dineway 0.1.14 → 0.1.16

package/dist/plugins/adapt-sandbox-entry.mjs

@@ -1,4 +1,4 @@
-import { n as PLUGIN_CAPABILITIES, t as HOOK_NAMES } from "../manifest-schema-CgFJAp0H.mjs";
+import { n as PLUGIN_CAPABILITIES, t as HOOK_NAMES } from "../manifest-schema-CU0XL_ZK.mjs";
 
 //#region src/plugins/adapt-sandbox-entry.ts
 /**

package/dist/{plugins-D7-ILNib.mjs → plugins-DKceDtUM.mjs}

@@ -1,7 +1,7 @@
-import { t as OptionsRepository } from "./options-z8VVg1Ll.mjs";
-import { n as createPluginContext, t as PluginContextFactory } from "./context-CNIkMzot.mjs";
-import { t as extractRequestMeta } from "./request-meta-DixlNKKa.mjs";
-import { r as setCronTasksEnabled } from "./cron-CKxvBrRT.mjs";
+import { t as OptionsRepository } from "./options-BF11H_FD.mjs";
+import { n as createPluginContext, t as PluginContextFactory } from "./context-CT44ux1O.mjs";
+import { t as extractRequestMeta } from "./request-meta-BVx9KkL-.mjs";
+import { r as setCronTasksEnabled } from "./cron-fV9baRVc.mjs";
 import { sql } from "kysely";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { ulid } from "ulidx";
@@ -23,13 +23,15 @@ const imageSchema = z.object({
 * Image field
 * References media items from the media library
 */
-function image(options) {
+function image(options = {}) {
+	const validation = options.allowedTypes && options.allowedTypes.length > 0 ? { allowedMimeTypes: [...options.allowedTypes] } : void 0;
 	return {
 		type: "image",
 		columnType: "TEXT",
-		schema: options?.required === false ? imageSchema.optional() : imageSchema,
+		schema: options.required === false ? imageSchema.optional() : imageSchema,
 		options,
-		ui: { widget: "image" }
+		ui: { widget: "image" },
+		validation
 	};
 }
 

package/dist/{preview-DvYRU-Oy.mjs → preview-CIDYFBzd.mjs}

@@ -1,7 +1,7 @@
 import { runWithContext } from "./request-context.mjs";
 import { n as createDatabase } from "./connection-BCNICDWN.mjs";
-import { a as verifyPreviewSignature, t as buildPreviewSignatureHeader } from "./sidecar-client-B1C6Cf80.mjs";
-import { t as generatePreviewToken } from "./tokens-BOJw-D9F.mjs";
+import { a as verifyPreviewSignature, t as buildPreviewSignatureHeader } from "./sidecar-client-Dta0AELf.mjs";
+import { t as generatePreviewToken } from "./tokens-DB4dASZl.mjs";
 import BetterSqlite3 from "better-sqlite3";
 import { sql } from "kysely";
 import { ulid } from "ulidx";

package/dist/{provider-loader-BiQ6lNmf.d.mts → provider-loader-D0F6E2qv.d.mts}

@@ -1,4 +1,4 @@
-import { l as MediaProvider } from "./types-OPs5Q_sX.mjs";
+import { l as MediaProvider } from "./types-D_wGrwiY.mjs";
 
 //#region src/media/provider-loader.d.ts
 /**

package/dist/{query-CsbOywSY.mjs → query-BtuwuZRd.mjs}

@@ -1,6 +1,6 @@
-import { n as SchemaRegistry } from "./registry-C-_hxLqa.mjs";
-import { r as getDb } from "./loader-PZnPxFLc.mjs";
-import { n as requestCached } from "./request-cache-DHMRr2Lf.mjs";
+import { n as requestCached } from "./request-cache-DmVyQUBh.mjs";
+import { n as SchemaRegistry } from "./registry-DumDzFDn.mjs";
+import { r as getDb } from "./loader-CQFxFOt1.mjs";
 
