@revealui/ai 0.2.7 → 0.2.9

package/dist/memory/sync/sync-manager.d.ts

@@ -0,0 +1,104 @@
+/**
+ * CRDT Sync Manager
+ *
+ * Coordinates state synchronization between distributed nodes.
+ * Supports both full-state merge and delta-based sync via the operation log.
+ *
+ * Architecture:
+ * - State-based sync: serialize → transfer → merge (simple, higher bandwidth)
+ * - Op-based sync: log ops → transfer deltas → replay (efficient, requires op log)
+ * - Anti-entropy: periodic full-state reconciliation to catch missed ops
+ *
+ * Transport-agnostic: the SyncManager produces/consumes serialized payloads.
+ * The actual transport (HTTP, WebSocket, message queue) is the caller's concern.
+ */
+import type { LWWRegisterData } from '../crdt/lww-register.js';
+import type { ORSetData } from '../crdt/or-set.js';
+import type { PNCounterData } from '../crdt/pn-counter.js';
+import type { CRDTOperationPayload, CRDTPersistence, CRDTType } from '../persistence/crdt-persistence.js';
+import type { WorkingMemory } from '../stores/working-memory.js';
+export interface SyncState {
+    /** CRDT instance identifier */
+    crdtId: string;
+    /** Node that produced this state */
+    sourceNodeId: string;
+    /** Timestamp of this state snapshot */
+    timestamp: number;
+    /** Serialized CRDT states (composite) */
+    states: Record<string, LWWRegisterData<unknown> | ORSetData<unknown> | PNCounterData>;
+}
+export interface SyncDelta {
+    /** CRDT instance identifier */
+    crdtId: string;
+    /** Node that produced these operations */
+    sourceNodeId: string;
+    /** Operations since last sync point */
+    operations: CRDTOperationPayload[];
+    /** Timestamp of the last synced operation (for next delta request) */
+    lastSyncTimestamp: number;
+}
+export interface SyncResult {
+    /** Whether state changed as a result of sync */
+    changed: boolean;
+    /** Number of operations applied */
+    operationsApplied: number;
+    /** Number of conflicts resolved */
+    conflictsResolved: number;
+    /** Timestamp to use for next delta sync */
+    syncTimestamp: number;
+}
+export declare class SyncManager {
+    private nodeId;
+    private persistence;
+    /** Tracks the last sync timestamp per remote node */
+    private syncPoints;
+    constructor(nodeId: string, persistence: CRDTPersistence);
+    /**
+     * Produces a full-state snapshot for transfer to another node.
+     * The receiving node calls `mergeRemoteState()` with this payload.
+     */
+    getLocalState(crdtId: string): Promise<SyncState>;
+    /**
+     * Merges a remote node's full state into local state.
+     * Uses CRDT merge semantics  -  order doesn't matter, result is deterministic.
+     *
+     * @returns WorkingMemory with merged state (caller decides whether to persist)
+     */
+    mergeRemoteWorkingMemory(local: WorkingMemory, remote: WorkingMemory): {
+        merged: WorkingMemory;
+        changed: boolean;
+    };
+    /**
+     * Produces a delta payload (operations since a timestamp) for efficient sync.
+     * The receiving node calls `applyDelta()` with this payload.
+     */
+    getDelta(crdtId: string, since: number): Promise<SyncDelta>;
+    /**
+     * Applies a delta from a remote node by replaying operations.
+     * Logs each remote operation locally for future delta requests from other nodes.
+     */
+    applyDelta(delta: SyncDelta): Promise<SyncResult>;
+    /**
+     * Logs a local operation to the persistence layer.
+     * Called by memory stores when they mutate CRDT state.
+     */
+    logOperation(crdtId: string, crdtType: CRDTType, operationType: CRDTOperationPayload['operationType'], payload: Record<string, unknown>): Promise<void>;
+    /**
+     * Gets the last sync timestamp for a remote node.
+     * Used to request only new operations on the next sync.
+     */
+    getSyncPoint(remoteNodeId: string): number;
+    /**
+     * Sets the sync point for a remote node (e.g., after initial full-state sync).
+     */
+    setSyncPoint(remoteNodeId: string, timestamp: number): void;
+    /**
+     * Gets all tracked sync points.
+     */
+    getAllSyncPoints(): Map<string, number>;
+    /**
+     * Gets this manager's node ID.
+     */
+    getNodeId(): string;
+}
+//# sourceMappingURL=sync-manager.d.ts.map

