextblock-cms/cortex",
-  "version": "0.20.3",
+  "version": "0.21.1",
   "license": "AGPL-3.0-or-later",
   "publishConfig": {
     "access": "public"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/nextblock-cms/packages.git"
+    "url": "git+https://github.com/nextblock-cms/nextblock.git",
+    "directory": "libs/cortex"
   },
   "type": "module",
-  "main": "./index.cjs.js",
+  "main": "./index.cjs",
   "module": "./index.es.js",
   "types": "./index.d.ts",
   "exports": {
     ".": {
       "types": "./index.d.ts",
       "import": "./index.es.js",
-      "require": "./index.cjs.js"
+      "require": "./index.cjs"
     },
     "./client": {
       "types": "./client.d.ts",
       "import": "./client.es.js",
-      "require": "./client.cjs.js"
+      "require": "./client.cjs"
     },
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@ai-sdk/openai-compatible": "^2.0.42",
-    "@nextblock-cms/db": "^0.20.3",
-    "@nextblock-cms/ecommerce": "npm:@nextblock-cms/ecom@^0.20.3",
-    "@nextblock-cms/utils": "^0.20.3",
-    "ai": "^6.0.170",
-    "zod": "^4.3.6"
+    "@ai-sdk/openai-compatible": "^3.0.53",
+    "@nextblock-cms/db": "^0.21.1",
+    "@nextblock-cms/ecommerce": "npm:@nextblock-cms/ecom@^0.21.1",
+    "@nextblock-cms/utils": "^0.21.1",
+    "ai": "^7.0.107",
+    "zod": "^4.6.5"
   },
   "peerDependencies": {
-    "next": "^16.2.7"
+    "next": "^16.3.5"
   }
 }

package/client.cjs.js

@@ -1 +0,0 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("./lib/ai-model-registry.cjs.js"),e=require("./lib/site-brief.cjs.js");exports.createCortexAiStoredModelSelection=t.createCortexAiStoredModelSelection;exports.formatCortexSiteBriefForPrompt=e.formatCortexSiteBriefForPrompt;exports.isCortexSiteBriefComplete=e.isCortexSiteBriefComplete;

package/index.cjs.js

@@ -1 +0,0 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const R=require("./lib/ai-block-generation.cjs.js"),T=require("./lib/ai-client.cjs.js"),t=require("./lib/ai-config.cjs.js"),m=require("./lib/ai-cortex-widget-builder.cjs.js"),u=require("./lib/ai-global-agent-custom-block-tools.cjs.js"),S=require("./lib/ai-global-agent-db-tools.cjs.js"),o=require("./lib/ai-global-agent-site-tools.cjs.js"),e=require("./lib/ai-global-agent-tools.cjs.js"),_=require("./lib/ai-key-crypto.cjs.js"),O=require("./lib/ai-key-verification.cjs.js"),I=require("./lib/ai-model-catalog.cjs.js"),r=require("./lib/ai-model-registry.cjs.js"),s=require("./lib/ai-seo-metadata.cjs.js"),l=require("./lib/ai-vision.cjs.js"),C=require("./lib/block-content-schemas.cjs.js"),A=require("./lib/cortex-widget-registry.cjs.js"),n=require("./lib/cortex-widget-schema.cjs.js"),a=require("./lib/mcp-server.cjs.js"),i=require("./lib/mcp-tokens.cjs.js"),c=require("./lib/mcp-tool-registry.cjs.js"),E=require("./lib/site-brief.cjs.js");require("./lib/zod-config.cjs.js");const p=require("zod");exports.INLINE_HTML_ASSISTANT_SYSTEM_PROMPT=R.INLINE_HTML_ASSISTANT_SYSTEM_PROMPT;exports.generateEditorBlocksRequestSchema=R.generateEditorBlocksRequestSchema;exports.generateEditorHtmlFragment=R.generateEditorHtmlFragment;exports.validateGeneratedEditorHtmlFragment=R.validateGeneratedEditorHtmlFragment;exports.createCortexAiOpenRouterClient=T.createCortexAiOpenRouterClient;exports.createCortexAiOpenRouterProvider=T.createCortexAiOpenRouterProvider;exports.generateCortexAiText=T.generateCortexAiText;exports.getStoredCortexAiModelSelection=T.getStoredCortexAiModelSelection;exports.resolveCortexAiOpenRouterCredential=T.resolveCortexAiOpenRouterCredential;exports.CORTEX_AI_AGENT_SETTINGS_BOUNDS=t.CORTEX_AI_AGENT_SETTINGS_BOUNDS;exports.CORTEX_AI_AGENT_SETTINGS_DEFAULTS=t.CORTEX_AI_AGENT_SETTINGS_DEFAULTS;exports.CORTEX_AI_AGENT_SETTINGS_KEY=t.CORTEX_AI_AGENT_SETTINGS_KEY;exports.CORTEX_AI_OPENROUTER_MODEL_SELECTION_SETTING_KEY=t.CORTEX_AI_OPENROUTER_MODEL_SELECTION_SETTING_KEY;exports.CORTEX_AI_OPENROUTER_SETTING_KEY=t.CORTEX_AI_OPENROUTER_SETTING_KEY;exports.CORTEX_AI_PACKAGE_ID=t.CORTEX_AI_PACKAGE_ID;exports.CORTEX_AI_PACKAGE_NAME=t.CORTEX_AI_PACKAGE_NAME;exports.CORTEX_AI_PEXELS_SETTING_KEY=t.CORTEX_AI_PEXELS_SETTING_KEY;exports.CORTEX_AI_UNSPLASH_APP_NAME_SETTING_KEY=t.CORTEX_AI_UNSPLASH_APP_NAME_SETTING_KEY;exports.CORTEX_AI_UNSPLASH_SETTING_KEY=t.CORTEX_AI_UNSPLASH_SETTING_KEY;exports.decryptStoredOpenRouterApiKey=t.decryptStoredOpenRouterApiKey;exports.encryptStoredOpenRouterApiKey=t.encryptStoredOpenRouterApiKey;exports.getCortexAiEnvConfig=t.getCortexAiEnvConfig;exports.getEnvOpenRouterKeyStatus=t.getEnvOpenRouterKeyStatus;exports.getOpenRouterEnvApiKey=t.getOpenRouterEnvApiKey;exports.getPexelsEnvApiKey=t.getPexelsEnvApiKey;exports.getStoredOpenRouterKeyStatus=t.getStoredOpenRouterKeyStatus;exports.getUnsplashEnvApiKey=t.getUnsplashEnvApiKey;exports.normalizeCortexAiAgentSettings=t.normalizeCortexAiAgentSettings;exports.resolveCortexAiAgentSettings=t.resolveCortexAiAgentSettings;exports.generateCortexWidgetDefinition=m.generateCortexWidgetDefinition;exports.createCortexCustomBlockTools=u.createCortexCustomBlockTools;exports.createCustomBlockInputSchema=u.createCustomBlockInputSchema;exports.deleteCustomBlockInputSchema=u.deleteCustomBlockInputSchema;exports.executeCreateCustomBlock=u.executeCreateCustomBlock;exports.executeDeleteCustomBlock=u.executeDeleteCustomBlock;exports.executeListCustomBlocks=u.executeListCustomBlocks;exports.executeUpdateCustomBlock=u.executeUpdateCustomBlock;exports.listCustomBlocksInputSchema=u.listCustomBlocksInputSchema;exports.updateCustomBlockInputSchema=u.updateCustomBlockInputSchema;exports.createCortexDatabaseAgentTools=S.createCortexDatabaseAgentTools;exports.describeDatabaseSchemaInputSchema=S.describeDatabaseSchemaInputSchema;exports.executeDatabaseActionPlan=S.executeDatabaseActionPlan;exports.executeDatabaseActionPlanInputSchema=S.executeDatabaseActionPlanInputSchema;exports.executeDatabaseMutation=S.executeDatabaseMutation;exports.executeDatabaseMutationInputSchema=S.executeDatabaseMutationInputSchema;exports.executeDescribeDatabaseSchema=S.executeDescribeDatabaseSchema;exports.executeReadDatabaseRecords=S.executeReadDatabaseRecords;exports.readDatabaseRecordsInputSchema=S.readDatabaseRecordsInputSchema;exports.NEXTBLOCK_SEED_MEDIA_OBJECT_KEYS=o.NEXTBLOCK_SEED_MEDIA_OBJECT_KEYS;exports.NEXTBLOCK_SEED_TRANSLATION_GROUP_IDS=o.NEXTBLOCK_SEED_TRANSLATION_GROUP_IDS;exports.createCortexSiteTools=o.createCortexSiteTools;exports.executeFinishSiteBuild=o.executeFinishSiteBuild;exports.executeGetSiteOverview=o.executeGetSiteOverview;exports.executeResetSiteContent=o.executeResetSiteContent;exports.executeSaveSiteBrief=o.executeSaveSiteBrief;exports.executeStartSiteBuild=o.executeStartSiteBuild;exports.executeUpdateSiteIdentity=o.executeUpdateSiteIdentity;exports.finishSiteBuildInputSchema=o.finishSiteBuildInputSchema;exports.formatCortexSiteOverviewForPrompt=o.formatCortexSiteOverviewForPrompt;exports.getSiteOverviewInputSchema=o.getSiteOverviewInputSchema;exports.readCortexBuildSession=o.readCortexBuildSession;exports.readCortexSiteBrief=o.readCortexSiteBrief;exports.resetSiteContentInputSchema=o.resetSiteContentInputSchema;exports.resolveCortexBuildSession=o.resolveCortexBuildSession;exports.saveSiteBriefInputSchema=o.saveSiteBriefInputSchema;exports.startSiteBuildInputSchema=o.startSiteBuildInputSchema;exports.updateSiteIdentityInputSchema=o.updateSiteIdentityInputSchema;exports.buildVisibleContactIntroActionPlan=e.buildVisibleContactIntroActionPlan;exports.cortexAiPageContextSchema=e.cortexAiPageContextSchema;exports.createCmsPageInputSchema=e.createCmsPageInputSchema;exports.createCmsPostInputSchema=e.createCmsPostInputSchema;exports.createCmsProductInputSchema=e.createCmsProductInputSchema;exports.createCortexGlobalAgentTools=e.createCortexGlobalAgentTools;exports.deleteCmsItemInputSchema=e.deleteCmsItemInputSchema;exports.executeCmsActionPlan=e.executeCmsActionPlan;exports.executeCmsActionPlanInputSchema=e.executeCmsActionPlanInputSchema;exports.executeCreateCmsPage=e.executeCreateCmsPage;exports.executeCreateCmsPost=e.executeCreateCmsPost;exports.executeCreateCmsProduct=e.executeCreateCmsProduct;exports.executeDeleteCmsItem=e.executeDeleteCmsItem;exports.executeFetchEcommerceStats=e.executeFetchEcommerceStats;exports.executeFetchUrlContent=e.executeFetchUrlContent;exports.executeInsertContentBlock=e.executeInsertContentBlock;exports.executeManageProductVariants=e.executeManageProductVariants;exports.executePrepareDeleteCmsItem=e.executePrepareDeleteCmsItem;exports.executePublishContentDraft=e.executePublishContentDraft;exports.executeReadCurrentCmsItem=e.executeReadCurrentCmsItem;exports.executeRewritePageDraft=e.executeRewritePageDraft;exports.executeSearchDocumentation=e.executeSearchDocumentation;exports.executeSearchDocumentationWithTimeout=e.executeSearchDocumentationWithTimeout;exports.executeSearchStockPhotos=e.executeSearchStockPhotos;exports.executeSetContentImages=e.executeSetContentImages;exports.executeTranslateContentBulk=e.executeTranslateContentBulk;exports.executeTranslatePage=e.executeTranslatePage;exports.executeUpdateCmsItemField=e.executeUpdateCmsItemField;exports.executeUpdateContentBlock=e.executeUpdateContentBlock;exports.executeUpdateCurrentCmsFields=e.executeUpdateCurrentCmsFields;exports.executeUpdateFooter=e.executeUpdateFooter;exports.executeUpdateNavigationBar=e.executeUpdateNavigationBar;exports.executeUpdateSectionColumnBlock=e.executeUpdateSectionColumnBlock;exports.fetchEcommerceStatsInputSchema=e.fetchEcommerceStatsInputSchema;exports.fetchUrlContentInputSchema=e.fetchUrlContentInputSchema;exports.insertContentBlockInputSchema=e.insertContentBlockInputSchema;exports.isBlockedFetchHost=e.isBlockedFetchHost;exports.manageProductVariantsInputSchema=e.manageProductVariantsInputSchema;exports.maybeTriggerStockPhotoDownloads=e.maybeTriggerStockPhotoDownloads;exports.navigationItemInputSchema=e.navigationItemInputSchema;exports.prepareDeleteCmsItemInputSchema=e.prepareDeleteCmsItemInputSchema;exports.publishContentDraftInputSchema=e.publishContentDraftInputSchema;exports.readCurrentCmsItemInputSchema=e.readCurrentCmsItemInputSchema;exports.resolveCortexAiStockPhotoProvider=e.resolveCortexAiStockPhotoProvider;exports.resolveCortexAiStockPhotoProviders=e.resolveCortexAiStockPhotoProviders;exports.rewritePageDraftInputSchema=e.rewritePageDraftInputSchema;exports.searchDocumentationInputSchema=e.searchDocumentationInputSchema;exports.searchStockPhotosInputSchema=e.searchStockPhotosInputSchema;exports.setContentImagesInputSchema=e.setContentImagesInputSchema;exports.translateContentBulkInputSchema=e.translateContentBulkInputSchema;exports.translatePageInputSchema=e.translatePageInputSchema;exports.updateCmsItemFieldInputSchema=e.updateCmsItemFieldInputSchema;exports.updateContentBlockInputSchema=e.updateContentBlockInputSchema;exports.updateCurrentCmsFieldsInputSchema=e.updateCurrentCmsFieldsInputSchema;exports.updateFooterInputSchema=e.updateFooterInputSchema;exports.updateNavigationBarInputSchema=e.updateNavigationBarInputSchema;exports.updateSectionColumnBlockInputSchema=e.updateSectionColumnBlockInputSchema;exports.CORTEX_AI_KEY_ALGORITHM=_.CORTEX_AI_KEY_ALGORITHM;exports.CORTEX_AI_KEY_ENVELOPE_VERSION=_.CORTEX_AI_KEY_ENVELOPE_VERSION;exports.decryptOpenRouterApiKey=_.decryptOpenRouterApiKey;exports.encryptOpenRouterApiKey=_.encryptOpenRouterApiKey;exports.getMaskedOpenRouterKey=_.getMaskedOpenRouterKey;exports.getOpenRouterKeyEnvelopeStatus=_.getOpenRouterKeyEnvelopeStatus;exports.verifyOpenRouterApiKey=O.verifyOpenRouterApiKey;exports.verifyPexelsApiKey=O.verifyPexelsApiKey;exports.verifyUnsplashAccessKey=O.verifyUnsplashAccessKey;exports.listCortexAiCompatibleOpenRouterModels=I.listCortexAiCompatibleOpenRouterModels;exports.CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY=r.CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY;exports.CORTEX_AI_MODEL_REGISTRY=r.CORTEX_AI_MODEL_REGISTRY;exports.CORTEX_AI_OPENROUTER_BASE_URL=r.CORTEX_AI_OPENROUTER_BASE_URL;exports.CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL=r.CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL;exports.CORTEX_AI_REQUIRED_MODEL_PARAMETERS=r.CORTEX_AI_REQUIRED_MODEL_PARAMETERS;exports.CortexAiRoutingError=r.CortexAiRoutingError;exports.buildCortexAiModelFallbackChain=r.buildCortexAiModelFallbackChain;exports.buildCortexAiRoutingPolicy=r.buildCortexAiRoutingPolicy;exports.createCortexAiStoredModelSelection=r.createCortexAiStoredModelSelection;exports.filterCortexAiCompatibleOpenRouterModels=r.filterCortexAiCompatibleOpenRouterModels;exports.getHttpStatusCode=r.getHttpStatusCode;exports.getOpenRouterErrorStatus=r.getOpenRouterErrorStatus;exports.isCortexAiFreeModelId=r.isCortexAiFreeModelId;exports.isOpenRouterRateLimitError=r.isOpenRouterRateLimitError;exports.isOpenRouterRecoverableRoutingError=r.isOpenRouterRecoverableRoutingError;exports.omitUnsupportedCortexAiModelOptions=r.omitUnsupportedCortexAiModelOptions;exports.runWithCortexAiModelFallback=r.runWithCortexAiModelFallback;exports.safeParseCortexAiModelSelection=r.safeParseCortexAiModelSelection;exports.summarizeCortexAiRoutingError=r.summarizeCortexAiRoutingError;exports.CORTEX_AI_SEO_METADATA_CONTENT_BUDGET=s.CORTEX_AI_SEO_METADATA_CONTENT_BUDGET;exports.CORTEX_AI_SEO_METADATA_LENGTH_BUDGETS=s.CORTEX_AI_SEO_METADATA_LENGTH_BUDGETS;exports.cortexAiSeoMetadataOutputSchema=s.cortexAiSeoMetadataOutputSchema;exports.extractJsonObject=s.extractJsonObject;exports.generateCortexAiSeoMetadata=s.generateCortexAiSeoMetadata;exports.truncateOnWordBoundary=s.truncateOnWordBoundary;exports.CORTEX_AI_DEFAULT_ALT_TEXT_MAX_LENGTH=l.CORTEX_AI_DEFAULT_ALT_TEXT_MAX_LENGTH;exports.CORTEX_AI_VISION_MODEL_FALLBACK_REGISTRY=l.CORTEX_AI_VISION_MODEL_FALLBACK_REGISTRY;exports.buildCortexAiVisionRoutingPolicy=l.buildCortexAiVisionRoutingPolicy;exports.generateCortexAiAltText=l.generateCortexAiAltText;exports.isKnownVisionCapableCortexAiModelId=l.isKnownVisionCapableCortexAiModelId;exports.normalizeGeneratedAltText=l.normalizeGeneratedAltText;exports.availableCortexAiBlockTypes=C.availableCortexAiBlockTypes;exports.cortexAiBlockTypeSchema=C.cortexAiBlockTypeSchema;exports.customBlockSlugPatternSchema=C.customBlockSlugPatternSchema;exports.fallbackBlockSchemas=C.fallbackBlockSchemas;exports.isValidBlockType=C.isValidBlockType;exports.loadCustomBlockDefinitions=C.loadCustomBlockDefinitions;exports.readCustomBlockFields=C.readCustomBlockFields;exports.sectionBlockFallbackSchema=C.sectionBlockFallbackSchema;exports.validateCortexBlockContent=C.validateCortexBlockContent;exports.validateCustomBlockInstanceContent=C.validateCustomBlockInstanceContent;exports.CORTEX_WIDGET_DEFINITION_SELECT=A.CORTEX_WIDGET_DEFINITION_SELECT;exports.CortexWidgetRegistryInsertError=A.CortexWidgetRegistryInsertError;exports.buildCortexWidgetDefinitionInsertPayload=A.buildCortexWidgetDefinitionInsertPayload;exports.insertCortexWidgetDefinition=A.insertCortexWidgetDefinition;exports.CORTEX_WIDGET_ALLOWED_RELATION_TABLES=n.CORTEX_WIDGET_ALLOWED_RELATION_TABLES;exports.buildCortexProfileCardVerificationDefinition=n.buildCortexProfileCardVerificationDefinition;exports.buildCortexWidgetBuilderPrompt=n.buildCortexWidgetBuilderPrompt;exports.buildCortexWidgetBuilderSystemPrompt=n.buildCortexWidgetBuilderSystemPrompt;exports.cortexWidgetBuildRequestSchema=n.cortexWidgetBuildRequestSchema;exports.cortexWidgetDbRelationFieldSchema=n.cortexWidgetDbRelationFieldSchema;exports.cortexWidgetDefinitionSchema=n.cortexWidgetDefinitionSchema;exports.cortexWidgetFieldSchema=n.cortexWidgetFieldSchema;exports.cortexWidgetImageR2FieldSchema=n.cortexWidgetImageR2FieldSchema;exports.cortexWidgetLayoutNodeSchema=n.cortexWidgetLayoutNodeSchema;exports.cortexWidgetRichTextFieldSchema=n.cortexWidgetRichTextFieldSchema;exports.cortexWidgetTextFieldSchema=n.cortexWidgetTextFieldSchema;exports.validateCortexWidgetDefinitionOutput=n.validateCortexWidgetDefinitionOutput;exports.CORTEX_MCP_DEFAULT_PROTOCOL_VERSION=a.CORTEX_MCP_DEFAULT_PROTOCOL_VERSION;exports.CORTEX_MCP_LATEST_LEGACY_PROTOCOL_VERSION=a.CORTEX_MCP_LATEST_LEGACY_PROTOCOL_VERSION;exports.CORTEX_MCP_MODERN_PROTOCOL_VERSION=a.CORTEX_MCP_MODERN_PROTOCOL_VERSION;exports.CORTEX_MCP_SERVER_NAME=a.CORTEX_MCP_SERVER_NAME;exports.CORTEX_MCP_SERVER_TITLE=a.CORTEX_MCP_SERVER_TITLE;exports.CORTEX_MCP_SUPPORTED_PROTOCOL_VERSIONS=a.CORTEX_MCP_SUPPORTED_PROTOCOL_VERSIONS;exports.JSON_RPC_INTERNAL_ERROR=a.JSON_RPC_INTERNAL_ERROR;exports.JSON_RPC_INVALID_PARAMS=a.JSON_RPC_INVALID_PARAMS;exports.JSON_RPC_INVALID_