 //#region src/schema/query.ts
 /**

package/dist/{query-B9BO5goQ.mjs → query-CWPxZjGM.mjs}

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./chunk-ClPoSABd.mjs";
 import { getRequestContext } from "./request-context.mjs";
-import { r as encodeCursor } from "./types-Bs6lTBBW.mjs";
-import { n as getI18nConfig, r as isI18nEnabled, t as getFallbackChain } from "./config-CAMFxGaV.mjs";
-import { t as CURSOR_RAW_VALUES } from "./loader-PZnPxFLc.mjs";
-import { n as requestCached } from "./request-cache-DHMRr2Lf.mjs";
-import { t as isMissingTableError } from "./db-errors-DyZkswzF.mjs";
+import { n as getI18nConfig, r as isI18nEnabled, t as getFallbackChain } from "./config-XW5tMrH8.mjs";
+import { r as encodeCursor } from "./types-D1DjBFA9.mjs";
+import { n as requestCached } from "./request-cache-DmVyQUBh.mjs";
+import { t as CURSOR_RAW_VALUES } from "./loader-CQFxFOt1.mjs";
+import { t as isMissingTableError } from "./db-errors-BnUbfGsK.mjs";
 
 //#region src/visual-editing/editable.ts
 /**
@@ -436,7 +436,7 @@ async function getDinewayEntry(type, id, options) {
 async function hydrateEntryBylines(type, entries) {
 	if (entries.length === 0) return;
 	try {
-		const { getBylinesForEntries } = await import("./bylines-C4LIBOOO.mjs").then((n) => n.t);
+		const { getBylinesForEntries } = await import("./bylines-DhCnhR70.mjs").then((n) => n.t);
 		const refs = entries.map((entry) => {
 			const data = entryData(entry);
 			const id = dataStr(data, "id");
@@ -465,7 +465,7 @@ async function hydrateEntryBylines(type, entries) {
 async function hydrateEntryTerms(type, entries) {
 	if (entries.length === 0) return;
 	try {
-		const { getAllTermsForEntries } = await import("./taxonomies-D2aZGuns.mjs").then((n) => n.l);
+		const { getAllTermsForEntries } = await import("./taxonomies-BWmxbumf.mjs").then((n) => n.l);
 		const ids = entries.map((entry) => dataStr(entryData(entry), "id")).filter(Boolean);
 		if (ids.length === 0) return;
 		const termsMap = await getAllTermsForEntries(type, ids);
@@ -499,9 +499,9 @@ async function hydrateEntryTerms(type, entries) {
 */
 async function getTranslations(type, id) {
 	try {
-		const db = (await import("./loader-PZnPxFLc.mjs").then((n) => n.i)).getDb;
+		const db = (await import("./loader-CQFxFOt1.mjs").then((n) => n.i)).getDb;
 		const dbInstance = await db();
-		const { ContentRepository } = await import("./content-CyLkb-qH.mjs").then((n) => n.n);
+		const { ContentRepository } = await import("./content-DvpMad_N.mjs").then((n) => n.n);
 		const repo = new ContentRepository(dbInstance);
 		const item = await repo.findByIdOrSlug(type, id);
 		if (!item) return {
@@ -568,8 +568,8 @@ async function resolveDinewayPath(path) {
 	const hasDbOverride = !!getRequestContext()?.db;
 	let patterns = !hasDbOverride ? cachedUrlPatterns : null;
 	if (!patterns) {
-		const { getDb } = await import("./loader-PZnPxFLc.mjs").then((n) => n.i);
-		const { SchemaRegistry } = await import("./registry-C-_hxLqa.mjs").then((n) => n.r);
+		const { getDb } = await import("./loader-CQFxFOt1.mjs").then((n) => n.i);
+		const { SchemaRegistry } = await import("./registry-DumDzFDn.mjs").then((n) => n.r);
 		patterns = (await new SchemaRegistry(await getDb()).listCollections()).filter((collection) => collection.urlPattern).map((collection) => {
 			const { regex, paramNames } = patternToRegex(collection.urlPattern);
 			return {

package/dist/{rate-limit-DmVTHI5v.mjs → rate-limit-GN64_Jaw.mjs}

@@ -1,5 +1,5 @@
-import { t as apiError } from "./error-BMUPwxgx.mjs";
-import { n as normalizeTrustedHeaders } from "./trusted-proxy-BbaZfkT9.mjs";
+import { t as apiError } from "./error-Dyf9fGZE.mjs";
+import { n as normalizeTrustedHeaders } from "./trusted-proxy-8N8sX1D1.mjs";
 import { sql } from "kysely";
 