package/dist/memory/sync/sync-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-manager.d.ts","sourceRoot":"","sources":["../../../src/memory/sync/sync-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EACV,oBAAoB,EACpB,eAAe,EACf,QAAQ,EACT,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAMjE,MAAM,WAAW,SAAS;IACxB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,SAAS;IACxB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,UAAU,EAAE,oBAAoB,EAAE,CAAC;IACnC,sEAAsE;IACtE,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,gDAAgD;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,mCAAmC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mCAAmC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,2CAA2C;IAC3C,aAAa,EAAE,MAAM,CAAC;CACvB;AAMD,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAkB;IACrC,qDAAqD;IACrD,OAAO,CAAC,UAAU,CAAkC;gBAExC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe;IAKxD;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAmBvD;;;;;OAKG;IACH,wBAAwB,CACtB,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,aAAa,GACpB;QAAE,MAAM,EAAE,aAAa,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE;IAgB9C;;;OAGG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAYjE;;;OAGG;IACG,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IAyBvD;;;OAGG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,EAClB,aAAa,EAAE,oBAAoB,CAAC,eAAe,CAAC,EACpD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC;IAWhB;;;OAGG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;IAI1C;;OAEG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAI3D;;OAEG;IACH,gBAAgB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAIvC;;OAEG;IACH,SAAS,IAAI,MAAM;CAGpB"}

package/dist/memory/sync/sync-manager.js

@@ -0,0 +1,137 @@
+/**
+ * CRDT Sync Manager
+ *
+ * Coordinates state synchronization between distributed nodes.
+ * Supports both full-state merge and delta-based sync via the operation log.
+ *
+ * Architecture:
+ * - State-based sync: serialize → transfer → merge (simple, higher bandwidth)
+ * - Op-based sync: log ops → transfer deltas → replay (efficient, requires op log)
+ * - Anti-entropy: periodic full-state reconciliation to catch missed ops
+ *
+ * Transport-agnostic: the SyncManager produces/consumes serialized payloads.
+ * The actual transport (HTTP, WebSocket, message queue) is the caller's concern.
+ */
+// =============================================================================
+// SyncManager
+// =============================================================================
+export class SyncManager {
+    nodeId;
+    persistence;
+    /** Tracks the last sync timestamp per remote node */
+    syncPoints = new Map();
+    constructor(nodeId, persistence) {
+        this.nodeId = nodeId;
+        this.persistence = persistence;
+    }
+    /**
+     * Produces a full-state snapshot for transfer to another node.
+     * The receiving node calls `mergeRemoteState()` with this payload.
+     */
+    async getLocalState(crdtId) {
+        const states = await this.persistence.loadCompositeState(crdtId);
+        const stateRecord = {};
+        for (const [key, data] of states) {
+            stateRecord[key] = data;
+        }
+        return {
+            crdtId,
+            sourceNodeId: this.nodeId,
+            timestamp: Date.now(),
+            states: stateRecord,
+        };
+    }
+    /**
+     * Merges a remote node's full state into local state.
+     * Uses CRDT merge semantics  -  order doesn't matter, result is deterministic.
+     *
+     * @returns WorkingMemory with merged state (caller decides whether to persist)
+     */
+    mergeRemoteWorkingMemory(local, remote) {
+        const localData = local.toData();
+        const remoteData = remote.toData();
+        // Quick equality check  -  if timestamps match, nothing changed
+        if (localData.context.timestamp === remoteData.context.timestamp &&
+            localData.sessionState.timestamp === remoteData.sessionState.timestamp) {
+            return { merged: local, changed: false };
+        }
+        const merged = local.merge(remote);
+        return { merged, changed: true };
+    }
+    /**
+     * Produces a delta payload (operations since a timestamp) for efficient sync.
+     * The receiving node calls `applyDelta()` with this payload.
+     */
+    async getDelta(crdtId, since) {
+        const operations = await this.persistence.getOperationsSince(crdtId, since);
+        return {
+            crdtId,
+            sourceNodeId: this.nodeId,
+            operations,
+            lastSyncTimestamp: operations.length > 0 ? (operations[operations.length - 1]?.timestamp ?? since) : since,
+        };
+    }
+    /**
+     * Applies a delta from a remote node by replaying operations.
+     * Logs each remote operation locally for future delta requests from other nodes.
+     */
+    async applyDelta(delta) {
+        let applied = 0;
+        for (const op of delta.operations) {
+            // Skip operations from our own node (already applied locally)
+            if (op.nodeId === this.nodeId) {
+                continue;
+            }
+            // Log the remote operation locally
+            await this.persistence.appendOperation(op);
+            applied++;
+        }
+        // Update sync point for this remote node
+        this.syncPoints.set(delta.sourceNodeId, delta.lastSyncTimestamp);
+        return {
+            changed: applied > 0,
+            operationsApplied: applied,
+            conflictsResolved: 0, // CRDTs resolve conflicts automatically
+            syncTimestamp: delta.lastSyncTimestamp,
+        };
+    }
+    /**
+     * Logs a local operation to the persistence layer.
+     * Called by memory stores when they mutate CRDT state.
+     */
+    async logOperation(crdtId, crdtType, operationType, payload) {
+        await this.persistence.appendOperation({
+            crdtId,
+            crdtType,
+            operationType,
+            payload,
+            nodeId: this.nodeId,
+            timestamp: Date.now(),
+        });
+    }
+    /**
+     * Gets the last sync timestamp for a remote node.
+     * Used to request only new operations on the next sync.
+     */
+    getSyncPoint(remoteNodeId) {
+        return this.syncPoints.get(remoteNodeId) ?? 0;
+    }
+    /**
+     * Sets the sync point for a remote node (e.g., after initial full-state sync).
+     */
+    setSyncPoint(remoteNodeId, timestamp) {
+        this.syncPoints.set(remoteNodeId, timestamp);
+    }
+    /**
+     * Gets all tracked sync points.
+     */
+    getAllSyncPoints() {
+        return new Map(this.syncPoints);
+    }
+    /**
+     * Gets this manager's node ID.
+     */
+    getNodeId() {
+        return this.nodeId;
+    }
+}

