@shapio/cms 0.5.4 → 0.5.5

package/dist/{worker-CFEk-WtR.js → worker-DMES6pqh.js}

@@ -4723,6 +4723,17 @@ const COLUMNS$2 = [
 /** Every head of an entry, locked for the rest of the transaction. */
 const lockForEntry = (entryId, trx) => trx.selectFrom("entry_heads").select(COLUMNS$2).where("entry_id", "=", entryId).orderBy("locale").orderBy("state").forUpdate().execute();
 const findForEntry = (entryId, executor = db) => executor.selectFrom("entry_heads").select(COLUMNS$2).where("entry_id", "=", entryId).execute();
+/** The heads of one site's entries among `entryIds` that belong to `modelIds` (titles of related entries). */
+const findForEntriesOnSite = (siteId, modelIds, entryIds, executor = db) => entryIds.length === 0 || modelIds.length === 0 ? Promise.resolve([]) : executor.selectFrom("entry_heads").select([
+	"entry_id",
+	"model_id",
+	"locale",
+	"state",
+	"revision_id",
+	"data",
+	"version",
+	"autosaved_at"
+]).where("site_id", "=", siteId).where("model_id", "in", modelIds).where("entry_id", "in", entryIds).execute();
 const insert$28 = (head, trx = db) => trx.insertInto("entry_heads").values({
 	entry_id: head.entryId,
 	site_id: entrySiteOf(trx, head.entryId),
@@ -5174,7 +5185,7 @@ const NODE_KEYS = /* @__PURE__ */ new Set([
 	"marks"
 ]);
 const MAX_PROBLEMS = 20;
-const isRecord$14 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$15 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const fail = (walk, path, message) => {
 	if (walk.problems.length < MAX_PROBLEMS) walk.problems.push({
 		path,
@@ -5182,7 +5193,7 @@ const fail = (walk, path, message) => {
 	});
 };
 const checkAttrs = (walk, path, rules, raw) => {
-	if (raw !== void 0 && !isRecord$14(raw)) return fail(walk, `${path}/attrs`, "must be an object");
+	if (raw !== void 0 && !isRecord$15(raw)) return fail(walk, `${path}/attrs`, "must be an object");
 	const given = raw ?? {};
 	const attrs = {};
 	for (const key of Object.keys(given)) if (!rules || !Object.hasOwn(rules, key)) fail(walk, `${path}/attrs/${key}`, "is not an allowed attribute");
@@ -5204,7 +5215,7 @@ const checkMarks = (walk, path, raw, allowed) => {
 	const marks = [];
 	raw.forEach((mark, index) => {
 		const at = `${path}/marks/${index}`;
-		if (!isRecord$14(mark) || typeof mark.type !== "string" || !Object.hasOwn(MARK_RULES, mark.type)) {
+		if (!isRecord$15(mark) || typeof mark.type !== "string" || !Object.hasOwn(MARK_RULES, mark.type)) {
 			fail(walk, at, "is not an allowed mark");
 			return;
 		}
@@ -5225,7 +5236,7 @@ const matchesAllow = (allow, type) => {
 };
 const checkNode = (walk, raw, path, depth, context) => {
 	if (depth > 40) return fail(walk, path, "is nested too deeply");
-	if (!isRecord$14(raw) || typeof raw.type !== "string") return fail(walk, path, "must be a node with a type");
+	if (!isRecord$15(raw) || typeof raw.type !== "string") return fail(walk, path, "must be a node with a type");
 	const { type } = raw;
 	const rule = Object.hasOwn(NODE_RULES, type) ? NODE_RULES[type] : void 0;
 	if (!rule) return fail(walk, path, `"${type}" is not an allowed node`);
@@ -5278,7 +5289,7 @@ const validateRichText = (value) => {
 		problems: [],
 		textLength: 0
 	};
-	if (!isRecord$14(value)) return {
+	if (!isRecord$15(value)) return {
 		ok: false,
 		problems: [{
 			path: "",
@@ -5382,7 +5393,7 @@ const DEFAULT_SEO_KEYS = {
 	canonical: "canonical",
 	noindex: "noindex"
 };
-const isRecord$13 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$14 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const text = (value) => typeof value === "string" && value.trim() !== "" ? value : null;
 /**
 * The effective SEO values of one delivered entry, in the same shape as the raw value (plan seo-fields): the
@@ -5392,7 +5403,7 @@ const text = (value) => typeof value === "string" && value.trim() !== "" ? value
 */
 const resolveSeo = (raw, context) => {
 	const keys = context.keys ?? DEFAULT_SEO_KEYS;
-	const output = isRecord$13(raw) ? { ...raw } : {};
+	const output = isRecord$14(raw) ? { ...raw } : {};
 	const value = (key) => keys[key] === void 0 ? void 0 : output[keys[key]];
 	const set = (key, next) => {
 		if (keys[key] !== void 0) output[keys[key]] = next;
@@ -5918,6 +5929,22 @@ const closed$3$1 = { additionalProperties: false };
 const MODEL_KINDS = ["collection", "singleton"];
 const DEFINITION_KINDS = [...MODEL_KINDS, "component"];
 const SORT_DIRECTIONS = ["asc", "desc"];
+/**
+* How an entry of a model opens: `document` (title typed into the page, blocks in a canvas, properties in
+* the strip and the settings drawer) or `form` (every field inline at its `width`, sections from
+* `display.groups`). Unset means `document`; normalizing drops an explicit `document`.
+*/
+const ENTRY_LAYOUTS = ["document", "form"];
+/**
+* A field's width in a form-layout entry, as a share of the row: rows fill in field order and wrap. Unset
+* means `full`; normalizing drops an explicit `full`.
+*/
+const FIELD_WIDTHS = [
+	"full",
+	"two-thirds",
+	"half",
+	"third"
+];
 const MAX_DESCRIPTION_LENGTH = 2e3;
 const Label = Type.String({
 	minLength: 1,
@@ -5952,7 +5979,12 @@ const FieldInputSchema = Type.Object({
 	defaultValue: Type.Optional(Type.Unknown()),
 	/** Type-specific settings, validated against SETTINGS_SCHEMAS[type]. */
 	settings: Type.Optional(Type.Record(Type.String(), Type.Unknown())),
-	editor: Type.Optional(EditorChoiceInputSchema)
+	editor: Type.Optional(EditorChoiceInputSchema),
+	/**
+	* Width in a form-layout entry (`display.layout: 'form'`). Default `full`. Model fields only: the
+	* validator refuses it on a component's field.
+	*/
+	width: Type.Optional(Type.Enum(FIELD_WIDTHS))
 }, closed$3$1);
 const FieldGroupSchema = Type.Object({
 	id: Type.String({
@@ -5963,6 +5995,8 @@ const FieldGroupSchema = Type.Object({
 	fieldIds: Type.Array(Type.String())
 }, closed$3$1);
 const ModelDisplayInputSchema = Type.Object({
+	/** How entries open: `document` (default) or `form`. See `ENTRY_LAYOUTS`. */
+	layout: Type.Optional(Type.Enum(ENTRY_LAYOUTS)),
 	/** Field whose value labels an entry in lists, pickers and relation summaries. */
 	titleFieldId: Type.Optional(Type.String()),
 	/** Columns of the content list, in order. */
@@ -6469,6 +6503,13 @@ const effectiveLayout = (model) => {
 		strip: model.display.stripFieldIds === void 0 ? null : unique$1(byIds(properties, model.display.stripFieldIds))
 	};
 };
+/** How the model's entries open (`display.layout`): `document` unless set to `form`. */
+const entryLayoutOf = (model) => model.display.layout ?? "document";
+/**
+* The entry's rich-text body, which "Summarize from body" reads: the document's rich-text canvas fields, or
+* every live rich-text field of a form (a form has no canvas; its fields are all on the page).
+*/
+const richTextBodyOf = (model) => entryLayoutOf(model) === "form" ? model.fields.filter((field) => field.type === "richtext" && !field.deprecated) : effectiveLayout(model).canvas.filter((field) => field.type === "richtext");
 /**
 * API keys (models, components, fields) must be valid GraphQL names from day one (CONTRIBUTING.md rule 4),
 * so GraphQL can expose them without renames.
@@ -6565,17 +6606,22 @@ const normalizeField = (field) => {
 		editor: {
 			id: field.editor?.id ?? DEFAULT_EDITORS[field.type],
 			options: field.editor?.options ?? {}
-		}
+		},
+		width: field.width === "full" ? void 0 : field.width
 	};
 	return withoutEmpty(normalized);
 };
-const normalizeModelDisplay = (display) => withoutEmpty({ ...display });
+const normalizeModelDisplay = (display) => withoutEmpty({
+	...display,
+	layout: display?.layout === "document" ? void 0 : display?.layout
+});
 const normalizeComponentDisplay = (display) => withoutEmpty({ ...display });
 /**
 * Applies defaults so that two definitions meaning the same thing are byte-identical once serialized
 * canonically: a hand-written file that omits `public` hashes the same as one that says `public: true`.
-* Empty optional strings and arrays are dropped. A collection without a plural API ID gets the suggested
-* one (`suggestPlural`), so files and definitions from before plural API IDs keep working.
+* Empty optional strings and arrays are dropped, and so are the defaults of keys added after definitions
+* were first hashed (`width: 'full'`, `display.layout: 'document'`). A collection without a plural API ID
+* gets the suggested one (`suggestPlural`), so files and definitions from before plural API IDs keep working.