 //#region src/auth/rate-limit.ts
@@ -27,9 +27,9 @@ async function checkRateLimit(db, ip, endpoint, maxRequests, windowSeconds) {
 	};
 	const windowStart = (/* @__PURE__ */ new Date(Math.floor(Date.now() / (windowSeconds * 1e3)) * windowSeconds * 1e3)).toISOString();
 	const count = (await sql`
-		INSERT INTO _dineway_rate_limits (key, window, count)
+		INSERT INTO _dineway_rate_limits (key, "window", count)
 		VALUES (${`${ip}:${endpoint}`}, ${windowStart}, 1)
-		ON CONFLICT (key, window)
+		ON CONFLICT (key, "window")
 		DO UPDATE SET count = _dineway_rate_limits.count + 1
 		RETURNING count
 	`.execute(db)).rows[0]?.count ?? 1;
@@ -103,7 +103,7 @@ function readIpFromHeader(headers, name) {
 */
 async function cleanupExpiredRateLimits(db, maxAgeSeconds = 3600) {
 	const result = await sql`
-		DELETE FROM _dineway_rate_limits WHERE window < ${(/* @__PURE__ */ new Date(Date.now() - maxAgeSeconds * 1e3)).toISOString()}
+		DELETE FROM _dineway_rate_limits WHERE "window" < ${(/* @__PURE__ */ new Date(Date.now() - maxAgeSeconds * 1e3)).toISOString()}
 	`.execute(db);
 	return Number(result.numAffectedRows ?? 0);
 }

package/dist/{redirect-CGl64yOX.mjs → redirect-BHo9--Jz.mjs}

@@ -1,6 +1,6 @@
-import { r as currentTimestampValue } from "./dialect-helpers-DhTzaUxP.mjs";
-import { n as decodeCursor, r as encodeCursor } from "./types-Bs6lTBBW.mjs";
-import { i as matchPattern, n as interpolateDestination, r as isPattern, t as compilePattern } from "./patterns-K0DLqWir.mjs";
+import { i as currentTimestampValue } from "./dialect-helpers-TkdbkFad.mjs";
+import { n as decodeCursor, r as encodeCursor } from "./types-D1DjBFA9.mjs";
+import { i as matchPattern, n as interpolateDestination, r as isPattern, t as compilePattern } from "./patterns-CW4n2PQs.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 

package/dist/{redirects-Cgi_cZfN.mjs → redirects-Bc40BgxA.mjs}

@@ -1,7 +1,7 @@
-import { t as OptionsRepository } from "./options-z8VVg1Ll.mjs";
-import { a as validateDestinationParams, i as matchPattern, n as interpolateDestination, o as validatePattern, r as isPattern, t as compilePattern } from "./patterns-K0DLqWir.mjs";
-import { t as RedirectRepository } from "./redirect-CGl64yOX.mjs";
-import { i as invalidateRedirectCache } from "./cache-DEbQ13c9.mjs";
+import { t as OptionsRepository } from "./options-BF11H_FD.mjs";
+import { a as validateDestinationParams, i as matchPattern, n as interpolateDestination, o as validatePattern, r as isPattern, t as compilePattern } from "./patterns-CW4n2PQs.mjs";
+import { t as RedirectRepository } from "./redirect-BHo9--Jz.mjs";
+import { i as invalidateRedirectCache } from "./cache-inQvbrP5.mjs";
 
 //#region src/redirects/loops.ts
 /**

package/dist/{redirects-lrlmYXVE.mjs → redirects-xVDvj_yQ.mjs}

@@ -1,4 +1,4 @@
-import { t as isSafeHref } from "./url-DNjT2abR.mjs";
+import { t as isSafeHref } from "./url-DOS4RGym.mjs";
 import { z } from "zod";
 
 //#region src/api/schemas/common.ts
@@ -30,6 +30,8 @@ const HTTP_SCHEME_RE = /^https?:\/\//i;
 const httpUrl = z.string().url().refine((url) => HTTP_SCHEME_RE.test(url), "URL must use http or https");
 /** BCP 47 locale code — language with optional script/region subtags (e.g. en, en-US, pt-BR, es-419, zh-Hant) */
 const localeCode = z.string().regex(/^[a-z]{2,3}(-[a-z0-9]{2,8})*$/i, "Invalid locale code").transform((v) => v.toLowerCase());
+/** Shared `?locale=xx` query shape for endpoints that filter by locale. */
+const localeFilterQuery = z.object({ locale: z.string().min(1).optional() }).meta({ id: "LocaleFilterQuery" });
 /** Standard API error response */
 const apiErrorSchema = z.object({ error: z.object({
 	code: z.string().meta({
@@ -241,7 +243,10 @@ const contentTranslationsResponseSchema = z.object({
 