package/dist/memory/utils/validation.js

@@ -118,7 +118,7 @@ export function estimateObjectSize(obj) {
     const type = typeof obj;
     if (type === 'string') {
         // UTF-16 char units × 2 bytes each. This over-estimates multi-byte UTF-8 code
-        // points but is intentionally conservative — the limit stays tighter than the
+        // points but is intentionally conservative  -  the limit stays tighter than the
         // real in-process memory cost, which is what we want for a safety bound.
         return obj.length * 2 + 8;
     }

package/dist/memory/vector/vector-memory-service.d.ts

@@ -41,7 +41,7 @@ export declare class VectorMemoryService {
     /**
      * Search for similar memories using vector similarity.
      *
-     * @param queryEmbedding - Query embedding vector (768 dimensions — Ollama nomic-embed-text)
+     * @param queryEmbedding - Query embedding vector (768 dimensions  -  Ollama nomic-embed-text)
      * @param options - Search options (filtering, limits, etc.)
      * @returns Array of memories with similarity scores, sorted by similarity (highest first)
      *

package/dist/memory/vector/vector-memory-service.js

@@ -42,7 +42,7 @@ export class VectorMemoryService {
     /**
      * Search for similar memories using vector similarity.
      *
-     * @param queryEmbedding - Query embedding vector (768 dimensions — Ollama nomic-embed-text)
+     * @param queryEmbedding - Query embedding vector (768 dimensions  -  Ollama nomic-embed-text)
      * @param options - Search options (filtering, limits, etc.)
      * @returns Array of memories with similarity scores, sorted by similarity (highest first)
      *