 */
 const normalizeDefinition = (input) => {
 	const fields = input.fields.map(normalizeField);
@@ -6968,6 +7014,7 @@ const checkFlags = (field, path, isComponent) => {
 			"filterable",
 			"sortable"
 		]) if (field[flag]) reject(flag, `fields of a component cannot be ${flag}`);
+		if (field.width !== void 0) reject("width", "fields of a component have no width");
 	}
 	if (field.deprecated && field.required) reject("required", "a deprecated field cannot be required");
 	return issues;
@@ -7384,7 +7431,8 @@ const DEFINITION_METADATA = [
 const FIELD_METADATA = [
 	"label",
 	"description",
-	"defaultValue"
+	"defaultValue",
+	"width"
 ];
 const FIELD_FLAGS = [
 	["required", "field.required"],
@@ -8100,6 +8148,15 @@ const plainTextToRichText = (text) => {
 	};
 };
 /**
+* A stored rich text value (`{ format, version, doc }`) as one line of plain text: blocks separated by a
+* space, whitespace collapsed. For summaries (list cells, collapsed items, review rows), never for delivery.
+* Anything that is not a valid document (an unconverted value of a field that became rich text) reads as ''.
+*/
+const richTextPlainText = (value) => {
+	const result = validateRichText(value);
+	return result.ok ? richTextToPlainText(result.document).replace(/\s+/g, " ").trim() : "";
+};
+/**
 * Admin themes (docs/plans/themes.md): a theme is a named, complete set of these tokens for a light variant, a
 * dark variant or both. One list, shared by the admin's stylesheets (and their tests) and the API, which
 * validates themes declared by extensions (`shapio.config` `themes`).
@@ -8608,7 +8665,7 @@ const isReferenceId = (value) => isStableId(value);
 * keeps values until an explicit cleanup); deprecated fields' values are kept but not validated.
 */
 const COMPONENT_KEY = "__component";
-const isRecord$12 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$13 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const isMissingValue = (value) => value === void 0 || value === null || value === "" || Array.isArray(value) && value.length === 0;
 const issue = (walk, path, code, message) => {
 	walk.issues.push({
@@ -8642,7 +8699,7 @@ const validateFields = (definition, data, path, walk, components) => {
 	}
 	return output;
 };
-const checkComponentObject = (component, value, path, walk, components) => isRecord$12(value) ? validateFields(component, value, path, walk, components) : issue(walk, path, "INVALID_TYPE", "must be an object");
+const checkComponentObject = (component, value, path, walk, components) => isRecord$13(value) ? validateFields(component, value, path, walk, components) : issue(walk, path, "INVALID_TYPE", "must be an object");
 const isJson = (text) => {
 	try {
 		JSON.parse(text);
@@ -8674,7 +8731,7 @@ const checkStructured = (field, value, path, walk, components) => {
 			checkCount(walk, path, value.length, field.settings);
 			return value.map((item, index) => {
 				const at = pointer(path, index);
-				const componentId = isRecord$12(item) ? item[COMPONENT_KEY] : void 0;
+				const componentId = isRecord$13(item) ? item[COMPONENT_KEY] : void 0;
 				const component = typeof componentId === "string" && field.settings.components.includes(componentId) ? components.get(componentId) : void 0;
 				if (!component) return issue(walk, pointer(at, COMPONENT_KEY), "UNKNOWN_COMPONENT", "is not allowed in this zone");
 				const fields = checkComponentObject(component, item, at, walk, components);
@@ -8760,7 +8817,7 @@ const mapInput = (definition, input, path, issues, components) => {
 	}
 	return output;
 };
-const mapComponentInput = (component, value, path, issues, components) => component && isRecord$12(value) ? mapInput(component, value, path, issues, components) : value;
+const mapComponentInput = (component, value, path, issues, components) => component && isRecord$13(value) ? mapInput(component, value, path, issues, components) : value;
 function mapFieldInput(field, value, path, issues, components) {
 	if (field.type === "component") {
 		const component = components.get(field.settings.component);
@@ -8768,7 +8825,7 @@ function mapFieldInput(field, value, path, issues, components) {
 	}
 	if (field.type === "dynamiczone" && Array.isArray(value)) return value.map((item, index) => {
 		const at = pointer(path, index);
-		const apiKey = isRecord$12(item) ? item[COMPONENT_KEY] : void 0;
+		const apiKey = isRecord$13(item) ? item[COMPONENT_KEY] : void 0;
 		const component = field.settings.components.map((id) => components.get(id)).find((candidate) => candidate?.apiKey === apiKey);
 		if (!component) {
 			issues.push({
@@ -8831,7 +8888,7 @@ const buildValidator = (snapshot, model) => {
 };
 //#endregion
 //#region src/content/relations.ts
-const isRecord$11 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$12 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const referenceIds = (value) => (Array.isArray(value) ? value : [value]).filter((item) => typeof item === "string");
 const walkFields$1 = (fields, data, components, visit) => {
 	for (const field of fields) {
@@ -8843,10 +8900,10 @@ const walkFields$1 = (fields, data, components, visit) => {
 		});
 		else if (field.type === "component") {
 			const component = components.get(field.settings.component)?.definition;
-			for (const item of Array.isArray(value) ? value : [value]) if (component && isRecord$11(item)) walkFields$1(component.fields, item, components, visit);
+			for (const item of Array.isArray(value) ? value : [value]) if (component && isRecord$12(item)) walkFields$1(component.fields, item, components, visit);
 		} else if (field.type === "dynamiczone" && Array.isArray(value)) for (const item of value) {
-			const component = isRecord$11(item) ? components.get(String(item[COMPONENT_KEY]))?.definition : void 0;
-			if (component && isRecord$11(item)) walkFields$1(component.fields, item, components, visit);
+			const component = isRecord$12(item) ? components.get(String(item[COMPONENT_KEY]))?.definition : void 0;
+			if (component && isRecord$12(item)) walkFields$1(component.fields, item, components, visit);
 		}
 	}
 };
@@ -9039,14 +9096,14 @@ const findValueLocations = (definitions, ownerId) => {
 * a model's own fields, every instance of the component otherwise. The returned objects are references
 * into `data`, so callers mutate a clone.
 */
-const isRecord$10 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$11 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const ownerContainers = (data, path, ownerId) => {
 	let current = [data];
 	path.forEach((fieldId, index) => {
 		const last = index === path.length - 1;
 		current = current.flatMap((container) => {
 			const value = container[fieldId];
-			return (Array.isArray(value) ? value : value === void 0 || value === null ? [] : [value]).filter(isRecord$10).filter((item) => !last || item["__component"] === void 0 || item["__component"] === ownerId);
+			return (Array.isArray(value) ? value : value === void 0 || value === null ? [] : [value]).filter(isRecord$11).filter((item) => !last || item["__component"] === void 0 || item["__component"] === ownerId);
 		});
 	});
 	return current;
@@ -10248,6 +10305,8 @@ const findById$16 = (id, trx = db) => trx.selectFrom("media_assets").selectAll()
 const findLiveOnSite = (siteId, id, trx = db) => live(trx).selectAll().where("site_id", "=", siteId).where("id", "=", id).executeTakeFirst();
 /** The live assets of one site among `ids`. */
 const findLiveManyOnSite = (siteId, ids, trx = db) => ids.length === 0 ? Promise.resolve([]) : live(trx).selectAll().where("site_id", "=", siteId).where("id", "in", ids).execute();
+/** The original file names of one site's live assets among `ids` (review summaries). */
+const findNamesOnSite = (siteId, ids, trx = db) => ids.length === 0 ? Promise.resolve([]) : live(trx).select(["id", "original_filename"]).where("site_id", "=", siteId).where("id", "in", ids).execute();
 /** Locks the row for the rest of the transaction (deleted rows too, so callers can report them). Jobs only. */
 const lockById$5 = (id, trx) => trx.selectFrom("media_assets").selectAll().where("id", "=", id).forUpdate().executeTakeFirst();
 /** Locks one site's asset row (deleted rows too); another site's asset reads as missing. */
@@ -11604,7 +11663,7 @@ const principalFromColumns = (type, id) => {
 };
 //#endregion
 //#region src/content/media.ts
-const isRecord$9 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$10 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const collect$1 = (model, fields, data, add) => {
 	for (const field of fields) {
 		const value = data[field.id];
@@ -11614,16 +11673,16 @@ const collect$1 = (model, fields, data, add) => {
 				(Array.isArray(value) ? value : [value]).forEach((id) => typeof id === "string" && add(id));
 				break;
 			case "richtext":