REQUEST=a.JSON_RPC_INVALID_REQUEST;exports.JSON_RPC_METHOD_NOT_FOUND=a.JSON_RPC_METHOD_NOT_FOUND;exports.JSON_RPC_PARSE_ERROR=a.JSON_RPC_PARSE_ERROR;exports.buildCortexMcpDiscoveryDocument=a.buildCortexMcpDiscoveryDocument;exports.handleCortexMcpMessage=a.handleCortexMcpMessage;exports.isJsonRpcNotification=a.isJsonRpcNotification;exports.isModernEraMessage=a.isModernEraMessage;exports.wantsMcpEventStream=a.wantsMcpEventStream;exports.CORTEX_AI_MCP_ENV_TOKEN_MIN_LENGTH=i.CORTEX_AI_MCP_ENV_TOKEN_MIN_LENGTH;exports.CORTEX_AI_MCP_ENV_TOKEN_VAR=i.CORTEX_AI_MCP_ENV_TOKEN_VAR;exports.CORTEX_AI_MCP_SCOPES=i.CORTEX_AI_MCP_SCOPES;exports.CORTEX_AI_MCP_SETTINGS_DEFAULTS=i.CORTEX_AI_MCP_SETTINGS_DEFAULTS;exports.CORTEX_AI_MCP_SETTINGS_KEY=i.CORTEX_AI_MCP_SETTINGS_KEY;exports.CORTEX_AI_MCP_TOKENS_TABLE=i.CORTEX_AI_MCP_TOKENS_TABLE;exports.CORTEX_AI_MCP_TOKEN_PREFIX=i.CORTEX_AI_MCP_TOKEN_PREFIX;exports.hashCortexAiMcpToken=i.hashCortexAiMcpToken;exports.isLocalhostHost=i.isLocalhostHost;exports.matchesCortexAiMcpEnvToken=i.matchesCortexAiMcpEnvToken;exports.mintCortexAiMcpToken=i.mintCortexAiMcpToken;exports.normalizeCortexAiMcpSettings=i.normalizeCortexAiMcpSettings;exports.parseBearerToken=i.parseBearerToken;exports.readCortexAiMcpEnvToken=i.readCortexAiMcpEnvToken;exports.resolveCortexAiMcpSettings=i.resolveCortexAiMcpSettings;exports.shouldTrustLocalMcpRequest=i.shouldTrustLocalMcpRequest;exports.touchCortexAiMcpToken=i.touchCortexAiMcpToken;exports.verifyCortexAiMcpToken=i.verifyCortexAiMcpToken;exports.CORTEX_MCP_PROMPTS=c.CORTEX_MCP_PROMPTS;exports.CORTEX_MCP_RESOURCES=c.CORTEX_MCP_RESOURCES;exports.CORTEX_MCP_TOOL_ALIASES=c.CORTEX_MCP_TOOL_ALIASES;exports.CORTEX_MCP_TOOL_KINDS=c.CORTEX_MCP_TOOL_KINDS;exports.CORTEX_MCP_WRITE_TOOL_BEHAVIOURS=c.CORTEX_MCP_WRITE_TOOL_BEHAVIOURS;exports.CortexMcpForbiddenToolError=c.CortexMcpForbiddenToolError;exports.CortexMcpUnknownToolError=c.CortexMcpUnknownToolError;exports.assertCortexMcpToolCoverage=c.assertCortexMcpToolCoverage;exports.buildCortexMcpToolDefinitions=c.buildCortexMcpToolDefinitions;exports.callCortexMcpTool=c.callCortexMcpTool;exports.cortexMcpScopesAllow=c.cortexMcpScopesAllow;exports.getCortexMcpPrompt=c.getCortexMcpPrompt;exports.getCortexMcpToolAnnotations=c.getCortexMcpToolAnnotations;exports.getCortexMcpToolKind=c.getCortexMcpToolKind;exports.readCortexMcpResource=c.readCortexMcpResource;exports.resolveCortexMcpToolName=c.resolveCortexMcpToolName;exports.CORTEX_AI_BUILD_SESSION_SETTING_KEY=E.CORTEX_AI_BUILD_SESSION_SETTING_KEY;exports.CORTEX_AI_SITE_BRIEF_SETTING_KEY=E.CORTEX_AI_SITE_BRIEF_SETTING_KEY;exports.cortexBuildSessionSchema=E.cortexBuildSessionSchema;exports.cortexSiteBriefInputSchema=E.cortexSiteBriefInputSchema;exports.cortexSiteBriefSchema=E.cortexSiteBriefSchema;exports.formatCortexSiteBriefForPrompt=E.formatCortexSiteBriefForPrompt;exports.isCortexBuildSessionUsable=E.isCortexBuildSessionUsable;exports.isCortexSiteBriefComplete=E.isCortexSiteBriefComplete;exports.safeParseCortexSiteBrief=E.safeParseCortexSiteBrief;Object.defineProperty(exports,"z",{enumerable:!0,get:()=>p.z});

package/lib/ai-block-generation.cjs.js

@@ -1,5 +0,0 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const T=require("ai");require("./zod-config.cjs.js");const x=require("./ai-client.cjs.js"),m=require("./ai-model-registry.cjs.js"),b=require("zod"),f=b.z.strictObject({context:b.z.string().max(2e3).optional(),prompt:b.z.string().min(3).max(4e3)}),S=6e4;function M(){return["You are NextBlock Cortex AI, an inline rich-text assistant for a Tiptap editor.","Return ONLY an HTML fragment. Do not return markdown fences, JSON, prose explanations, or commentary.","Do not include <!doctype>, <html>, <head>, or <body>. The output is inserted inside an existing editor document.","Use semantic HTML: headings, paragraphs, unordered and ordered lists, blockquotes, pre/code blocks, horizontal rules, and tables.","Use the current editor context for continuity, but do not repeat existing copy unless the user explicitly asks for a rewrite.","For tables, use valid <table>, <thead>, <tbody>, <tr>, <th>, and <td> markup with aligned rows and non-empty cells.","Never use blank table spacer rows, blank spacer columns, empty cells, <colgroup>, colspan, or rowspan unless the user explicitly asks for a blank template.","If CSS or JavaScript is explicitly requested, use proper <style> or <script> tags. The editor preserves those tags through its source-mode HTML parser.","Keep copy production-ready, editable, and concise unless the user asks for longer content."].join(" ")}function H(e){return["Create an HTML fragment for this inline editor request:",e.prompt,/\b(table|pricing table|comparison table)\b/i.test(e.prompt)?["Table requirements:","- Use a short header row.","- Use only the real content columns requested by the user.","- Do not add blank spacer columns or blank spacer rows.","- Do not use <colgroup>, colspan, or rowspan.","- Put normal descriptive prose before or after the table, not inside a table cell.","- Body rows must match the header column count.","- Every header and body cell must contain meaningful text."].join(`
-`):null,e.context?`Current editor context:
-${e.context}`:null].filter(Boolean).join(`
-