package/dist/orchestration/agent.d.ts

@@ -22,7 +22,7 @@ export interface AgentConfig {
     webSearchProvider?: WebSearchProvider;
     /**
      * Capability tags used by AgentOrchestrator.findBestAgent() for routing.
-     * Example: ['cms', 'search', 'ticket', 'summarize']
+     * Example: ['admin', 'search', 'ticket', 'summarize']
      */
     capabilities?: string[];
 }
@@ -70,7 +70,7 @@ export interface Agent {
      */
     tools: Tool[];
     /**
-     * Memory system (optional — agents without memory skip episodic recall)
+     * Memory system (optional  -  agents without memory skip episodic recall)
      */
     memory?: EpisodicMemory;
     /**

package/dist/orchestration/defaults.d.ts

@@ -15,7 +15,7 @@ import type { Tool } from '../tools/base.js';
 export declare const WORKSPACE_AGENT_DEFAULT_TOOLS: Tool[];
 /**
  * Returns the workspace agent default tool set, optionally merged with
- * additional tools (e.g. CMS tools, MCP-discovered tools).
+ * additional tools (e.g. admin tools, MCP-discovered tools).
  */
 export declare function getWorkspaceAgentTools(additionalTools?: Tool[]): Tool[];
 //# sourceMappingURL=defaults.d.ts.map

package/dist/orchestration/defaults.js

@@ -15,7 +15,7 @@ import { webSearchTool } from '../tools/web/index.js';
 export const WORKSPACE_AGENT_DEFAULT_TOOLS = [webSearchTool];
 /**
  * Returns the workspace agent default tool set, optionally merged with
- * additional tools (e.g. CMS tools, MCP-discovered tools).
+ * additional tools (e.g. admin tools, MCP-discovered tools).
  */
 export function getWorkspaceAgentTools(additionalTools = []) {
     return [...WORKSPACE_AGENT_DEFAULT_TOOLS, ...additionalTools];

package/dist/orchestration/orchestrator.d.ts

@@ -51,11 +51,11 @@ export declare class AgentOrchestrator {
      * Find the best agent for a task.
      *
      * Routing priority:
-     * 1. Capability intersection — agent whose AgentConfig.capabilities overlaps
+     * 1. Capability intersection  -  agent whose AgentConfig.capabilities overlaps
      *    with task.requiredCapabilities (highest-overlap agent wins)
-     * 2. Tool-name substring match — agent has a tool whose name includes the
+     * 2. Tool-name substring match  -  agent has a tool whose name includes the
      *    task type string (legacy fallback)
-     * 3. First registered agent — last-resort fallback
+     * 3. First registered agent  -  last-resort fallback
      */
     private findBestAgent;
     /**

package/dist/orchestration/orchestrator.js

@@ -92,11 +92,11 @@ export class AgentOrchestrator {
      * Find the best agent for a task.
      *
      * Routing priority:
-     * 1. Capability intersection — agent whose AgentConfig.capabilities overlaps
+     * 1. Capability intersection  -  agent whose AgentConfig.capabilities overlaps
      *    with task.requiredCapabilities (highest-overlap agent wins)
-     * 2. Tool-name substring match — agent has a tool whose name includes the
+     * 2. Tool-name substring match  -  agent has a tool whose name includes the
      *    task type string (legacy fallback)
-     * 3. First registered agent — last-resort fallback
+     * 3. First registered agent  -  last-resort fallback
      */
     findBestAgent(task) {
         // 1. Capability-based routing

package/dist/orchestration/runtime.d.ts

@@ -10,7 +10,7 @@ import type { MCPToolSource } from '../tools/mcp-adapter.js';
 import type { Agent, AgentResult, Task } from './agent.js';
 /**
  * Controls how much of the model's token budget is allocated to internal reasoning.
- * Applies to Anthropic Claude only — ignored by other providers.
+ * Applies to Anthropic Claude only  -  ignored by other providers.
  *
  * | Level   | Budget (tokens) | Use case                          |
  * |---------|-----------------|-----------------------------------|

package/dist/orchestration/runtime.js

@@ -176,7 +176,7 @@ export class AgentRuntime {
                         const needsApproval = tool.requiresApproval || this.config.alwaysRequireApproval?.includes(tool.name);
                         if (needsApproval) {
                             if (!this.config.approvalCallback) {
-                                // No approval callback — deny by default
+                                // No approval callback  -  deny by default
                                 const denied = {
                                     success: false,
                                     error: `Tool "${tool.label ?? tool.name}" requires human approval but no approval handler is configured.`,