-				if (isRecord$9(value) && isRecord$9(value.doc)) richTextMediaIds(value).forEach(add);
+				if (isRecord$10(value) && isRecord$10(value.doc)) richTextMediaIds(value).forEach(add);
 				break;
 			case "component": {
 				const component = model.components.get(field.settings.component)?.definition;
-				for (const item of Array.isArray(value) ? value : [value]) if (component && isRecord$9(item)) collect$1(model, component.fields, item, add);
+				for (const item of Array.isArray(value) ? value : [value]) if (component && isRecord$10(item)) collect$1(model, component.fields, item, add);
 				break;
 			}
 			case "dynamiczone": for (const item of Array.isArray(value) ? value : []) {
-				const component = isRecord$9(item) ? model.components.get(String(item[COMPONENT_KEY]))?.definition : void 0;
-				if (component && isRecord$9(item)) collect$1(model, component.fields, item, add);
+				const component = isRecord$10(item) ? model.components.get(String(item[COMPONENT_KEY]))?.definition : void 0;
+				if (component && isRecord$10(item)) collect$1(model, component.fields, item, add);
 			}
 		}
 	}
@@ -13017,7 +13076,7 @@ const projectRichText = (document, mode, options) => {
 	shaped[RICH_TEXT_HTML] = render;
 	return shaped;
 };
-const isRecord$8 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$9 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const isListField = (field) => field.type === "relation" && field.settings.cardinality === "many" || field.type === "media" && field.settings.multiple || field.type === "component" && field.settings.repeatable || field.type === "dynamiczone";
 const projectRelation = (field, value, options, topLevel) => {
 	const ids = (Array.isArray(value) ? value : [value]).filter((id) => typeof id === "string");
@@ -13028,7 +13087,7 @@ const projectRelation = (field, value, options, topLevel) => {
 	});
 	return field.settings.cardinality === "many" ? shown : shown[0] ?? null;
 };
-const projectComponent = (component, value, options) => component && isRecord$8(value) ? projectFields(component.fields.filter((field) => !field.deprecated), value, options, false) : null;
+const projectComponent = (component, value, options) => component && isRecord$9(value) ? projectFields(component.fields.filter((field) => !field.deprecated), value, options, false) : null;
 const isStringOrStrings = (value) => typeof value === "string" || Array.isArray(value) && value.every((item) => typeof item === "string");
 /**
 * Whether a stored value has the shape the field's current type produces. Old snapshots are served through
@@ -13041,11 +13100,11 @@ const matchesFieldType = (field, value) => {
 		case "integer": return typeof value === "number";
 		case "boolean": return typeof value === "boolean";
 		case "json": return true;
-		case "richtext": return isRecord$8(value) && isRecord$8(value.doc);
+		case "richtext": return isRecord$9(value) && isRecord$9(value.doc);
 		case "relation":
 		case "media": return isStringOrStrings(value);
 		case "enum": return field.settings.multiple ? Array.isArray(value) && value.every((item) => typeof item === "string") : typeof value === "string";
-		case "component": return field.settings.repeatable ? Array.isArray(value) : isRecord$8(value);
+		case "component": return field.settings.repeatable ? Array.isArray(value) : isRecord$9(value);
 		case "dynamiczone": return Array.isArray(value);
 		default: return typeof value === "string";
 	}
@@ -13059,7 +13118,7 @@ const projectValue = (field, value, options, topLevel) => {
 			return field.settings.repeatable ? (Array.isArray(value) ? value : []).map((item) => projectComponent(component, item, options)) : projectComponent(component, value, options);
 		}
 		case "dynamiczone": return (Array.isArray(value) ? value : []).flatMap((item) => {
-			const component = isRecord$8(item) ? options.model.components.get(String(item[COMPONENT_KEY]))?.definition : void 0;
+			const component = isRecord$9(item) ? options.model.components.get(String(item[COMPONENT_KEY]))?.definition : void 0;
 			const projected = projectComponent(component, item, options);
 			return component && projected ? [{
 				[COMPONENT_KEY]: component.apiKey,
@@ -13267,11 +13326,11 @@ const createAfterHookJobHandler = (environment) => async (job) => {
 };
 //#endregion
 //#region src/extensions/jobs.ts
-const isRecord$7 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$8 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 /** The project's job handlers, registered as `ext.<name>` so they never collide with Shapio's job types. */
 const createExtensionJobHandlers = (jobs, services) => Object.entries(jobs).map(([name, handler]) => [`${EXTENSION_JOB_PREFIX}${name}`, (job) => handler({
 	jobId: job.id,
-	payload: isRecord$7(job.payload) ? job.payload : {},
+	payload: isRecord$8(job.payload) ? job.payload : {},
 	attempt: job.attempt,
 	maxAttempts: job.maxAttempts,
 	idempotencyKey: job.idempotencyKey,
@@ -13329,7 +13388,7 @@ const shapioConfigSchema = Type.Object({
 	jobs: Type.Optional(Type.Record(Type.String(), anyFunction)),
 	themes: Type.Optional(Type.Array(themeSchema))
 }, closed$11);
-const isRecord$6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$7 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const TOP_LEVEL_KEYS$1 = Object.keys(shapioConfigSchema.properties);
 const HOOK_EVENTS = Object.keys(modelHooksSchema.properties);
 /** Names the unknown key and what is allowed in its place. */
@@ -13341,7 +13400,7 @@ const unknownKeyMessage = (path) => {
 	if (segments[0] === "themes" && segments.length === 4) return `unknown theme token "${key}"; the tokens are listed in documentation/extensions.md`;
 	return `unknown key "${key}"`;
 };
-const keysOf$1 = (value) => isRecord$6(value) ? Object.keys(value) : [];
+const keysOf$1 = (value) => isRecord$7(value) ? Object.keys(value) : [];
 /** Rules TypeBox cannot express (key patterns, uniqueness, reserved names); tolerant of a malformed config. */
 const findNamingProblems = (config) => {
 	const problems = [];
@@ -13351,7 +13410,7 @@ const findNamingProblems = (config) => {
 	});
 	const prefixes = /* @__PURE__ */ new Set();
 	(Array.isArray(config.routes) ? config.routes : []).forEach((route, index) => {
-		if (!isRecord$6(route) || typeof route.prefix !== "string") return;
+		if (!isRecord$7(route) || typeof route.prefix !== "string") return;
 		if (!ROUTE_PREFIX_PATTERN.test(route.prefix)) problems.push({
 			path: `/routes/${index}/prefix`,
 			message: "must be lower-case letters, digits and dashes (it becomes /api/ext/<prefix>)"
@@ -13382,7 +13441,7 @@ const findThemeProblems = (themes) => {
 	const problems = [];
 	const keys = /* @__PURE__ */ new Set();
 	(Array.isArray(themes) ? themes : []).forEach((theme, index) => {
-		if (!isRecord$6(theme)) return;
+		if (!isRecord$7(theme)) return;
 		const path = `/themes/${index}`;
 		if (typeof theme.key === "string") {
 			if (!THEME_KEY_PATTERN.test(theme.key)) problems.push({
@@ -13405,7 +13464,7 @@ const findThemeProblems = (themes) => {
 		});
 		for (const variant of THEME_VARIANTS) {
 			const tokens = theme[variant];
-			for (const [token, value] of Object.entries(isRecord$6(tokens) ? tokens : {})) if (typeof value === "string" && !THEME_COLOUR_PATTERN.test(value)) problems.push({
+			for (const [token, value] of Object.entries(isRecord$7(tokens) ? tokens : {})) if (typeof value === "string" && !THEME_COLOUR_PATTERN.test(value)) problems.push({
 				path: `${path}/${variant}/${token}`,
 				message: `"${value}" is not a colour: use #rrggbb, rgb(), hsl(), oklch() or oklab()`
 			});
@@ -13415,7 +13474,7 @@ const findThemeProblems = (themes) => {
 };
 /** Every problem with a loaded config export, or none. */
 const findConfigProblems$1 = (value) => {
-	if (!isRecord$6(value)) return [{
+	if (!isRecord$7(value)) return [{
 		path: "",
 		message: "the config must be an object (export const config = defineConfig({ ... }))"
 	}];
@@ -15441,7 +15500,7 @@ const resolveMediaOrigins = async (storage) => {
 	const base = originOf(storage.publicBaseUrl);
 	if (base) origins.add(base);
 	if (storage.s3) {
-		const { createS3Adapter } = await import("./s3Adapter-Bs5SUqE1.js");
+		const { createS3Adapter } = await import("./s3Adapter-sL1zP4Zl.js");
 		const adapter = createS3Adapter({
 			config: storage.s3,
 			publicBaseUrl: void 0
@@ -20238,7 +20297,7 @@ const entryNode = (entry, scope) => ({
 //#region src/schema/codegen/graphql/outputTypes.ts
 const list$9 = (type) => new GraphQLList(new GraphQLNonNull(type));
 const maskedFieldError = (field) => new AppError(403, "FORBIDDEN_FIELD", `Your role may not read "${field.apiKey}"`, { field: field.apiKey });
-const isRecord$5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const enumType = (build, owner, field) => memoType(build.enums, `${owner.id}:${field.id}`, () => new GraphQLEnumType({