-`)}function C(e){return e.replace(/&nbsp;/gi," ").replace(/&amp;/gi,"&").replace(/&lt;/gi,"<").replace(/&gt;/gi,">").replace(/&quot;/gi,'"').replace(/&#39;/gi,"'")}function E(e){return C(e.replace(/<script\b[\s\S]*?<\/script>/gi,"").replace(/<style\b[\s\S]*?<\/style>/gi,"").replace(/<br\s*\/?>/gi," ").replace(/<[^>]+>/g," ")).replace(/\s+/g," ").trim()}function g(e){return E(e).length===0}function I(e){return e.replace(/<(p|h[1-6])\b[^>]*>(?:\s|&nbsp;|<br\s*\/?>)*<\/\1>/gi,"").trim()}function A(e){const t=[...e.matchAll(/<tr\b[^>]*>([\s\S]*?)<\/tr>/gi)];if(t.length===0)return e;const o=t.map(r=>({cells:[...r[1].matchAll(/<(td|th)\b[^>]*>([\s\S]*?)<\/\1>/gi)].map(l=>({innerHtml:l[2].trim(),tag:l[1].toLowerCase()}))})).filter(r=>r.cells.some(n=>!g(n.innerHtml)));if(o.length===0)return e;const p=Math.max(...o.map(r=>r.cells.length)),i=new Set;for(let r=0;r<p;r++)o.every(l=>{const h=l.cells[r];return!h||g(h.innerHtml)})&&i.add(r);const s=o.map(r=>({cells:r.cells.filter((n,l)=>!i.has(l))})).filter(r=>r.cells.length>0);if(s.length===0)return e;const c=r=>`<tr>${r.cells.map(n=>`<${n.tag}>${n.innerHtml}</${n.tag}>`).join("")}</tr>`;if(!s[0].cells.some(r=>r.tag==="th"))return`<table><tbody>${s.map(c).join("")}</tbody></table>`;const[u,...d]=s;return`<table><thead>${c(u)}</thead><tbody>${d.map(c).join("")}</tbody></table>`}function R(e){return e.replace(/<table\b[\s\S]*?<\/table>/gi,t=>A(t))}function k(e){const t=[...e.matchAll(/<table\b[\s\S]*?<\/table>/gi)];for(const o of t){const i=[...o[0].matchAll(/<tr\b[^>]*>([\s\S]*?)<\/tr>/gi)];if(i.length===0)throw new Error("Cortex AI returned a table without rows.");const s=[];for(const c of i){const a=[...c[1].matchAll(/<(td|th)\b[^>]*>([\s\S]*?)<\/\1>/gi)];if(a.length===0)throw new Error("Cortex AI returned a table row without cells.");for(const u of a)if(g(u[2]))throw new Error("Cortex AI returned a table with empty cells.");s.push(a.length)}if(new Set(s).size>1)throw new Error("Cortex AI returned a table with uneven row widths.")}}function L(e){let t=e.trim();(t.startsWith('"')&&t.endsWith('"')||t.startsWith("'")&&t.endsWith("'"))&&t.slice(1,-1).includes("<")&&(t=t.slice(1,-1).trim());const o=t.match(/<body\b[^>]*>([\s\S]*?)<\/body>/i);return o?.[1]&&(t=o[1].trim()),I(R(t))}function w(e){const t=L(e);if(!t.trim())throw new Error("Cortex AI returned empty HTML.");if(/```/.test(t))throw new Error("Cortex AI returned markdown code fences instead of an HTML fragment.");if(/<!doctype\b|<html\b|<head\b|<body\b/i.test(t))throw new Error("Cortex AI returned a full HTML document instead of an HTML fragment.");if(/^(sure|certainly|of course|here(?:'s| is)|below is|i can)\b/i.test(t))throw new Error("Cortex AI returned a conversational response instead of an HTML fragment.");if(!/<[a-z][\w:-]*(?:\s[^>]*)?>/i.test(t))throw new Error("Cortex AI returned plain text instead of semantic HTML.");return k(t),t}function v(e){const t=m.getHttpStatusCode(e);if(t===401||t===402||t===403)return!1;if(m.isOpenRouterRecoverableRoutingError(e)||t&&t>=500)return!0;const o=e instanceof Error?e.message:String(e);return/NoContentGenerated|No content generated|Provider returned error|empty HTML|markdown code fences|full HTML document|conversational response|plain text|aborted|abort|timeout|timed out/i.test(o)}async function q(e){const{apiKey:t,fallbackModelIds:o,modelId:p,modelSelection:i,...s}=e,c=f.parse(s),a=await x.createCortexAiOpenRouterClient({apiKey:t,modelSelection:i}),u=m.buildCortexAiRoutingPolicy({credentialSource:a.credentialSource,fallbackModelIds:o,requestedModelId:p,selectedModel:a.modelSelection}),d=await m.runWithCortexAiModelFallback({modelIds:u.modelIds,shouldRetry:v,execute:async r=>{const n=new AbortController,l=setTimeout(()=>n.abort(),S);try{const h=m.omitUnsupportedCortexAiModelOptions({abortSignal:n.signal,maxOutputTokens:5e3,maxRetries:0,prompt:H(c),system:M(),temperature:.2},{modelId:r,modelSelection:u.modelSelection}),y=await T.generateText({...h,model:a.model(r)});return w(y.text)}finally{clearTimeout(l)}}});return{attempts:d.attempts,credentialSource:a.credentialSource,html:d.result,modelId:d.modelId}}const N="Built at runtime for HTML-fragment rich-text assistance.";exports.INLINE_HTML_ASSISTANT_SYSTEM_PROMPT=N;exports.generateEditorBlocksRequestSchema=f;exports.generateEditorHtmlFragment=q;exports.validateGeneratedEditorHtmlFragment=w;

package/lib/ai-client.cjs.js

@@ -1 +0,0 @@
-"use strict";var C=Object.create;var R=Object.defineProperty;var m=Object.getOwnPropertyDescriptor;var S=Object.getOwnPropertyNames;var T=Object.getPrototypeOf,y=Object.prototype.hasOwnProperty;var x=(e,t,o,i)=>{if(t&&typeof t=="object"||typeof t=="function")for(let n of S(t))!y.call(e,n)&&n!==o&&R(e,n,{get:()=>t[n],enumerable:!(i=m(t,n))||i.enumerable});return e};var d=(e,t,o)=>(o=e!=null?C(T(e)):{},x(t||!e||!e.__esModule?R(o,"default",{value:e,enumerable:!0}):o,e));Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const I=require("@ai-sdk/openai-compatible"),f=require("ai"),a=require("./ai-config.cjs.js"),r=require("./ai-model-registry.cjs.js"),g=require("./ai-model-catalog.cjs.js"),M="Cortex AI OpenRouter client can only be imported from server-side code.";function l(){if(!