 //#endregion
 //#region src/api/schemas/media.ts
-const mediaListQuery = cursorPaginationQuery.extend({ mimeType: z.string().optional() }).meta({ id: "MediaListQuery" });
+const mimeTypeFilter = z.union([z.string(), z.array(z.string())]).transform((value) => {
+	return (Array.isArray(value) ? value : value.split(",")).map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+}).optional();
+const mediaListQuery = cursorPaginationQuery.extend({ mimeType: mimeTypeFilter }).meta({ id: "MediaListQuery" });
 const mediaUpdateBody = z.object({
 	alt: z.string().optional(),
 	caption: z.string().optional(),
@@ -255,13 +260,15 @@ function formatFileSize(bytes) {
 	if (bytes < 1024 * 1024) return `${Math.floor(bytes / 1024)}KB`;
 	return `${Math.floor(bytes / 1024 / 1024)}MB`;
 }
+const CONTENT_TYPE_RE = /^[a-z0-9][a-z0-9!#$&^_+\-.]*\/[a-z0-9!#$&^_+\-.]+(\s*;[^\r\n]*)?$/i;
 function mediaUploadUrlBody(maxSize) {
 	if (!Number.isFinite(maxSize) || maxSize <= 0) throw new Error(`Dineway: maxUploadSize must be a positive finite number, got ${maxSize}`);
 	return z.object({
 		filename: z.string().min(1, "filename is required"),
-		contentType: z.string().min(1, "contentType is required"),
+		contentType: z.string().min(1, "contentType is required").regex(CONTENT_TYPE_RE, "Invalid content type"),
 		size: z.number().int().positive().max(maxSize, `File size must not exceed ${formatFileSize(maxSize)}`),
-		contentHash: z.string().optional()
+		contentHash: z.string().optional(),
+		fieldId: z.string().optional()
 	}).meta({ id: "MediaUploadUrlBody" });
 }
 const mediaConfirmBody = z.object({
@@ -271,7 +278,7 @@ const mediaConfirmBody = z.object({
 }).meta({ id: "MediaConfirmBody" });
 const mediaProviderListQuery = cursorPaginationQuery.extend({
 	query: z.string().optional(),
-	mimeType: z.string().optional()
+	mimeType: mimeTypeFilter
 }).meta({ id: "MediaProviderListQuery" });
 const mediaStatusSchema = z.enum([
 	"pending",
@@ -371,7 +378,8 @@ const fieldValidation = z.object({
 	options: z.array(z.string()).optional(),
 	subFields: z.array(repeaterSubFieldSchema).min(1).optional(),
 	minItems: z.number().int().min(0).optional(),
-	maxItems: z.number().int().min(1).optional()
+	maxItems: z.number().int().min(1).optional(),
+	allowedMimeTypes: z.array(z.string().regex(/^[a-z0-9][a-z0-9!#$&^_+\-.]*\/[a-z0-9!#$&^_+\-.]*$/i, "Invalid MIME type")).min(1, "allowedMimeTypes must not be empty; omit the field to allow all types").max(64, "allowedMimeTypes may contain at most 64 entries").optional()
 }).optional();
 const fieldWidgetOptions = z.record(z.string(), z.unknown()).optional();
 const createCollectionBody = z.object({
@@ -575,7 +583,9 @@ const menuItemType = z.string().min(1);
 const safeHref = z.string().trim().refine(isSafeHref, "URL must use http, https, mailto, tel, a relative path, or a fragment identifier");
 const createMenuBody = z.object({
 	name: z.string().min(1),
-	label: z.string().min(1)
+	label: z.string().min(1),
+	locale: z.string().min(1).optional(),
+	translationOf: z.string().min(1).optional()
 }).meta({ id: "CreateMenuBody" });
 const updateMenuBody = z.object({ label: z.string().min(1).optional() }).meta({ id: "UpdateMenuBody" });
 const createMenuItemBody = z.object({
@@ -611,7 +621,9 @@ const menuSchema = z.object({
 	name: z.string(),
 	label: z.string(),
 	created_at: z.string(),
-	updated_at: z.string()
+	updated_at: z.string(),
+	locale: z.string(),
+	translation_group: z.string().nullable()
 }).meta({ id: "Menu" });
 const menuItemSchema = z.object({
 	id: z.string(),
@@ -626,8 +638,20 @@ const menuItemSchema = z.object({
 	title_attr: z.string().nullable(),
 	target: z.string().nullable(),
 	css_classes: z.string().nullable(),
-	created_at: z.string()
+	created_at: z.string(),
+	locale: z.string(),
+	translation_group: z.string().nullable()
 }).meta({ id: "MenuItem" });
+const menuTranslationsSchema = z.object({
+	translationGroup: z.string().nullable(),
+	translations: z.array(z.object({
+		id: z.string(),
+		name: z.string(),
+		label: z.string(),
+		locale: z.string(),
+		updatedAt: z.string()
+	}))
+}).meta({ id: "MenuTranslations" });
 const menuListItemSchema = menuSchema.extend({ itemCount: z.number().int() }).meta({ id: "MenuListItem" });
 const menuWithItemsSchema = menuSchema.extend({ items: z.array(menuItemSchema) }).meta({ id: "MenuWithItems" });
 
@@ -638,14 +662,19 @@ const collectionSlugPattern = /^[a-z][a-z0-9_]*$/;
 const createTaxonomyDefBody = z.object({
 	name: z.string().min(1).max(63).regex(/^[a-z][a-z0-9_]*$/, "Name must be lowercase alphanumeric with underscores"),
 	label: z.string().min(1).max(200),
+	labelSingular: z.string().min(1).max(200).optional(),
 	hierarchical: z.boolean().optional().default(false),
-	collections: z.array(z.string().min(1).max(63).regex(collectionSlugPattern, "Invalid collection slug format")).max(100).optional().default([])
+	collections: z.array(z.string().min(1).max(63).regex(collectionSlugPattern, "Invalid collection slug format")).max(100).optional().default([]),
+	locale: z.string().min(1).optional(),
+	translationOf: z.string().min(1).optional()
 }).meta({ id: "CreateTaxonomyDefBody" });
 const createTermBody = z.object({
 	slug: z.string().min(1),
 	label: z.string().min(1),
 	parentId: z.string().nullish(),
-	description: z.string().optional()
+	description: z.string().optional(),
+	locale: z.string().min(1).optional(),
+	translationOf: z.string().min(1).optional()
 }).meta({ id: "CreateTermBody" });
 const updateTermBody = z.object({
 	slug: z.string().min(1).optional(),
@@ -659,8 +688,19 @@ const taxonomyDefSchema = z.object({
 	label: z.string(),
 	labelSingular: z.string().optional(),
 	hierarchical: z.boolean(),
-	collections: z.array(z.string())
+	collections: z.array(z.string()),
+	locale: z.string(),
+	translationGroup: z.string().nullable()
 }).meta({ id: "TaxonomyDef" });
+const taxonomyDefTranslationsSchema = z.object({
+	translationGroup: z.string().nullable(),
+	translations: z.array(z.object({
+		id: z.string(),
+		name: z.string(),
+		label: z.string(),
+		locale: z.string()
+	}))
+}).meta({ id: "TaxonomyDefTranslations" });
 const taxonomyListResponseSchema = z.object({ taxonomies: z.array(taxonomyDefSchema) }).meta({ id: "TaxonomyListResponse" });
 const termSchema = z.object({
 	id: z.string(),
@@ -668,8 +708,19 @@ const termSchema = z.object({
 	slug: z.string(),
 	label: z.string(),
 	parentId: z.string().nullable(),
-	description: z.string().optional()
+	description: z.string().optional(),
+	locale: z.string(),
+	translationGroup: z.string().nullable()
 }).meta({ id: "Term" });
+const termTranslationsSchema = z.object({
+	translationGroup: z.string().nullable(),
+	translations: z.array(z.object({
+		id: z.string(),
+		slug: z.string(),
+		label: z.string(),
+		locale: z.string()
+	}))
+}).meta({ id: "TermTranslations" });
 const termWithCountSchema = z.object({
 	id: z.string(),
 	name: z.string(),
@@ -678,7 +729,9 @@ const termWithCountSchema = z.object({
 	parentId: z.string().nullable(),
 	description: z.string().optional(),
 	count: z.number().int(),
-	children: z.array(z.lazy(() => termWithCountSchema))
+	children: z.array(z.lazy(() => termWithCountSchema)),
+	locale: z.string(),
+	translationGroup: z.string().nullable()
 }).meta({ id: "TermWithCount" });
 const termListResponseSchema = z.object({ terms: z.array(termWithCountSchema) }).meta({ id: "TermListResponse" });
 const termResponseSchema = z.object({ term: termSchema }).meta({ id: "TermResponse" });
@@ -1020,4 +1073,4 @@ const notFoundSummarySchema = z.object({
 const notFoundSummaryResponseSchema = z.object({ items: z.array(notFoundSummarySchema) }).meta({ id: "NotFoundSummaryResponse" });
 