 	name: fieldTypeName(owner, field, "Enum"),
 	values: Object.fromEntries(field.settings.values.map((entry) => [entry.value, {
@@ -20280,7 +20339,7 @@ const componentField = (build, field) => {
 	const component = componentById$2(build, field.settings.component);
 	if (!component || liveFields$1(component.fields).length === 0) return;
 	const type = componentType(build, component);
-	const toNode = (value, node) => isRecord$5(value) ? {
+	const toNode = (value, node) => isRecord$6(value) ? {
 		data: value,
 		scope: node.scope
 	} : null;
@@ -20318,7 +20377,7 @@ const zoneField = (build, owner, field) => {
 		type: list$9(type),
 		resolve: (node) => {
 			const values = node.data[field.apiKey];
-			return (Array.isArray(values) ? values : []).flatMap((value) => isRecord$5(value) && allowed.has(String(value["__component"])) ? [{
+			return (Array.isArray(values) ? values : []).flatMap((value) => isRecord$6(value) && allowed.has(String(value["__component"])) ? [{
 				data: value,
 				scope: node.scope
 			}] : []);
@@ -20492,21 +20551,21 @@ const zoneInput = (build, owner, field) => inputObject(build, `zone:${owner.id}:
 	return fields;
 });
 const modelInput = (build, model) => inputObject(build, `model:${model.id}`, modelTypeName(model, "Input"), () => inputFields(build, model));
-const isRecord$4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const invalidZoneItem = (field) => new AppError(400, "INVALID_INPUT", `Each "${field.apiKey}" item needs exactly one component key`, { field: field.apiKey });
 const toWriteValue = (build, field, value) => {
 	if (value === null || value === void 0) return value;
 	switch (field.type) {
 		case "component": {
 			const component = componentById$1(build, field.settings.component);
-			const convert = (item) => component && isRecord$4(item) ? toWriteData(build, component, item) : item;
+			const convert = (item) => component && isRecord$5(item) ? toWriteData(build, component, item) : item;
 			return Array.isArray(value) ? value.map(convert) : convert(value);
 		}
 		case "dynamiczone": return (Array.isArray(value) ? value : []).map((item) => {
-			const keys = isRecord$4(item) ? Object.keys(item).filter((key) => item[key] != null) : [];
+			const keys = isRecord$5(item) ? Object.keys(item).filter((key) => item[key] != null) : [];
 			const [key] = keys;
 			const component = key ? build.snapshot.componentsByApiKey.get(key)?.definition : void 0;
-			if (keys.length !== 1 || !key || !component || !isRecord$4(item) || !isComponentDefinition(component)) throw invalidZoneItem(field);
+			if (keys.length !== 1 || !key || !component || !isRecord$5(item) || !isComponentDefinition(component)) throw invalidZoneItem(field);
 			return {
 				[COMPONENT_KEY]: key,
 				...toWriteData(build, component, item[key])
@@ -20810,14 +20869,14 @@ const createSortInput = (model, fixed) => new GraphQLInputObjectType({
 	}
 });
 const OPERATOR_BY_NAME = new Map(FILTER_OPERATORS.map((operator) => [operatorFieldName(operator), operator]));
-const isRecord$3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const toText = (value, label) => {
 	if (typeof value === "string") return value;
 	if (typeof value === "number" || typeof value === "boolean") return String(value);
 	throw queryInvalid(`"${label}" needs a scalar value`);
 };
 const conditionParams = (prefix, key, conditions, out) => {
-	if (!isRecord$3(conditions)) return;
+	if (!isRecord$4(conditions)) return;
 	for (const [name, operand] of Object.entries(conditions)) {
 		const operator = OPERATOR_BY_NAME.get(name);
 		if (operator === void 0 || operand === null || operand === void 0) continue;
@@ -20832,11 +20891,11 @@ const filterParamsAt = (prefix, filter, out) => {
 	for (const [key, value] of Object.entries(filter)) {
 		if (value === null || value === void 0) continue;
 		if (key === "and" || key === "or") {
-			const children = value.filter(isRecord$3);
+			const children = value.filter(isRecord$4);
 			if (children.length === 0) throw queryInvalid(`${key} needs at least one filter`);
 			children.forEach((child, index) => filterParamsAt(`${prefix}[${LOGICAL_KEYS[key]}][${index}]`, child, out));
 		} else if (key === "not") {
-			if (isRecord$3(value)) filterParamsAt(`${prefix}[$not]`, value, out);
+			if (isRecord$4(value)) filterParamsAt(`${prefix}[$not]`, value, out);
 		} else conditionParams(prefix, key, value, out);
 	}
 };
@@ -21808,7 +21867,7 @@ const createMediaStorage = async (config, deps) => {
 		publicBaseUrl: config.publicBaseUrl
 	}));
 	if (config.s3) {
-		const { createS3Adapter } = await import("./s3Adapter-Bs5SUqE1.js");
+		const { createS3Adapter } = await import("./s3Adapter-sL1zP4Zl.js");
 		adapters.set("s3", createS3Adapter({
 			config: config.s3,
 			publicBaseUrl: config.publicBaseUrl
@@ -21890,66 +21949,15 @@ const requestLogPlugin = fp(async (app) => {
 	});
 }, { name: "shapio-request-log" });
 //#endregion
-//#region src/plugins/security.ts
-const CORS_METHODS = [
-	"GET",
-	"HEAD",
-	"POST",
-	"PUT",
-	"PATCH",
-	"DELETE"
-];
-/**
-* Baseline HTTP hardening: security headers, CORS (off unless origins are configured; the admin and API
-* share one origin, so CORS is only for the user's own sites and apps), a global rate limit keyed by the
-* client IP (which honours TRUST_PROXY), and @fastify/sensible's httpErrors.
-* The rate-limit store is in memory, so with several instances each counts on its own (documented: put a
-* shared limiter in front for strict limits; ADR 0008).
-*/
-const securityPlugin = fp(async (app, { http, httpsPublicUrl, mediaOrigins = [] }) => {
-	await app.register(sensible);
-	await app.register(helmet, {
-		global: true,
-		hsts: httpsPublicUrl,
-		contentSecurityPolicy: { directives: {
-			upgradeInsecureRequests: httpsPublicUrl ? [] : null,
-			imgSrc: [
-				"'self'",
-				"data:",
-				"blob:",
-				...mediaOrigins
-			],
-			mediaSrc: [
-				"'self'",
-				"blob:",
-				...mediaOrigins
-			],
-			connectSrc: ["'self'", ...mediaOrigins]
-		} }
-	});
-	await app.register(cors, {
-		origin: http.corsOrigins.length > 0 ? http.corsOrigins : false,
-		credentials: false,
-		methods: CORS_METHODS
-	});
-	await app.register(rateLimit, {
-		global: true,
-		max: http.rateLimitMax,
-		timeWindow: http.rateLimitWindowMs
-	});
-}, { name: "shapio-security" });
-//#endregion
-//#region src/plugins/services.ts
-/** Exposes config, the database, the permission evaluator and the URL builder to plugins and routes. */
-const servicesPlugin = fp(async (app, { config, db, permissions, urls }) => {
-	app.decorate("config", config);
-	app.decorate("urls", urls);
-	app.decorate("db", db);
-	app.decorate("permissions", permissions);
-}, { name: "shapio-services" });
-//#endregion
 //#region src/plugins/staticAdmin.ts
 const ADMIN_PATH = "/admin/";
+/** Where the admin is served: `${BASE_PATH}/admin/`. */
+const adminPrefixFor = (urls) => urls.withBasePath(ADMIN_PATH);
+/**
+* A request for one of the admin's own files (`assets/*.js`, fonts, favicons, `theme-init.js`), not the page
+* itself: public, cacheable and loaded many at a time on every reload, so the global rate limit skips them.
+*/
+const isAdminFileRequest = (url, adminPrefix) => url.startsWith(adminPrefix) && looksLikeFile(url);
 /**
 * Injects `<base href>` so the admin, built with relative asset URLs (Vite `base: './'`), works under
 * any BASE_PATH without a rebuild. The SPA router reads its basename from `document.baseURI`.
@@ -21994,7 +22002,7 @@ const staticAdminPlugin = fp(async (app, { distPath, urls, frameSources }) => {
 		app.log.info("admin bundle not found; the admin UI is not served (run the Vite dev server instead)");
 		return;
 	}
-	const adminPrefix = urls.withBasePath(ADMIN_PATH);
+	const adminPrefix = adminPrefixFor(urls);
 	const indexHtml = injectBaseHref(readFileSync(indexFile, "utf8"), adminPrefix);
 	const scriptHashes = importMapHashes(indexHtml);
 	const sendIndex = async (_request, reply) => {
@@ -22024,6 +22032,65 @@ const staticAdminPlugin = fp(async (app, { distPath, urls, frameSources }) => {
 	if (urls.basePath !== "") app.get(urls.basePath, async (_request, reply) => reply.redirect(adminPrefix, 302));
 }, { name: "shapio-static-admin" });
 //#endregion
+//#region src/plugins/security.ts
+const CORS_METHODS = [
+	"GET",
+	"HEAD",
+	"POST",
+	"PUT",
+	"PATCH",
+	"DELETE"
+];
+/**
+* Baseline HTTP hardening: security headers, CORS (off unless origins are configured; the admin and API
+* share one origin, so CORS is only for the user's own sites and apps), a global rate limit keyed by the
+* client IP (which honours TRUST_PROXY), and @fastify/sensible's httpErrors.
+* The rate-limit store is in memory, so with several instances each counts on its own (documented: put a
+* shared limiter in front for strict limits; ADR 0008).