package/dist/orchestration/streaming-runtime.d.ts

@@ -5,7 +5,7 @@
  * Each yielded AgentStreamChunk maps to one SSE event.
  *
  * AnythingLLM lesson: SSE is the correct approach for unidirectional LLM output.
- * EventSource is not used client-side because it doesn't support POST — use fetch + ReadableStream.
+ * EventSource is not used client-side because it doesn't support POST  -  use fetch + ReadableStream.
  */
 import type { LLMClient } from '../llm/client.js';
 import type { ToolResult } from '../tools/base.js';
@@ -29,7 +29,7 @@ export declare class StreamingAgentRuntime extends AgentRuntime {
     constructor(config?: RuntimeConfig);
     /**
      * Stream a task execution, yielding typed events as they occur.
-     * Accepts an AbortSignal — on abort, emits an error event and stops.
+     * Accepts an AbortSignal  -  on abort, emits an error event and stops.
      */
     streamTask(agent: Agent, task: Task, llmClient: LLMClient, signal?: AbortSignal): AsyncGenerator<AgentStreamChunk>;
 }

package/dist/orchestration/streaming-runtime.js

@@ -5,7 +5,7 @@
  * Each yielded AgentStreamChunk maps to one SSE event.
  *
  * AnythingLLM lesson: SSE is the correct approach for unidirectional LLM output.
- * EventSource is not used client-side because it doesn't support POST — use fetch + ReadableStream.
+ * EventSource is not used client-side because it doesn't support POST  -  use fetch + ReadableStream.
  */
 import { z } from 'zod/v4';
 import { compressToolResult } from '../inference/tool-result-compressor.js';
@@ -17,7 +17,7 @@ export class StreamingAgentRuntime extends AgentRuntime {
     }
     /**
      * Stream a task execution, yielding typed events as they occur.
-     * Accepts an AbortSignal — on abort, emits an error event and stops.
+     * Accepts an AbortSignal  -  on abort, emits an error event and stops.
      */
     async *streamTask(agent, task, llmClient, signal) {
         const startTime = Date.now();

package/dist/orchestration/ticket-agent.d.ts

@@ -4,8 +4,8 @@
  * Closes the loop between the ticketing system and the AI agent system.
  *
  * Flow:
- *   Ticket (title + description) → Task → Agent (CMS tools + ticket tools)
- *   → agentic loop → CMS mutations + ticket status updated + comment written
+ *   Ticket (title + description) → Task → Agent (admin tools + ticket tools)
+ *   → agentic loop → admin mutations + ticket status updated + comment written
  *
  * Usage:
  *   const dispatcher = new TicketAgentDispatcher({ llmClient, apiClient, ticketClient })
@@ -14,7 +14,7 @@
 import type { Database } from '@revealui/db/client';
 import type { LLMClient } from '../llm/client.js';
 import type { EpisodicMemory } from '../memory/stores/episodic-memory.js';
-import type { CMSAPIClient, CollectionMetadata, GlobalMetadata } from '../tools/cms/factory.js';
+import type { AdminAPIClient, CollectionMetadata, GlobalMetadata } from '../tools/admin/factory.js';
 import type { TicketMutationClient } from '../tools/ticket-tools.js';
 import type { AgentResult } from './agent.js';
 export interface TicketInput {
@@ -28,22 +28,22 @@ export interface TicketInput {
 export interface TicketAgentConfig {
     /** LLM client (Anthropic, OpenAI, etc.) */
     llmClient: LLMClient;
-    /** CMS API client — used to inject into CMS tools */
-    apiClient: CMSAPIClient;
-    /** Ticket mutation client — used to update status and add comments */
+    /** admin API client  -  used to inject into admin tools */
+    apiClient: AdminAPIClient;
+    /** Ticket mutation client  -  used to update status and add comments */
     ticketClient: TicketMutationClient;
-    /** Available CMS collections (optional, improves tool descriptions) */
+    /** Available admin collections (optional, improves tool descriptions) */
     collections?: CollectionMetadata[];
-    /** Available CMS globals (optional) */
+    /** Available admin globals (optional) */
     globals?: GlobalMetadata[];
     /**
      * Memory instance to share across dispatches (optional).
-     * If omitted, each dispatch uses a no-op stub — the runtime does not
+     * If omitted, each dispatch uses a no-op stub  -  the runtime does not
      * call agent.memory directly, so this is safe for stateless dispatch.
      */
     memory?: EpisodicMemory;
     /**
-     * Database client — enables the document_summarize tool.
+     * Database client  -  enables the document_summarize tool.
      * If omitted, the summarizer tool is not included in the agent's toolset.
      */
     db?: Database;
@@ -61,7 +61,7 @@ export declare class TicketAgentDispatcher {
      *
      * The agent will:
      * - Receive the ticket as its task description
-     * - Have access to all CMS tools (create/update/delete content, globals, media, users)
+     * - Have access to all admin tools (create/update/delete content, globals, media, users)
      * - Have access to ticket mutation tools (update status, add comment)
      * - Run the agentic loop until done or max iterations
      */