 //#endregion
-export { menuItemDeleteQuery as $, contentPreviewUrlBody as $t, searchRebuildBody as A, orphanedTableListResponseSchema as At, updateSectionBody as B, mediaItemSchema as Bt, userDetailSchema as C, deleteResponseSchema as Cn, createCollectionBody as Ct, usersListQuery as D, roleLevel as Dn, fieldResponseSchema as Dt, userUpdateBody as E, offsetPaginationQuery as En, fieldReorderBody as Et, siteSettingsSchema as F, DEFAULT_MAX_UPLOAD_SIZE as Ft, termGetResponseSchema as G, mediaUpdateBody as Gt, createTermBody as H, mediaListResponseSchema as Ht, createSectionBody as I, formatFileSize as It, termSchema as J, contentCompareResponseSchema as Jt, termListResponseSchema as K, mediaUploadUrlBody as Kt, sectionListResponseSchema as L, mediaConfirmBody as Lt, searchResultSchema as M, schemaExportQuery as Mt, searchSuggestQuery as N, updateCollectionBody as Nt, searchEnableBody as O, slugPattern as On, fieldSchema as Ot, settingsUpdateBody as P, updateFieldBody as Pt, createMenuItemBody as Q, contentListResponseSchema as Qt, sectionSchema as R, mediaConfirmResponseSchema as Rt, allowedDomainUpdateBody as S, cursorPaginationQuery as Sn, collectionWithFieldsResponseSchema as St, userSchema as T, localeCode as Tn, fieldListResponseSchema as Tt, taxonomyDefSchema as U, mediaProviderListQuery as Ut, createTaxonomyDefBody as V, mediaListQuery as Vt, taxonomyListResponseSchema as W, mediaResponseSchema as Wt, updateTermBody as X, contentItemSchema as Xt, termWithCountSchema as Y, contentCreateBody as Yt, createMenuBody as Z, contentListQuery as Zt, widgetAreaSchema as _, bylinesListQuery as _n, publicCommentSchema as _t, notFoundPruneBody as a, contentTermsBody as an, reorderMenuItemsBody as at, widgetSchema as b, apiErrorSchema as bn, collectionResponseSchema as bt, notFoundSummarySchema as c, contentTrashQuery as cn, adminCommentListResponseSchema as ct, redirectsListQuery as d, trashedContentListResponseSchema as dn, commentCountsResponseSchema as dt, contentPublishBody as en, menuItemSchema as et, updateRedirectBody as f, bylineCreateBody as fn, commentListQuery as ft, updateWidgetBody as g, bylineUpdateBody as gn, publicCommentListResponseSchema as gt, reorderWidgetsBody as h, bylineSummarySchema as hn, createCommentBody as ht, notFoundListResponseSchema as i, contentSeoSchema as in, menuWithItemsSchema as it, searchResponseSchema as j, orphanedTableSchema as jt, searchQuery as k, successEnvelope as kn, orphanRegisterBody as kt, redirectListResponseSchema as l, contentUpdateBody as ln, commentBulkBody as lt, createWidgetBody as m, bylineListResponseSchema as mn, commentStatusBody as mt, notFoundEntrySchema as n, contentScheduleBody as nn, menuListItemSchema as nt, notFoundSummaryQuery as o, contentTranslationSchema as on, updateMenuBody as ot, createWidgetAreaBody as p, bylineCreditSchema as pn, commentSchema as pt, termResponseSchema as q, mediaUploadUrlResponseSchema as qt, notFoundListQuery as r, contentSeoInput as rn, menuSchema as rt, notFoundSummaryResponseSchema as s, contentTranslationsResponseSchema as sn, updateMenuItemBody as st, createRedirectBody as t, contentResponseSchema as tn, menuItemUpdateQuery as tt, redirectSchema as u, trashedContentItemSchema as un, commentBulkResponseSchema as ut, widgetAreaWithWidgetsAndCountSchema as v, contentBylineInputSchema as vn, collectionGetQuery as vt, userListResponseSchema as w, httpUrl as wn, createFieldBody as wt, allowedDomainCreateBody as x, countResponseSchema as xn, collectionSchema as xt, widgetAreaWithWidgetsSchema as y, VALID_ROLE_LEVELS as yn, collectionListResponseSchema as yt, sectionsListQuery as z, mediaExistingResponseSchema as zt };