(typeof window>"u"))throw new Error(M)}function b(){return l(),{"HTTP-Referer":process.env.NEXT_PUBLIC_URL?.trim()||"https://nextblock.dev","X-Title":a.CORTEX_AI_PACKAGE_NAME}}function E(e){return l(),I.createOpenAICompatible({apiKey:e.apiKey,baseURL:r.CORTEX_AI_OPENROUTER_BASE_URL,fetch:e.fetch,headers:b(),includeUsage:!0,name:"openrouter",supportsStructuredOutputs:!0})}async function K(){l();const{getServiceRoleSupabaseClient:e}=await import("@nextblock-cms/db/server"),t=e(),{data:o,error:i}=await t.from("site_settings").select("value").eq("key",a.CORTEX_AI_OPENROUTER_SETTING_KEY).maybeSingle();if(i)throw new Error(`Failed to load stored Cortex AI OpenRouter key: ${i.message}`);return o?.value?a.decryptStoredOpenRouterApiKey(o.value):null}async function O(){l();const{getServiceRoleSupabaseClient:e}=await import("@nextblock-cms/db/server"),t=e(),{data:o,error:i}=await t.from("site_settings").select("value").eq("key",a.CORTEX_AI_OPENROUTER_MODEL_SELECTION_SETTING_KEY).maybeSingle();if(i)throw new Error(`Failed to load Cortex AI OpenRouter model selection: ${i.message}`);return r.safeParseCortexAiModelSelection(o?.value)}async function p(e){l();const t=e?.apiKey?.trim();if(t)return{apiKey:t,source:"manual"};const o=await K();if(o)return{apiKey:o,source:"stored"};const i=a.getOpenRouterEnvApiKey();return i?{apiKey:i,source:"env"}:{apiKey:null,source:"none"}}async function A(e){l();const t=await p({apiKey:e?.apiKey});if(!t.apiKey||t.source==="none")throw new Error("Cortex AI requires OPENROUTER_API_KEY or an encrypted OpenRouter BYOK in site settings.");const o=E({apiKey:t.apiKey,fetch:e?.fetch}),i=e?.modelSelection!==void 0?e.modelSelection:t.source==="stored"?await O():null;return{credentialSource:t.source,model:n=>o.chatModel(n||"openrouter/free"),modelSelection:i}}async function v({apiKey:e,fallbackModelIds:t,modelId:o,...i}){l();const n=await A({apiKey:e,modelSelection:i.modelSelection}),c=r.buildCortexAiRoutingPolicy({credentialSource:n.credentialSource,fallbackModelIds:t,requestedModelId:o,selectedModel:n.modelSelection}),u=await r.runWithCortexAiModelFallback({modelIds:c.modelIds,execute:s=>{const _=r.omitUnsupportedCortexAiModelOptions({...i,maxRetries:0},{modelId:s,modelSelection:c.modelSelection});return f.generateText({..._,model:n.model(s)})}});return{attempts:u.attempts,credentialSource:n.credentialSource,modelId:u.modelId,result:u.result}}exports.CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY=r.CORTEX_AI_FREE_MODEL_FALLBACK_REGISTRY;exports.CORTEX_AI_MODEL_REGISTRY=r.CORTEX_AI_MODEL_REGISTRY;exports.CORTEX_AI_OPENROUTER_BASE_URL=r.CORTEX_AI_OPENROUTER_BASE_URL;exports.CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL=r.CORTEX_AI_OPENROUTER_FREE_ROUTER_MODEL;exports.CORTEX_AI_REQUIRED_MODEL_PARAMETERS=r.CORTEX_AI_REQUIRED_MODEL_PARAMETERS;exports.CortexAiRoutingError=r.CortexAiRoutingError;exports.buildCortexAiModelFallbackChain=r.buildCortexAiModelFallbackChain;exports.buildCortexAiRoutingPolicy=r.buildCortexAiRoutingPolicy;exports.isOpenRouterRateLimitError=r.isOpenRouterRateLimitError;exports.isOpenRouterRecoverableRoutingError=r.isOpenRouterRecoverableRoutingError;exports.omitUnsupportedCortexAiModelOptions=r.omitUnsupportedCortexAiModelOptions;exports.runWithCortexAiModelFallback=r.runWithCortexAiModelFallback;exports.summarizeCortexAiRoutingError=r.summarizeCortexAiRoutingError;exports.listCortexAiCompatibleOpenRouterModels=g.listCortexAiCompatibleOpenRouterModels;exports.createCortexAiOpenRouterClient=A;exports.createCortexAiOpenRouterProvider=E;exports.generateCortexAiText=v;exports.getStoredCortexAiModelSelection=O;exports.resolveCortexAiOpenRouterCredential=p;

package/lib/ai-config.cjs.js

@@ -1 +0,0 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const u=require("./ai-key-crypto.cjs.js"),i=require("@nextblock-cms/db/secrets"),O="Cortex AI configuration can only be imported from server-side code.";function o(){if(!(typeof window>"u"))throw new Error(O)}const y="cortex-ai",m="NextBlock Cortex AI",R="cortex_ai_openrouter_api_key",K="cortex_ai_openrouter_model_selection",N="cortex_ai_pexels_api_key",I="cortex_ai_unsplash_access_key",l="cortex_ai_unsplash_app_name",a="cortex_ai_agent_settings",p={maxOutputTokens:16e3,maxSteps:8,responseTimeoutMs:12e4,temperature:.1},T={maxOutputTokens:{max:2e5,min:256},maxSteps:{max:100,min:2},responseTimeoutMs:{max:6e5,min:15e3},temperature:{max:2,min:0}};function s(e,t,n,E){const r=typeof e=="number"?e:Number(e);return Number.isFinite(r)?Math.min(n,Math.max(t,r)):E}function c(e){const t=e&&typeof e=="object"&&!Array.isArray(e)?e:{},n=T,E=p,r=t.maxOutputTokens;return{maxOutputTokens:r===null||r==="unlimited"||r===""?null:s(r,n.maxOutputTokens.min,n.maxOutputTokens.max,E.maxOutputTokens??16e3),maxSteps:Math.round(s(t.maxSteps,n.maxSteps.min,n.maxSteps.max,E.maxSteps)),responseTimeoutMs:Math.round(s(t.responseTimeoutMs,n.responseTimeoutMs.min,n.responseTimeoutMs.max,E.responseTimeoutMs)),temperature:s(t.temperature,n.temperature.min,n.temperature.max,E.temperature)}}async function x(e){if(e)try{const{data:t}=await e.from("site_settings").select("value").eq("key",a).maybeSingle();if(t?.value)return c(t.value)}catch{}return{...p}}function _(e){return process.env[e]?.trim()||null}function C(){return o(),_("PEXELS_API_KEY")}function d(){return o(),_("UNSPLASH_ACCESS_KEY")}function A(){return o(),_("OPENROUTER_API_KEY")}function S(){o();const e=A();return{encryptionKey:_("CORTEX_AI_ENCRYPTION_KEY"),freemiusSandboxKey:_("FREEMIUS_AI_SANDBOX_KEY"),hasEncryptionKey:i.hasSecretEncryptionKey(),hasOpenRouterEnvKey:!!e,openRouterEnvKeyLast4:e?e.slice(-4):null}}function f(){o();const e=i.resolveSecretEncryptionKey();if(!e)throw new Error("An encryption key (NEXTBLOCK_ENCRYPTION_KEY, CORTEX_AI_ENCRYPTION_KEY, or a Supabase service-role key) is required to manage stored OpenRouter keys.");return e}function g(e){return u.encryptOpenRouterApiKey({apiKey:e,encryptionSecret:f()})}function v(e){o();const t=i.tryDecryptWithEnvKey(e);if(t===null)throw new Error("Failed to decrypt stored OpenRouter key.");return