package/dist/orchestration/ticket-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ticket-agent.d.ts","sourceRoot":"","sources":["../../src/orchestration/ticket-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,KAAK,EACV,YAAY,EAEZ,kBAAkB,EAClB,cAAc,EACf,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGrE,OAAO,KAAK,EAAS,WAAW,EAAQ,MAAM,YAAY,CAAC;AAG3D,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,0GAA0G;IAC1G,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,SAAS,EAAE,SAAS,CAAC;IAErB,qDAAqD;IACrD,SAAS,EAAE,YAAY,CAAC;IAExB,sEAAsE;IACtE,YAAY,EAAE,oBAAoB,CAAC;IAEnC,uEAAuE;IACvE,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAEnC,uCAAuC;IACvC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAE3B;;;;OAIG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB;;;OAGG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC;IAEd,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAwDD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,YAAY,CAAoB;gBAE5B,MAAM,EAAE,iBAAiB;IAUrC;;;;;;;;OAQG;IACG,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;CAwD1D"}
+{"version":3,"file":"ticket-agent.d.ts","sourceRoot":"","sources":["../../src/orchestration/ticket-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,KAAK,EACV,cAAc,EAEd,kBAAkB,EAClB,cAAc,EACf,MAAM,2BAA2B,CAAC;AAGnC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGrE,OAAO,KAAK,EAAS,WAAW,EAAQ,MAAM,YAAY,CAAC;AAG3D,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,0GAA0G;IAC1G,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,SAAS,EAAE,SAAS,CAAC;IAErB,2DAA2D;IAC3D,SAAS,EAAE,cAAc,CAAC;IAE1B,wEAAwE;IACxE,YAAY,EAAE,oBAAoB,CAAC;IAEnC,yEAAyE;IACzE,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAEnC,yCAAyC;IACzC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAE3B;;;;OAIG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB;;;OAGG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC;IAEd,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAwDD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,YAAY,CAAoB;gBAE5B,MAAM,EAAE,iBAAiB;IAUrC;;;;;;;;OAQG;IACG,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;CAwD1D"}

package/dist/orchestration/ticket-agent.js

@@ -4,14 +4,14 @@
  * Closes the loop between the ticketing system and the AI agent system.
  *
  * Flow:
- *   Ticket (title + description) → Task → Agent (CMS tools + ticket tools)
- *   → agentic loop → CMS mutations + ticket status updated + comment written
+ *   Ticket (title + description) → Task → Agent (admin tools + ticket tools)
+ *   → agentic loop → admin mutations + ticket status updated + comment written
  *
  * Usage:
  *   const dispatcher = new TicketAgentDispatcher({ llmClient, apiClient, ticketClient })
  *   const result = await dispatcher.dispatch(ticket)
  */
-import { createCMSTools } from '../tools/cms/factory.js';
+import { createAdminTools } from '../tools/admin/factory.js';
 import { createDocumentSummarizerTool } from '../tools/document-summarizer.js';
 import { createTicketTools } from '../tools/ticket-tools.js';
 import { webScraperTool } from '../tools/web/scraper.js';
@@ -61,7 +61,7 @@ function buildInstructions(ticket) {
 