+export { createMenuBody as $, contentItemSchema as $t, searchRebuildBody as A, offsetPaginationQuery as An, fieldResponseSchema as At, updateSectionBody as B, mediaConfirmBody as Bt, userDetailSchema as C, apiErrorSchema as Cn, collectionResponseSchema as Ct, usersListQuery as D, httpUrl as Dn, createFieldBody as Dt, userUpdateBody as E, deleteResponseSchema as En, createCollectionBody as Et, siteSettingsSchema as F, schemaExportQuery as Ft, taxonomyListResponseSchema as G, mediaListResponseSchema as Gt, createTermBody as H, mediaExistingResponseSchema as Ht, createSectionBody as I, updateCollectionBody as It, termResponseSchema as J, mediaUpdateBody as Jt, termGetResponseSchema as K, mediaProviderListQuery as Kt, sectionListResponseSchema as L, updateFieldBody as Lt, searchResultSchema as M, slugPattern as Mn, orphanRegisterBody as Mt, searchSuggestQuery as N, successEnvelope as Nn, orphanedTableListResponseSchema as Nt, searchEnableBody as O, localeCode as On, fieldListResponseSchema as Ot, settingsUpdateBody as P, orphanedTableSchema as Pt, updateTermBody as Q, contentCreateBody as Qt, sectionSchema as R, DEFAULT_MAX_UPLOAD_SIZE as Rt, allowedDomainUpdateBody as S, VALID_ROLE_LEVELS as Sn, collectionListResponseSchema as St, userSchema as T, cursorPaginationQuery as Tn, collectionWithFieldsResponseSchema as Tt, taxonomyDefSchema as U, mediaItemSchema as Ut, createTaxonomyDefBody as V, mediaConfirmResponseSchema as Vt, taxonomyDefTranslationsSchema as W, mediaListQuery as Wt, termTranslationsSchema as X, mediaUploadUrlResponseSchema as Xt, termSchema as Y, mediaUploadUrlBody as Yt, termWithCountSchema as Z, contentCompareResponseSchema as Zt, widgetAreaSchema as _, bylineListResponseSchema as _n, commentStatusBody as _t, notFoundPruneBody as a, contentScheduleBody as an, menuSchema as at, widgetSchema as b, bylinesListQuery as bn, publicCommentSchema as bt, notFoundSummarySchema as c, contentTermsBody as cn, reorderMenuItemsBody as ct, redirectsListQuery as d, contentTrashQuery as dn, adminCommentListResponseSchema as dt, contentListQuery as en, createMenuItemBody as et, updateRedirectBody as f, contentUpdateBody as fn, commentBulkBody as ft, updateWidgetBody as g, bylineCreditSchema as gn, commentSchema as gt, reorderWidgetsBody as h, bylineCreateBody as hn, commentListQuery as ht, notFoundListResponseSchema as i, contentResponseSchema as in, menuListItemSchema as it, searchResponseSchema as j, roleLevel as jn, fieldSchema as jt, searchQuery as k, localeFilterQuery as kn, fieldReorderBody as kt, redirectListResponseSchema as l, contentTranslationSchema as ln, updateMenuBody as lt, createWidgetBody as m, trashedContentListResponseSchema as mn, commentCountsResponseSchema as mt, notFoundEntrySchema as n, contentPreviewUrlBody as nn, menuItemSchema as nt, notFoundSummaryQuery as o, contentSeoInput as on, menuTranslationsSchema as ot, createWidgetAreaBody as p, trashedContentItemSchema as pn, commentBulkResponseSchema as pt, termListResponseSchema as q, mediaResponseSchema as qt, notFoundListQuery as r, contentPublishBody as rn, menuItemUpdateQuery as rt, notFoundSummaryResponseSchema as s, contentSeoSchema as sn, menuWithItemsSchema as st, createRedirectBody as t, contentListResponseSchema as tn, menuItemDeleteQuery as tt, redirectSchema as u, contentTranslationsResponseSchema as un, updateMenuItemBody as ut, widgetAreaWithWidgetsAndCountSchema as v, bylineSummarySchema as vn, createCommentBody as vt, userListResponseSchema as w, countResponseSchema as wn, collectionSchema as wt, allowedDomainCreateBody as x, contentBylineInputSchema as xn, collectionGetQuery as xt, widgetAreaWithWidgetsSchema as y, bylineUpdateBody as yn, publicCommentListResponseSchema as yt, sectionsListQuery as z, formatFileSize as zt };