t}function P(e){return u.getOpenRouterKeyEnvelopeStatus(e)}function G(){o();const e=S();return{hasEnvOpenRouterKey:e.hasOpenRouterEnvKey,maskedEnvOpenRouterKey:e.openRouterEnvKeyLast4?u.getMaskedOpenRouterKey(e.openRouterEnvKeyLast4):null}}exports.CORTEX_AI_AGENT_SETTINGS_BOUNDS=T;exports.CORTEX_AI_AGENT_SETTINGS_DEFAULTS=p;exports.CORTEX_AI_AGENT_SETTINGS_KEY=a;exports.CORTEX_AI_OPENROUTER_MODEL_SELECTION_SETTING_KEY=K;exports.CORTEX_AI_OPENROUTER_SETTING_KEY=R;exports.CORTEX_AI_PACKAGE_ID=y;exports.CORTEX_AI_PACKAGE_NAME=m;exports.CORTEX_AI_PEXELS_SETTING_KEY=N;exports.CORTEX_AI_UNSPLASH_APP_NAME_SETTING_KEY=l;exports.CORTEX_AI_UNSPLASH_SETTING_KEY=I;exports.decryptStoredOpenRouterApiKey=v;exports.encryptStoredOpenRouterApiKey=g;exports.getCortexAiEnvConfig=S;exports.getEnvOpenRouterKeyStatus=G;exports.getOpenRouterEnvApiKey=A;exports.getPexelsEnvApiKey=C;exports.getStoredOpenRouterKeyStatus=P;exports.getUnsplashEnvApiKey=d;exports.normalizeCortexAiAgentSettings=c;exports.resolveCortexAiAgentSettings=x;

package/lib/ai-cortex-widget-builder.cjs.js

@@ -1 +0,0 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const S=require("ai"),x=require("./ai-client.cjs.js"),o=require("./ai-model-registry.cjs.js"),r=require("./cortex-widget-schema.cjs.js"),f=6e4;function y(e){const t=o.getHttpStatusCode(e);if(t===401||t===402||t===403)return!1;if(o.isOpenRouterRecoverableRoutingError(e)||t&&t>=500)return!0;const n=e instanceof Error?e.message:String(e);return/NoObjectGenerated|No object generated|structured output|schema|validation|Invalid|aborted|abort|timeout|timed out/i.test(n)}async function I(e){const{apiKey:t,fallbackModelIds:n,modelId:c,modelSelection:m,...g}=e,a=r.cortexWidgetBuildRequestSchema.parse(g),i=await x.createCortexAiOpenRouterClient({apiKey:t,modelSelection:m}),d=o.buildCortexAiRoutingPolicy({credentialSource:i.credentialSource,fallbackModelIds:n,requestedModelId:c??a.modelId,selectedModel:i.modelSelection}),l=await o.runWithCortexAiModelFallback({modelIds:d.modelIds,shouldRetry:y,execute:async s=>{const u=new AbortController,p=setTimeout(()=>u.abort(),f);try{const b=o.omitUnsupportedCortexAiModelOptions({abortSignal:u.signal,maxOutputTokens:7e3,maxRetries:0,output:"no-schema",prompt:r.buildCortexWidgetBuilderPrompt(a),system:r.buildCortexWidgetBuilderSystemPrompt(),temperature:.15},{modelId:s,modelSelection:d.modelSelection}),C=await S.generateObject({...b,model:i.model(s)});return r.validateCortexWidgetDefinitionOutput(C.object)}finally{clearTimeout(p)}}});return{attempts:l.attempts,credentialSource:i.credentialSource,definition:l.result,modelId:l.modelId}}exports.generateCortexWidgetDefinition=I;

package/lib/ai-global-agent-content-ops-tools.cjs.js

@@ -1 +0,0 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const m=require("ai");require("./zod-config.cjs.js");const r=require("zod"),v="id, file_name, object_key, file_type, width, height, description, folder, created_at";function f(e){if(!e?.supabase)throw new Error("No database connection is available for this tool.");return e.supabase}function c(e){return e?e instanceof Error?e.message:typeof e=="object"&&"message"in e?String(e.message):String(e):"unknown error"}function S(e){return e.normalize("NFD").replace(new RegExp("\\p{Diacritic}","gu"),"").toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,80)}const y=r.z.strictObject({limit:r.z.number().int().min(1).max(100).default(30),query:r.z.string().trim().max(120).optional().describe('Filter on file name or alt text, e.g. "wormwood" or "laboratory".')}),b=r.z.strictObject({altText:r.z.string().trim().max(300).optional().describe("Alt text describing the image. Write real alt text — it is what screen readers announce and what search engines index."),url:r.z.string().trim().min(1).max(2048).describe("Public https URL of the image to bring into the media library.")});async function z(e,i){const t=y.parse(e);let a=f(i).from("media").select(v).order("created_at",{ascending:!1}).limit(t.limit);if(t.query){const s=`%${t.query}%`;a=a.or(`file_name.ilike.${s},description.ilike.${s}`)}const{data:d,error:l}=await a;if(l)throw new Error(`Could not read the media library: ${c(l)}`);return{count:(d??[]).length,media:d??[],success:!0}}async function $(e,i){const t=b.parse(e),o=i?.importExternalImage;if(!o)throw new Error("Media import is not available on this connection.");const a=await o({...t.altText?{altText:t.altText}:{},url:t.url});if("error"in a)throw new Error(`Could not import that image: ${a.error}`);return{mediaId:a.id,mutationExecuted:!0,success:!0}}const x=r.z.strictObject({code:r.z.string().trim().min(2).max(10).describe('Locale code, e.g. "fr", "es", "de". Re-using an existing code updates that language.'),is_active:r.z.boolean().default(!0).describe("Inactive languages are hidden from the public switcher."),is_default:r.z.boolean().default(!1).describe("Make this the site default. Only one language can be default; setting it clears the others."),name:r.z.string().trim().min(1).max(80).describe('Display name, e.g. "Français".')});async function I(e,i){const t=x.parse(e),o=f(i),a=t.code.toLowerCase(),{data:d}=await o.from("languages").select("id, code").eq("code",a).maybeSingle(),l={code:a,is_active:t.is_active,name:t.name};let s=d?.id;if(s){const{error:u}=await o.from("languages").update(l).eq("id",s);if(u)throw new Error(`Could not update the "${a}" language: ${c(u)}`)}else{const{data:u,error:n}=await o.from("languages").insert(l).select("id").single();if(n||!u?.id)throw new Error(`Could not create the "${a}" language: ${c(n)}`);s=u.id}if(t.is_default){const{error:u}=await o.from("languages").update({is_default:!1}).neq("id",s);if(u)throw new Error(`Could not clear the previous default language: ${c(u)}`);const{error:n}=await o.from("languages").update({is_default:!0}).eq("id",s);if(n)throw new Error(`Could not set the default language: ${c(n)}`)}try{i?.revalidatePath?.