+*/
+const securityPlugin = fp(async (app, { http, httpsPublicUrl, mediaOrigins = [], adminPrefix }) => {
+	await app.register(sensible);
+	await app.register(helmet, {
+		global: true,
+		hsts: httpsPublicUrl,
+		contentSecurityPolicy: { directives: {
+			upgradeInsecureRequests: httpsPublicUrl ? [] : null,
+			imgSrc: [
+				"'self'",
+				"data:",
+				"blob:",
+				...mediaOrigins
+			],
+			mediaSrc: [
+				"'self'",
+				"blob:",
+				...mediaOrigins
+			],
+			connectSrc: ["'self'", ...mediaOrigins]
+		} }
+	});
+	await app.register(cors, {
+		origin: http.corsOrigins.length > 0 ? http.corsOrigins : false,
+		credentials: false,
+		methods: CORS_METHODS
+	});
+	await app.register(rateLimit, {
+		global: true,
+		max: http.rateLimitMax,
+		timeWindow: http.rateLimitWindowMs,
+		allowList: (request) => isAdminFileRequest(request.url, adminPrefix)
+	});
+}, { name: "shapio-security" });
+//#endregion
+//#region src/plugins/services.ts
+/** Exposes config, the database, the permission evaluator and the URL builder to plugins and routes. */
+const servicesPlugin = fp(async (app, { config, db, permissions, urls }) => {
+	app.decorate("config", config);
+	app.decorate("urls", urls);
+	app.decorate("db", db);
+	app.decorate("permissions", permissions);
+}, { name: "shapio-services" });
+//#endregion
 //#region src/plugins/themeCatalogue.ts
 /** The catalogue is built from the project config by the app (extensions/themeStylesheet.ts). */
 const themeCataloguePlugin = fp(async (app, { catalogue }) => {
@@ -24251,7 +24318,7 @@ const toDefinitionInput = (draft, id, resolve) => {
 	};
 };
 /** IDs of new definitions a definition refers to (relations, components, zones). */
-const referencesOf = (definition) => definition.fields.flatMap((field) => {
+const referencesOf$1 = (definition) => definition.fields.flatMap((field) => {
 	switch (field.type) {
 		case "relation": return [field.settings.target];
 		case "component": return [field.settings.component];
@@ -24276,7 +24343,7 @@ const dependencyOrder = (definitions) => {
 			return;
 		}
 		state.set(definition.id, "visiting");
-		for (const id of referencesOf(definition)) {
+		for (const id of referencesOf$1(definition)) {
 			const target = byId.get(id);
 			if (target && target.id !== definition.id) visit(target, [...path, definition.apiKey]);
 		}
@@ -24400,22 +24467,22 @@ const summarizePrompt = (input) => ({
 //#region src/services/assist/summarize.ts
 const notSummarizable = (fieldApiKey, reason) => new AppError(400, "ASSIST_FIELD_NOT_SUMMARIZABLE", `"${fieldApiKey}" cannot be summarized into: ${reason}`, { field: fieldApiKey });
 /**
-* The target must be a live string or text field (not the title) of a model whose document has a rich-text
-* canvas field, wherever the field is placed (a property or in the document): the summary is made from
-* that canvas (plan §I).
+* The target must be a live string or text field (not the title) of a model with a rich-text body
+* (`richTextBodyOf`: the document's rich-text canvas fields, or every rich-text field of a form), wherever
+* the field is placed: the summary is made from that body (plan §I).
 */
 const summaryTarget = (definition, fieldApiKey) => {
-	const layout = effectiveLayout(definition);
-	if (layout.title?.apiKey === fieldApiKey) throw notSummarizable(fieldApiKey, "it is the title");
+	const title = effectiveTitleField(definition);
+	if (title?.apiKey === fieldApiKey) throw notSummarizable(fieldApiKey, "it is the title");
 	const field = definition.fields.find((candidate) => candidate.apiKey === fieldApiKey && !candidate.deprecated);
 	if (!field) throw notSummarizable(fieldApiKey, "it is not a field of this model");
 	if (field.type !== "string" && field.type !== "text") throw notSummarizable(fieldApiKey, "only string and text fields hold summaries");
-	const canvas = layout.canvas.filter((candidate) => candidate.type === "richtext");
-	if (canvas.length === 0) throw notSummarizable(fieldApiKey, "the model has no rich-text body to summarize");
+	const body = richTextBodyOf(definition);
+	if (body.length === 0) throw notSummarizable(fieldApiKey, "the model has no rich-text body to summarize");
 	return {
 		field,
-		canvas,
-		title: layout.title
+		body,
+		title
 	};
 };
 const plainTextOf = (value) => typeof value === "object" && value !== null && "doc" in value ? richTextToPlainText(value) : "";
@@ -24427,7 +24494,7 @@ const summarizeEntry = async (context, input) => {
 	if (!maskAllows(updatePolicy.writeMask, target.field)) throw new AppError(403, "FORBIDDEN", `Your role does not allow editing "${input.fieldApiKey}"`);
 	const locale = writeLocaleFor(context.snapshot, model.definition, input.locale);
 	const { draft } = await loadEntryDraft(context, model, readPolicy, input.entryId, locale);
-	const body = target.canvas.filter((field) => maskAllows(readPolicy.readMask, field)).map((field) => plainTextOf(draft.data[field.id])).filter((text) => text.trim() !== "").join("\n\n").slice(0, ASSIST_SUMMARY_SOURCE_CHARS);
+	const body = target.body.filter((field) => maskAllows(readPolicy.readMask, field)).map((field) => plainTextOf(draft.data[field.id])).filter((text) => text.trim() !== "").join("\n\n").slice(0, ASSIST_SUMMARY_SOURCE_CHARS);
 	if (body.trim() === "") throw new AppError(422, "ASSIST_NOTHING_TO_SUMMARIZE", "The entry has no body text to summarize yet");
 	const titleValue = target.title && maskAllows(readPolicy.readMask, target.title) ? draft.data[target.title.id] : void 0;
 	const { maxLength, minLength } = target.field.settings;
@@ -24495,7 +24562,7 @@ const TRANSLATABLE_SCALARS = /* @__PURE__ */ new Set(["string", "text"]);
 const TEXT_BLOCKS = /* @__PURE__ */ new Set(["paragraph", "heading"]);
 const TAG_PATTERN = /<m(\d+)>|<\/m(\d+)>|<b(\d+)\/>/g;
 const MAX_IMAGE_TEXT = 1e3;
-const isRecord$2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const hasText = (value) => value.trim() !== "";
 /** A text block's inline children as one string with tags, and what each tag stands for. */
 const encodeBlock = (children) => {
@@ -24618,7 +24685,7 @@ const walkRichNode = (node, path, state) => {
 	};
 };
 const componentById = (model, id) => typeof id === "string" ? model.components.get(id)?.definition : void 0;
-const walkComponentValue = (component, value, path, state) => component && isRecord$2(value) ? walkFields(component.fields.filter((field) => !field.deprecated), value, path, state) : value;
+const walkComponentValue = (component, value, path, state) => component && isRecord$3(value) ? walkFields(component.fields.filter((field) => !field.deprecated), value, path, state) : value;
 const walkValue = (field, value, path, state) => {
 	if (value === void 0 || value === null) return value;
 	if (TRANSLATABLE_SCALARS.has(field.type)) {
@@ -24631,7 +24698,7 @@ const walkValue = (field, value, path, state) => {
 		}) : value;
 	}
 	switch (field.type) {
-		case "richtext": return isRecord$2(value) && isRecord$2(value.doc) ? {
+		case "richtext": return isRecord$3(value) && isRecord$3(value.doc) ? {
 			...value,
 			doc: walkRichNode(value.doc, path, state)
 		} : value;
@@ -24640,7 +24707,7 @@ const walkValue = (field, value, path, state) => {
 			return field.settings.repeatable && Array.isArray(value) ? value.map((item, index) => walkComponentValue(component, item, pointer(path, index), state)) : walkComponentValue(component, value, path, state);
 		}
 		case "dynamiczone": return Array.isArray(value) ? value.map((item, index) => {
-			const component = isRecord$2(item) ? componentById(state.model, item[COMPONENT_KEY]) : void 0;
+			const component = isRecord$3(item) ? componentById(state.model, item[COMPONENT_KEY]) : void 0;
 			return walkComponentValue(component, item, pointer(path, index), state);
 		}) : value;
 		default: return value;
@@ -28311,7 +28378,7 @@ const summarizeFindings$1 = async (context) => {
 };
 //#endregion
 //#region src/content/health/imageUses.ts
-const isRecord$1 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const richTextImages = (node, found) => {
 	if (node.type === "image" && typeof node.attrs?.mediaId === "string") {
 		const alt = typeof node.attrs.alt === "string" && node.attrs.alt.trim() !== "" ? node.attrs.alt : null;
@@ -28334,14 +28401,14 @@ const collect = (model, fields, data, base, add) => {
 				break;
 			case "richtext": {
 				const found = [];
-				if (isRecord$1(value) && isRecord$1(value.doc)) richTextImages(value.doc, found);
+				if (isRecord$2(value) && isRecord$2(value.doc)) richTextImages(value.doc, found);
 				found.forEach((image) => add(path, image.assetId, image.alt));
 				break;
 			}
 			case "component": {
 				const component = componentOf(model, field.settings.component);
 				(field.settings.repeatable && Array.isArray(value) ? value : [value]).forEach((item, index) => {
-					if (component && isRecord$1(item)) {
+					if (component && isRecord$2(item)) {
 						const itemPath = field.settings.repeatable ? pointer(path, index) : path;
 						collect(model, component.fields, item, itemPath, add);
 					}
@@ -28349,8 +28416,8 @@ const collect = (model, fields, data, base, add) => {
 				break;
 			}
 			case "dynamiczone": (Array.isArray(value) ? value : []).forEach((item, index) => {
-				const component = isRecord$1(item) ? componentOf(model, item[COMPONENT_KEY]) : void 0;
-				if (component && isRecord$1(item)) collect(model, component.fields, item, pointer(path, index), add);
+				const component = isRecord$2(item) ? componentOf(model, item[COMPONENT_KEY]) : void 0;
+				if (component && isRecord$2(item)) collect(model, component.fields, item, pointer(path, index), add);
 			});
 		}
 	}
@@ -32123,6 +32190,146 @@ const deleteSchemaDraft = async (context, id, definitionId) => {
 	});
 	return getChangeSet$1(context, id);
 };
+const CODE_LANGUAGE_LABELS = {
+	plain: "Plain text",
+	html: "HTML",
+	css: "CSS",
+	javascript: "JavaScript",
+	json: "JSON",
+	yaml: "YAML",
+	markdown: "Markdown"
+};
+/** Item summaries use the same textual types as the admin's collapsed items (fields/helpers/summary.ts). */