 Your job is to:
 1. Understand the intent of the ticket
-2. Use the available CMS tools to take the necessary actions (create, update, or delete content)
+2. Use the available admin tools to take the necessary actions (create, update, or delete content)
 3. When your work is done, call add_ticket_comment to summarize what you did
 4. Finally, call update_ticket_status with status="done"
 5. If you cannot complete the task, call add_ticket_comment to explain why, then update_ticket_status with status="blocked"
@@ -91,21 +91,21 @@ export class TicketAgentDispatcher {
      *
      * The agent will:
      * - Receive the ticket as its task description
-     * - Have access to all CMS tools (create/update/delete content, globals, media, users)
+     * - Have access to all admin tools (create/update/delete content, globals, media, users)
      * - Have access to ticket mutation tools (update status, add comment)
      * - Run the agentic loop until done or max iterations
      */
     async dispatch(ticket) {
         const { apiClient, ticketClient, collections, globals, memory: sharedMemory, db } = this.config;
-        // Build tool set: CMS tools + ticket mutation tools + web scraper + optional summarizer
+        // Build tool set: admin tools + ticket mutation tools + web scraper + optional summarizer
         const cmsConfig = { apiClient, collections, globals };
-        const cmsTools = createCMSTools(cmsConfig);
+        const cmsTools = createAdminTools(cmsConfig);
         const ticketTools = createTicketTools(ticket.id, ticketClient);
         const extraTools = db
             ? [webScraperTool, createDocumentSummarizerTool(db, this.config.llmClient)]
             : [webScraperTool];
         const tools = [...cmsTools, ...ticketTools, ...extraTools];
-        // The runtime does not call agent.memory — satisfy the interface with a stub when no
+        // The runtime does not call agent.memory  -  satisfy the interface with a stub when no
         // shared memory instance is provided. Cast is safe: only runtime touches this field.
         const memory = (sharedMemory ?? {});
         const agent = {
@@ -119,7 +119,7 @@ export class TicketAgentDispatcher {
                     agentId: `ticket-agent-${ticket.id}`,
                     currentTask: {
                         id: ticket.id,
-                        type: ticket.type ?? 'cms',
+                        type: ticket.type ?? 'admin',
                         description: descriptionToString(ticket.description),
                     },
                 };
@@ -133,7 +133,7 @@ export class TicketAgentDispatcher {
             : ticket.title;
         const task = {
             id: ticket.id,
-            type: ticket.type ?? 'cms',
+            type: ticket.type ?? 'admin',
             description: taskDescription,
             priority: ticket.priority === 'critical' ? 1 : ticket.priority === 'high' ? 2 : 3,
         };

package/dist/skills/catalog/vercel-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vercel-catalog.d.ts","sourceRoot":"","sources":["../../../src/skills/catalog/vercel-catalog.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAmB,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7F;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAiBD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAgC3F;AAiHD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,SAAK,EACV,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAO/B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAKzD"}
+{"version":3,"file":"vercel-catalog.d.ts","sourceRoot":"","sources":["../../../src/skills/catalog/vercel-catalog.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAmB,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7F;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAiBD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAgC3F;AAkHD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,SAAK,EACV,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAO/B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAKzD"}

package/dist/skills/catalog/vercel-catalog.js

@@ -64,15 +64,18 @@ export async function fetchVercelCatalog(config = {}) {
  * Load catalog from cache if valid.
  */
 function loadFromCache(cachePath, ttl) {
-    if (!fs.existsSync(cachePath)) {
+    // Read first to avoid TOCTOU between stat and read (file could disappear between calls)
+    let content;
+    try {
+        content = fs.readFileSync(cachePath, 'utf-8');
+    }
+    catch {
         return null;
     }
-    const stats = fs.statSync(cachePath);
-    const age = Date.now() - stats.mtimeMs;
+    const age = Date.now() - fs.statSync(cachePath).mtimeMs;
     if (age > ttl) {
         return null;
     }
-    const content = fs.readFileSync(cachePath, 'utf-8');
     return JSON.parse(content);
 }
 /**