("/","layout")}catch{}return{code:a,created:!d,languageId:s,mutationExecuted:!0,success:!0}}const _=r.z.strictObject({action:r.z.enum(["upsert","delete"]).default("upsert"),description:r.z.string().max(1e3).nullable().optional(),name:r.z.string().trim().min(1).max(120).describe('Category name, e.g. "Digestive Health".'),name_translations:r.z.record(r.z.string(),r.z.string()).optional().describe('Translated names keyed by locale code, e.g. { "fr": "Santé digestive" }.'),productSlugs:r.z.array(r.z.string().trim().min(1).max(300)).max(100).optional().describe("Product slugs to place in this category. Replaces the category's current membership."),slug:r.z.string().trim().min(1).max(120).optional().describe("URL slug. Derived from the name when omitted. Re-using a slug updates that category.")});async function L(e,i){const t=_.parse(e),o=f(i),a=t.slug?S(t.slug):S(t.name),{data:d}=await o.from("categories").select("id, name, slug").eq("slug",a).maybeSingle();if(t.action==="delete"){if(!d?.id)return{message:`No category with slug "${a}".`,mutationExecuted:!1,success:!1};const{error:n}=await o.from("categories").delete().eq("id",d.id);if(n)throw new Error(`Could not delete the category: ${c(n)}`);return{action:"delete",mutationExecuted:!0,slug:a,success:!0}}const l={name:t.name,slug:a,...t.description!==void 0?{description:t.description}:{},...t.name_translations?{name_translations:t.name_translations}:{}};let s=d?.id;if(s){const{error:n}=await o.from("categories").update(l).eq("id",s);if(n)throw new Error(`Could not update the category: ${c(n)}`)}else{const{data:n,error:g}=await o.from("categories").insert(l).select("id").single();if(g||!n?.id)throw new Error(`Could not create the category: ${c(g)}`);s=n.id}let u=0;if(t.productSlugs){const{data:n,error:g}=await o.from("products").select("id, slug").in("slug",t.productSlugs);if(g)throw new Error(`Could not resolve those products: ${c(g)}`);const p=n??[],C=t.productSlugs.filter(h=>!p.some(w=>w.slug===h));if(C.length>0)throw new Error(`No product found for slug(s): ${C.join(", ")}.`);const{error:E}=await o.from("product_categories").delete().eq("category_id",s);if(E)throw new Error(`Could not clear the category's products: ${c(E)}`);if(p.length>0){const{error:h}=await o.from("product_categories").insert(p.map(w=>({category_id:s,product_id:w.id})));if(h)throw new Error(`Could not add products to the category: ${c(h)}`);u=p.length}}return{categoryId:s,created:!d,linkedProducts:u,mutationExecuted:!0,slug:a,success:!0}}const M=r.z.strictObject({});async function q(e,i){const t=f(i),{data:o,error:a}=await t.from("categories").select("id, name, slug, description, name_translations").order("name");if(a)throw new Error(`Could not read the categories: ${c(a)}`);return{categories:o??[],count:(o??[]).length,success:!0}}function P(e){return{list_media:m.tool({description:"Browse the media library: file names, alt text, dimensions, and media ids. Read-only. Call this BEFORE importing an image so you reuse what is already stored instead of creating a duplicate — the returned `id` can be passed anywhere a media id or image reference is accepted (feature_image_id, product images, an image block).",execute:i=>z(i,e),inputSchema:y,strict:!0}),list_product_categories:m.tool({description:"List the product categories, with their slugs and translated names. Read-only. Use before creating one so an existing category is reused, and to get ids for a product_grid block filtered by category.",execute:i=>q(i,e),inputSchema:M,strict:!0}),manage_language:m.tool({description:"Add or update a site language, so the CMS can hold content in that locale. Creating the language is the FIRST step of making a site multilingual — translate_page cannot target a locale that does not exist yet. Re-using a code updates that language; set is_default to change the site default.",execute:i=>I(i,e),inputSchema:x,strict:!0}),manage_product_category:m.tool({description:"Create, update, or delete a product category, and optionally set exactly which products belong to it by slug. Categories are what a product_grid block filters on, so create these before building a shop page that shows one section of the catalogue. Passing productSlugs REPLACES the category's membership.",execute:i=>L(i,e),inputSchema:_,strict:!0}),upload_media:m.tool({description:"Import an image from a public https URL into the media library and return its media id, without attaching it to anything. Useful when you want one asset reused across several places — otherwise passing the URL straight to create_cms_product `images` or a page/post `feature_image_id` imports it in the same call. Check list_media first to avoid duplicates.",execute:i=>$(i,e),inputSchema:b,strict:!0})}}exports.createCortexContentOpsTools=P;exports.executeListMedia=z;exports.executeListProductCategories=q;exports.executeManageLanguage=I;exports.executeManageProductCategory=L;exports.executeUploadMedia=$;exports.listMediaInputSchema=y;exports.listProductCategoriesInputSchema=M;exports.manageLanguageInputSchema=x;exports.manageProductCategoryInputSchema=_;exports.uploadMediaInputSchema=b;