+const TEXTUAL_TYPES = /* @__PURE__ */ new Set([
+	"string",
+	"text",
+	"slug",
+	"email",
+	"url",
+	"uid",
+	"enum"
+]);
+const truncate = (text) => text.length > 160 ? `${text.slice(0, 159)}…` : text;
+const isRecord$1 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isEmpty = (value) => value === null || value === void 0 || value === "" || Array.isArray(value) && value.length === 0 || isRecord$1(value) && Object.keys(value).length === 0;
+const listOf = (value) => Array.isArray(value) ? value : [value];
+const plural = (count, one, many) => `${count} ${count === 1 ? one : many}`;
+const rawText = (value) => truncate(typeof value === "string" ? value : JSON.stringify(value));
+/** A component item's label: its title field's value, else the first non-empty text field (as the admin). */
+const summarizeItem = (component, item, lookups) => {
+	if (!isRecord$1(item)) return "";
+	const titleField = component.fields.find((field) => field.id === component.display.titleFieldId);
+	const candidates = titleField ? [titleField, ...component.fields] : component.fields;
+	for (const field of candidates) if (TEXTUAL_TYPES.has(field.type) || field.type === "richtext") {
+		const summary = summarizeValue(field, item[field.id], lookups);
+		if (summary) return summary;
+	}
+	return "";
+};
+const labelled = (label, summary) => summary ? `${label} (${summary})` : label;
+const componentSummary = (field, value, lookups) => {
+	const component = lookups.component(field.settings.component);
+	const items = listOf(value);
+	if (!component || !items.every(isRecord$1)) return;
+	const summaries = items.map((item) => summarizeItem(component, item, lookups)).filter(Boolean);
+	if (!field.settings.repeatable) return summaries[0] ? `${component.label}: ${summaries[0]}` : component.label;
+	const head = `${plural(items.length, "item", "items")} (${component.label})`;
+	return summaries.length > 0 ? `${head}: ${summaries.join(", ")}` : head;
+};
+const zoneSummary = (value, lookups) => {
+	if (!Array.isArray(value) || !value.every(isRecord$1)) return;
+	const blocks = value.map((item) => {
+		const id = item[COMPONENT_KEY];
+		const component = typeof id === "string" ? lookups.component(id) : void 0;
+		return component ? labelled(component.label, summarizeItem(component, item, lookups)) : String(id);
+	});
+	return `${plural(value.length, "block", "blocks")}: ${blocks.join(", ")}`;
+};
+const referenceSummary = (value, resolve) => {
+	const ids = listOf(value);
+	return ids.every((id) => typeof id === "string") ? ids.map((id) => resolve(id) ?? id).join(", ") : void 0;
+};
+const structuredSummary = (field, value, lookups) => {
+	switch (field.type) {
+		case "richtext": return isRecord$1(value) ? richTextPlainText(value) || void 0 : void 0;
+		case "media": return referenceSummary(value, lookups.mediaName);
+		case "relation": return referenceSummary(value, lookups.entryTitle);
+		case "component": return componentSummary(field, value, lookups);
+		case "dynamiczone": return zoneSummary(value, lookups);
+		case "code": return typeof value === "string" ? `${CODE_LANGUAGE_LABELS[field.settings.language] ?? field.settings.language}, ${plural(value.split("\n").length, "line", "lines")}` : void 0;
+		case "json": return JSON.stringify(value);
+		case "enum": {
+			const values = listOf(value);
+			return values.every((item) => typeof item === "string") ? values.map((item) => field.settings.values.find((option) => option.value === item)?.label ?? item).join(", ") : void 0;
+		}
+		case "boolean": return typeof value === "boolean" ? value ? "Yes" : "No" : void 0;
+		default: return typeof value === "string" || typeof value === "number" ? String(value) : void 0;
+	}
+};
+/** The value as one line of at most MAX_SUMMARY characters; null when empty. */
+const summarizeValue = (field, value, lookups) => {
+	if (isEmpty(value)) return null;
+	const summary = structuredSummary(field, value, lookups);
+	return summary === void 0 ? rawText(value) : truncate(summary);
+};
+/** Media and related entry IDs a value refers to directly (top-level media and relation fields). */
+const referencesOf = (field, value) => (field.type === "media" || field.type === "relation") && !isEmpty(value) ? listOf(value).filter((id) => isStableId(id)) : [];
+const componentLookup = (snapshots) => (id) => {
+	for (const snapshot of snapshots) {
+		const definition = snapshot.byId.get(id)?.definition;
+		if (definition && isComponentDefinition(definition)) return definition;
+	}
+};
+/** Original file names of the referenced assets on the site, when the reviewer may browse media. */
+const loadMediaNames = async (context, ids) => {
+	if (ids.length === 0 || !await context.permissions.canPerform(context.actor, "media.read")) return /* @__PURE__ */ new Map();
+	const rows = await findNamesOnSite(context.site.id, ids, context.db);
+	return new Map(rows.map((row) => [row.id, row.original_filename]));
+};
+/** Target models whose entries' titles the reviewer may read (the model and its title field). */
+const readableTargets = async (context, snapshot, modelIds) => {
+	const readable = [];
+	for (const modelId of modelIds) {
+		const definition = snapshot.byId.get(modelId)?.definition;
+		const titleField = definition ? effectiveTitleField(definition) : void 0;
+		if (!titleField) continue;
+		const policy = await context.permissions.evaluate(context.actor, {
+			action: "read",
+			modelId
+		});
+		if (policy.allowed && maskAllows(policy.readMask, titleField)) readable.push(modelId);
+	}
+	return readable;
+};
+/**
+* Loads what the summaries refer to, in one query each: asset names (site-scoped, `media.read`) and the titles
+* of related entries (site-scoped, only for target models whose title field the reviewer may read). Returns
+* lookups for one locale (a related entry's title in the item's locale, else another).
+*/
+const loadSummaryLookups = async (context, snapshots, fields) => {
+	const mediaIds = /* @__PURE__ */ new Set();
+	const entryIds = /* @__PURE__ */ new Set();
+	const targetModels = /* @__PURE__ */ new Set();
+	for (const { field, values } of fields) {
+		const ids = values.flatMap((value) => referencesOf(field, value));
+		if (field.type === "media") ids.forEach((id) => mediaIds.add(id));
+		else if (field.type === "relation" && ids.length > 0) {
+			ids.forEach((id) => entryIds.add(id));
+			targetModels.add(field.settings.target);
+		}
+	}
+	const [snapshot] = snapshots;
+	const [mediaNames, heads] = await Promise.all([loadMediaNames(context, [...mediaIds]), entryIds.size === 0 ? Promise.resolve([]) : readableTargets(context, snapshot, targetModels).then((models) => findForEntriesOnSite(context.site.id, models, [...entryIds], context.db))]);
+	const component = componentLookup(snapshots);
+	return (locale) => ({
+		component,
+		mediaName: (id) => mediaNames.get(id),
+		entryTitle: (id) => {
+			const own = heads.filter((head) => head.entry_id === id);
+			return own[0] ? titleOf(snapshot, own[0].model_id, own, locale) ?? void 0 : void 0;
+		}
+	});
+};
 //#endregion
 //#region src/services/changeSetReview.ts
 /** Entry content cannot use fields that only the set's drafts add (v1): they are written after shipping. */
@@ -32158,13 +32365,26 @@ const fieldDiff = (fields, before, after) => fields.flatMap((field) => {
 	const old = before?.[field.id] ?? null;
 	const next = after?.[field.id] ?? null;
 	return sameValue(old, next) ? [] : [{
-		fieldId: field.id,
-		apiKey: field.apiKey,
-		label: field.label,
+		field,
 		before: old,
 		after: next
 	}];
 });
+const withSummaries = (entry, lookups) => ({
+	...entry,
+	fields: entry.fields.map(({ field, before, after }) => ({
+		fieldId: field.id,
+		apiKey: field.apiKey,
+		label: field.label,
+		type: field.type,
+		before,
+		after,
+		summary: {
+			before: summarizeValue(field, before, lookups),
+			after: summarizeValue(field, after, lookups)
+		}
+	}))
+});
 /** What an item publishes: its source revision (restore), the draft, or nothing (unpublish). */
 const afterOf = async (review, item, draft) => {
 	if (item.action === "unpublish") return null;
@@ -32317,8 +32537,13 @@ const getChangeSetReview = async (context, id) => {
 		converted: convertedModelIds(plans),
 		heads: await findHeadsForEntries([...new Set(entryItems.map((item) => item.entry_id ?? ""))], context.db)
 	};
-	const entries = [];
-	for (const item of entryItems) entries.push(await reviewEntry(review, item));
+	const raw = [];
+	for (const item of entryItems) raw.push(await reviewEntry(review, item));
+	const lookupsFor = await loadSummaryLookups(context, [review.proposed, context.snapshot], raw.flatMap((entry) => entry.fields.map(({ field, before, after }) => ({
+		field,
+		values: [before, after]
+	}))));
+	const entries = raw.map((entry) => withSummaries(entry, lookupsFor(entry.locale)));
 	const schema = await reviewSchema(context, id, plans, items);
 	const notices = [...plans.length > 0 && entryItems.length > 0 ? [NOTICE_NEW_FIELDS_AFTER_SHIP] : [], ...entryItems.some((item) => review.converted.has(item.model_id ?? "")) ? [NOTICE_CONVERTED_ON_SHIP] : []];
 	return {
@@ -35115,8 +35340,14 @@ const FieldDiffSchema = Type.Object({
 	fieldId: Type.String(),
 	apiKey: Type.String(),
 	label: Type.String(),
+	type: Type.Enum(DATA_TYPES),
 	before: Type.Unknown(),
-	after: Type.Unknown()
+	after: Type.Unknown(),
+	/** Readable one-line summaries of `before` and `after` (null when empty). */
+	summary: Type.Object({
+		before: NullableString,
+		after: NullableString
+	})
 });
 const ReviewIssueSchema = Type.Object({
 	path: Type.String(),
@@ -35500,9 +35731,28 @@ const toRunView = (row) => {
 	};
 };
 const connectionNotFound = (id) => new AppError(404, "CONNECTION_NOT_FOUND", `No deployment connection ${id}`, { id });
+const isSecretUnreadable = (error) => error instanceof AppError && error.code === "SECRET_UNREADABLE";
+/**
+* The connection's literal secrets, or none with `unreadable` when they cannot be decrypted: one connection
+* whose secrets were sealed under another key must not break the list, and is repaired by entering them again.