package/dist/skills/loader/github-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github-loader.d.ts","sourceRoot":"","sources":["../../../src/skills/loader/github-loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAezC;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CA+B9D;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAElB,uCAAuC;IACvC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;IAE1B,sCAAsC;IACtC,QAAQ,EAAE,aAAa,CAAC;IAExB,6CAA6C;IAC7C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,wCAAwC;IACxC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,CAgE/F;AAmED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,CAS5B;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAY3E"}
+{"version":3,"file":"github-loader.d.ts","sourceRoot":"","sources":["../../../src/skills/loader/github-loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAezC;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CA+B9D;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAElB,uCAAuC;IACvC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;IAE1B,sCAAsC;IACtC,QAAQ,EAAE,aAAa,CAAC;IAExB,6CAA6C;IAC7C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,wCAAwC;IACxC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,CAkE/F;AAmED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,CAS5B;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAY3E"}

package/dist/skills/loader/github-loader.js

@@ -59,6 +59,8 @@ export function parseGitHubSource(source) {
  */
 export async function loadFromGitHub(source, options) {
     const parsed = parseGitHubSource(source);
+    validateGitArg(parsed.owner, 'owner');
+    validateGitArg(parsed.repo, 'repo');
     const repoUrl = `https://github.com/${parsed.owner}/${parsed.repo}.git`;
     // Determine skill name from path or repo name
     const skillName = parsed.path ? path.basename(parsed.path) : parsed.repo;

package/dist/skills/loader/local-loader.js

@@ -94,7 +94,7 @@ export async function loadAllFromDirectory(dir, options) {
             skills.push(skill);
         }
         catch {
-            // Skip malformed or unreadable skill files — partial load is better than a hard crash
+            // Skip malformed or unreadable skill files  -  partial load is better than a hard crash
         }
     }
     return skills;

package/dist/skills/loader/vercel-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vercel-loader.d.ts","sourceRoot":"","sources":["../../../src/skills/loader/vercel-loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EACV,UAAU,EAIX,MAAM,mBAAmB,CAAC;AAgB3B;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAElB,uCAAuC;IACvC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;IAE1B,sCAAsC;IACtC,QAAQ,EAAE,aAAa,CAAC;IAExB,6CAA6C;IAC7C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,wCAAwC;IACxC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,KAAK,CAAC,CAgFhB;AAgLD;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,UAAU,CAAC,CAyCrB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,KAAK,CAAC,CAwBhB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO7D"}
+{"version":3,"file":"vercel-loader.d.ts","sourceRoot":"","sources":["../../../src/skills/loader/vercel-loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EACV,UAAU,EAIX,MAAM,mBAAmB,CAAC;AAgB3B;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAElB,uCAAuC;IACvC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;IAE1B,sCAAsC;IACtC,QAAQ,EAAE,aAAa,CAAC;IAExB,6CAA6C;IAC7C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,wCAAwC;IACxC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,KAAK,CAAC,CAgFhB;AAkLD;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,UAAU,CAAC,CAyCrB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,KAAK,CAAC,CAwBhB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO7D"}

package/dist/skills/loader/vercel-loader.js

@@ -182,6 +182,8 @@ function extractInstallPath(output, baseDir, source) {
  * @returns Installation path
  */
 async function fallbackGitClone(source, targetPath) {
+    validateGitArg(source.owner, 'owner');
+    validateGitArg(source.repo, 'repo');
     const repoUrl = `https://github.com/${source.owner}/${source.repo}.git`;
     if (source.path) {
         // Use sparse checkout for subdirectory

package/dist/skills/parser/skill-md-parser.js

@@ -5,7 +5,7 @@
  */
 import { SkillMetadataSchema } from '../types.js';
 // ---------------------------------------------------------------------------
-// Minimal YAML parser/stringifier — replaces the `yaml` package.
+// Minimal YAML parser/stringifier  -  replaces the `yaml` package.
 // Handles the flat key-value + block-sequence subset used in SKILL.md files.
 // ---------------------------------------------------------------------------
 function yamlParseScalar(s) {
@@ -48,7 +48,7 @@ function yamlParse(input) {
             // Inline array: key: [a, b]  OR  block sequence (items follow indented with `- `)
             const peek = lines[i]?.trim() ?? '';
             if (peek.startsWith('[')) {
-                // inline — handled below on next iteration; should not happen in this branch
+                // inline  -  handled below on next iteration; should not happen in this branch
             }
             const items = [];
             while (i < lines.length) {