+*/
+const readStoredSecrets = (runtime, row) => {
+	try {
+		return {
+			literal: runtime.secrets.decryptJson(row.secrets_encrypted),
+			unreadable: false
+		};
+	} catch (error) {
+		if (!isSecretUnreadable(error)) throw error;
+		return {
+			literal: {},
+			unreadable: true
+		};
+	}
+};
 const toConnectionView = (runtime, row, runs) => {
 	const provider = providerFor(row.provider);
-	const stored = runtime.secrets.decryptJson(row.secrets_encrypted);
+	const { literal: stored, unreadable } = readStoredSecrets(runtime, row);
 	const refs = envRefsOf(row.secret_env_refs);
 	return {
 		id: row.id,
@@ -35525,7 +35775,8 @@ const toConnectionView = (runtime, row, runs) => {
 		createdBy: row.created_by,
 		createdAt: row.created_at,
 		updatedAt: row.updated_at,
-		version: row.version
+		version: row.version,
+		secretsUnreadable: unreadable
 	};
 };
 const viewsOf = async (runtime, rows) => {
@@ -35692,16 +35943,26 @@ const updateConnection$1 = async (runtime, context, id, input) => {
 	const current = await findConnection(runtime, context.site, id);
 	const provider = providerFor(current.provider);
 	const settings = input.settings ? validateSettings(provider, input.settings) : settingsOf$3(current);
-	const { literal, refs } = mergeSecrets(provider, {
-		literal: runtime.secrets.decryptJson(current.secrets_encrypted),
-		refs: envRefsOf(current.secret_env_refs)
+	const stored = readStoredSecrets(runtime, current);
+	const secretsGiven = Object.values(input.secrets ?? {}).some((value) => value.trim() !== "");
+	const regenerate = stored.unreadable && provider.secrets.some((spec) => spec.generated && input.secrets?.[spec.name]?.trim() === "");
+	const keepSealed = stored.unreadable && !secretsGiven && !regenerate;
+	const refs = envRefsOf(current.secret_env_refs);
+	const merged = keepSealed ? {
+		literal: {},
+		refs,
+		generated: {}
+	} : mergeSecrets(provider, {
+		literal: stored.literal,
+		refs
 	}, input.secrets, runtime.config.secretEnvAllowlist);
+	const { literal } = merged;
 	const allowPrivateNetwork = input.allowPrivateNetwork ?? current.allow_private_network;
 	await assertDestinations(runtime, provider, {
 		settings,
 		secrets: knownSecrets(runtime, {
 			literal,
-			refs
+			refs: merged.refs
 		})
 	}, allowPrivateNetwork);
 	const deliveryRoleId = input.deliveryRoleId !== void 0 ? await validateDeliveryRole(runtime, input.deliveryRoleId) : void 0;
@@ -35709,8 +35970,8 @@ const updateConnection$1 = async (runtime, context, id, input) => {
 		if (!await update$1(id, {
 			...input.name !== void 0 ? { name: input.name.trim() } : {},
 			settings: JSON.stringify(settings),
-			secrets_encrypted: runtime.secrets.encryptJson(literal),
-			secret_env_refs: JSON.stringify(refs),
+			...keepSealed ? {} : { secrets_encrypted: runtime.secrets.encryptJson(literal) },
+			secret_env_refs: JSON.stringify(merged.refs),
 			...deliveryRoleId !== void 0 ? { delivery_role_id: deliveryRoleId } : {},
 			...input.previewUrlTemplate !== void 0 ? { preview_url_template: validatePreviewTemplate(runtime, input.previewUrlTemplate) } : {},
 			...input.triggerPolicy !== void 0 ? { trigger_policy: validateTriggers(provider, input.triggerPolicy) } : {},
@@ -35727,11 +35988,16 @@ const updateConnection$1 = async (runtime, context, id, input) => {
 			},
 			metadata: {
 				changes: Object.keys(input).filter((key) => key !== "expectedVersion" && key !== "secrets"),
-				secretsReplaced: Object.keys(input.secrets ?? {}).filter((key) => input.secrets?.[key])
+				secretsReplaced: Object.keys(input.secrets ?? {}).filter((key) => input.secrets?.[key]),
+				...Object.keys(merged.generated).length > 0 ? { secretsGenerated: Object.keys(merged.generated) } : {}
 			}
 		});
 	});
-	return getConnection$1(runtime, context.site, id);
+	const connection = await getConnection$1(runtime, context.site, id);
+	return Object.keys(merged.generated).length > 0 ? {
+		...connection,
+		generatedSecrets: merged.generated
+	} : connection;
 };
 const deleteConnection$1 = async (runtime, context, id) => {
 	await runtime.db.transaction().execute(async (trx) => {
@@ -35901,7 +36167,14 @@ const ConnectionSchema$1 = Type.Object({
 	createdBy: Type.Union([UuidSchema, Type.Null()]),
 	createdAt: DateTimeSchema,
 	updatedAt: DateTimeSchema,
-	version: Type.Integer()
+	version: Type.Integer(),
+	/** The stored secrets cannot be decrypted (SESSION_SECRET changed): enter them again. */
+	secretsUnreadable: Type.Boolean()
+});
+/** An update may mint a replacement for an unreadable generated secret: shown once. */
+const UpdatedConnectionSchema = Type.Object({
+	...ConnectionSchema$1.properties,
+	generatedSecrets: Type.Optional(Type.Record(Type.String(), Type.String()))
 });
 const errors$7 = {
 	400: ErrorResponseSchema,
@@ -35958,7 +36231,7 @@ const updateConnectionSchema = {
 		expectedVersion: VersionSchema
 	}, { additionalProperties: false }),
 	response: {
-		200: ConnectionSchema$1,
+		200: UpdatedConnectionSchema,
 		...errors$7
 	}
 };
@@ -39228,7 +39501,7 @@ const openStoredBundle = (storage, stored) => storage.get(stored.driver).getStre
 const removeStoredBundle = (storage, stored) => storage.get(stored.driver).delete(stored.key);
 //#endregion
 //#region src/constants/version.ts
-const SHAPIO_VERSION = "0.5.4";
+const SHAPIO_VERSION = "0.5.5";
 //#endregion
 //#region src/repositories/transferExport.ts
 /**
@@ -47549,7 +47822,8 @@ const buildApp = async (config, deps) => {
 	await app.register(securityPlugin, {
 		http: config.http,
 		httpsPublicUrl: urls.publicUrl.startsWith("https:"),
-		mediaOrigins: await resolveMediaOrigins(config.storage)
+		mediaOrigins: await resolveMediaOrigins(config.storage),
+		adminPrefix: adminPrefixFor(urls)
 	});
 	app.decorate("schemaLookup", schemaLookup);
 	app.decorate("signingSecret", deps.signingSecret ?? await resolveSigningSecret(deps.db, config.sessionSecret, app.log));
@@ -48591,12 +48865,58 @@ const pruneExtensionHookRuns = async (before, limit, trx = db) => deleted(await
 const pruneResolvedHealthFindings = async (before, limit, trx = db) => deleted(await trx.deleteFrom("content_health_findings").where("id", "in", (eb) => eb.selectFrom("content_health_findings").select("id").where("resolved_at", "is not", null).where("resolved_at", "<", before).limit(limit)).executeTakeFirstOrThrow());
 /** Presence rows of tabs that stopped sending heartbeats (reads ignore them already; this frees space). */
 const pruneStalePresence = async (before, limit, trx = db) => deleted(await trx.deleteFrom("editor_presence").where("last_seen_at", "<", before).where("entry_id", "in", (eb) => eb.selectFrom("editor_presence").select("entry_id").where("last_seen_at", "<", before).limit(limit)).executeTakeFirstOrThrow());
+/**
+* Dead jobs of one type that finished before a cutoff, with their payload, in id order after `afterId`
+* (keyset paging). Read only: dead jobs stay for an operator.
+*/
+const listDeadJobs = (type, before, afterId, limit, trx = db) => trx.selectFrom("jobs").select(["id", "payload"]).where("type", "=", type).where("status", "=", "dead").where("finished_at", "<", before).$if(afterId !== null, (qb) => qb.where("id", ">", afterId)).orderBy("id").limit(limit).execute();
+//#endregion
+//#region src/content/transfer/deadBundles.ts
+const PAGE_SIZE = 500;
+/** The stored bundle a `transfer.import` payload names; undefined when the payload has none. */
+const bundleOf = (payload) => {
+	const bundle = payload?.bundle;
+	return typeof bundle?.driver === "string" && typeof bundle.key === "string" ? {
+		driver: bundle.driver,
+		key: bundle.key
+	} : void 0;
+};
+/**
+* Removes the stored bundles of `transfer.import` jobs that died before `before`. A dead job keeps its bundle
+* for the retention period so an operator's retry can still run; after that the bundle only takes space. The
+* job rows stay. Deleting a missing object succeeds, so bundles already gone (an earlier sweep, a cleanup
+* phase) cost a no-op each. A bundle that cannot be removed is logged and left for the next day's sweep.
+*/
+const removeDeadImportBundles = async (db, storage, before, { signal, log }) => {
+	let removed = 0;
+	let afterId = null;
+	for (;;) {
+		const jobs = await listDeadJobs(TRANSFER_IMPORT_JOB, before, afterId, PAGE_SIZE, db);
+		for (const job of jobs) {
+			const bundle = bundleOf(job.payload);
+			if (!bundle) continue;
+			try {
+				await removeStoredBundle(storage, bundle);
+				removed += 1;
+			} catch (error) {
+				log.warn({
+					err: describeError(error),
+					jobId: job.id,
+					key: bundle.key
+				}, "could not remove the bundle of a dead import");
+			}
+		}
+		afterId = jobs.at(-1)?.id ?? afterId;
+		if (jobs.length < PAGE_SIZE || signal.aborted) return removed;
+	}
+};
 //#endregion
 //#region src/jobs/retention.ts
 /**
 * `system.retention`: once a day, delete finished bookkeeping older than RETENTION_DAYS (succeeded jobs,
 * dispatched outbox events, after-hook run records, resolved health findings) and stale presence rows; usage
-* counters and assist runs older than USAGE_RETENTION_DAYS. Dead jobs and undispatched events stay for an operator.
+* counters and assist runs older than USAGE_RETENTION_DAYS. Dead jobs and undispatched events stay for an operator;
+* the stored bundles of imports that died before the cutoff are removed (with `storage`).
 * One job per UTC day (idempotency key `system.retention:<date>`); each run schedules the next day's, and
 * every worker start makes sure today's exists, so instances starting together still create one.
 */
@@ -48621,7 +48941,7 @@ const pruneAll = async (prune, db, before, signal) => {
 		if (removed < BATCH_SIZE || signal.aborted) return total;
 	}
 };
-const createRetentionJobHandlers = (db, { days, usageDays = days, now = () => /* @__PURE__ */ new Date() }) => [[RETENTION_JOB, async (job) => {
+const createRetentionJobHandlers = (db, { days, usageDays = days, now = () => /* @__PURE__ */ new Date(), storage }) => [[RETENTION_JOB, async (job) => {
 	const at = now();
 	const before = /* @__PURE__ */ new Date(at.getTime() - days * DAY_MS);
 	const usageBefore = usageDayOf(/* @__PURE__ */ new Date(at.getTime() - (usageDays - 1) * DAY_MS));
@@ -48633,7 +48953,11 @@ const createRetentionJobHandlers = (db, { days, usageDays = days, now = () => /*
 		tokenReads: await pruneAll(pruneTokenReads, db, usageBefore, job.signal),
 		assistRuns: await pruneAll(pruneRuns, db, /* @__PURE__ */ new Date(at.getTime() - usageDays * DAY_MS), job.signal),
 		healthFindings: await pruneAll(pruneResolvedHealthFindings, db, before, job.signal),
-		editorPresence: await pruneAll(pruneStalePresence, db, /* @__PURE__ */ new Date(at.getTime() - PRESENCE_RETENTION_MS), job.signal)
+		editorPresence: await pruneAll(pruneStalePresence, db, /* @__PURE__ */ new Date(at.getTime() - PRESENCE_RETENTION_MS), job.signal),
+		transferBundles: storage ? await removeDeadImportBundles(db, storage, before, {
+			signal: job.signal,
+			log: job.log
+		}) : 0
 	};
 	const next = new Date(at.getTime() + DAY_MS);
 	await enqueueJob({
@@ -49716,7 +50040,8 @@ const createConfiguredWorker = async (config, db, logger, signingSecret, extensi
 			...extensions.jobHandlers,
 			...createRetentionJobHandlers(db, {
 				days: config.retention.days,
-				usageDays: config.usage.retentionDays
+				usageDays: config.usage.retentionDays,
+				storage
 			}),
 			...createContentHealthJobHandlers({
 				db,
@@ -49870,6 +50195,6 @@ const startDedicatedWorker = async (config) => {
 	return worker;
 };
 //#endregion
-export { parseLockFile as $, buildEditorManifest as A, RESERVED_DEFINITION_API_KEYS as B, loopbackUrl as C, BEFORE_EVENTS as D, AFTER_EVENTS as E, lockById$5 as F, THEME_VARIANTS as G, RESERVED_TYPE_NAMES as H, update$8 as I, hashDefinition as J, checkThemeContrast as K, STORAGE_DRIVERS$1 as L, isValidStorageKey as M, listForAssets as N, EXTENSION_JOB_PREFIX as O, listLiveByDriver as P, parseDefinition as Q, describeError as R, createUrlBuilder as S, loadProjectConfig as T, SCHEMA_KIND_DIRECTORIES as U, RESERVED_FIELD_API_KEYS as V, SITES_DIRECTORY as W, lockEntriesForSite as X, lockCoversSite as Y, mergePulledLock as Z, listAllSites as _, loadConfig as a, toTypeName as at, generateToken as b, bucketContentDisposition as c, withSiteCovered as ct, migrateToLatest as d, createStableId as dt, schemaFilePath as et, SHAPIO_VERSION as f, validateRichText as ft, createSite$1 as g, ObjectNotFoundError as h, assertDatabaseReachable as i, suggestPlural as it, encodeKeyPath as j, EXTENSION_ROUTE_ROOT as k, contentDisposition as l, RICHTEXT_FORMAT as lt, InvalidStorageKeyError as m, sqliteDriverOf as mt, startServer as n, serializeDefinition as nt, loadEnvFileIfPresent as o, upgradeLockFile as ot, createMediaStorage as p, createDb as pt, foldApiKey as q, copyObjectVerified as r, serializeLockFile as rt, buildApp as s, validateSchema as st, startDedicatedWorker as t, scopeDirectory as tt, getPendingMigrations as u, SAFE_LINK_PATTERN as ut, createAdminDirect as v, SITE_KEY_PATTERN as w, createLogger as x, SYSTEM_CLI_ACTOR as y, LOCK_FILE_PATH as z };
+export { parseDefinition as $, buildEditorManifest as A, RESERVED_DEFINITION_API_KEYS as B, loopbackUrl as C, BEFORE_EVENTS as D, AFTER_EVENTS as E, lockById$5 as F, THEME_VARIANTS as G, RESERVED_TYPE_NAMES as H, update$8 as I, generatedNames as J, checkThemeContrast as K, STORAGE_DRIVERS$1 as L, isValidStorageKey as M, listForAssets as N, EXTENSION_JOB_PREFIX as O, listLiveByDriver as P, mergePulledLock as Q, describeError as R, createUrlBuilder as S, loadProjectConfig as T, SCHEMA_KIND_DIRECTORIES as U, RESERVED_FIELD_API_KEYS as V, SITES_DIRECTORY as W, lockCoversSite as X, hashDefinition as Y, lockEntriesForSite as Z, listAllSites as _, loadConfig as a, serializeLockFile as at, generateToken as b, bucketContentDisposition as c, upgradeLockFile as ct, migrateToLatest as d, RICHTEXT_FORMAT as dt, parseLockFile as et, SHAPIO_VERSION as f, SAFE_LINK_PATTERN as ft, createSite$1 as g, sqliteDriverOf as gt, ObjectNotFoundError as h, createDb as ht, assertDatabaseReachable as i, serializeDefinition as it, encodeKeyPath as j, EXTENSION_ROUTE_ROOT as k, contentDisposition as l, validateSchema as lt, InvalidStorageKeyError as m, validateRichText as mt, startServer as n, schemaFilePath as nt, loadEnvFileIfPresent as o, suggestPlural as ot, createMediaStorage as p, createStableId as pt, foldApiKey as q, copyObjectVerified as r, scopeDirectory as rt, buildApp as s, toTypeName as st, startDedicatedWorker as t, routeKeyOf as tt, getPendingMigrations as u, withSiteCovered as ut, createAdminDirect as v, SITE_KEY_PATTERN as w, createLogger as x, SYSTEM_CLI_ACTOR as y, LOCK_FILE_PATH as z };
 
-//# sourceMappingURL=worker-CFEk-WtR.js.map
+//# sourceMappingURL=worker-DMES6pqh.js.map