package/dist/{registry-C-_hxLqa.mjs → registry-DumDzFDn.mjs}

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./chunk-ClPoSABd.mjs";
 import { t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
-import { c as tableExists, n as currentTimestamp, s as listTablesLike } from "./dialect-helpers-DhTzaUxP.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-D_jVet6z.mjs";
-import { t as withTransaction } from "./transaction-x2tJQ-A1.mjs";
-import { t as FTSManager } from "./fts-manager-B1pTNEG_.mjs";
-import { i as RESERVED_FIELD_SLUGS, n as FIELD_TYPE_TO_COLUMN, r as RESERVED_COLLECTION_SLUGS } from "./types-DL7Y8D_t.mjs";
+import { c as listTablesLike, l as tableExists, r as currentTimestamp } from "./dialect-helpers-TkdbkFad.mjs";
+import { t as withTransaction } from "./transaction-qfqpPVpu.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-vkrCT4Ta.mjs";
+import { t as FTSManager } from "./fts-manager-D7KVeBmg.mjs";
+import { i as RESERVED_FIELD_SLUGS, n as FIELD_TYPE_TO_COLUMN, r as RESERVED_COLLECTION_SLUGS } from "./types-Dz2EKzsX.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 

package/dist/{request-cache-DHMRr2Lf.mjs → request-cache-DmVyQUBh.mjs}

@@ -27,7 +27,11 @@ function requestCached(key, fn) {
 		store.set(ctx, cache);
 	}
 	const existing = cache.get(key);
-	if (existing) return asTypedPromise(existing);
+	if (existing) {
+		if (ctx.metrics) ctx.metrics.cacheHits += 1;
+		return asTypedPromise(existing);
+	}
+	if (ctx.metrics) ctx.metrics.cacheMisses += 1;
 	const promise = Promise.resolve().then(fn).catch((error) => {
 		cache.delete(key);
 		throw error;

package/dist/request-context.d.mts

@@ -1,6 +1,22 @@
 import { QueryRecorder } from "./database/instrumentation.mjs";
 
 //#region src/request-context.d.ts
+/**
+ * Lightweight request counters surfaced in Server-Timing.
+ *
+ * Bumped by the Kysely log hook for database queries and by `requestCached`
+ * for cache hits/misses. Offsets are milliseconds from `start`.
+ */
+interface RequestMetrics {
+  start: number;
+  dbCount: number;
+  dbTotalMs: number;
+  dbFirstOffset: number | null;
+  dbLastOffset: number | null;
+  cacheHits: number;
+  cacheMisses: number;
+}
+declare function createRequestMetrics(start: number): RequestMetrics;
 interface DinewayRequestContext {
   /** Whether the current request is in visual editing mode */
   editMode: boolean;
@@ -22,6 +38,8 @@ interface DinewayRequestContext {
   db?: unknown;
   /** Optional query recorder for per-request instrumentation. */
   queryRecorder?: QueryRecorder;
+  /** Optional metrics collector for Server-Timing request counters. */
+  metrics?: RequestMetrics;
 }
 /**
  * Run a function within a Dineway request context.
@@ -34,4 +52,4 @@ declare function runWithContext<T>(ctx: DinewayRequestContext, fn: () => T): T;
  */
 declare function getRequestContext(): DinewayRequestContext | undefined;
 //#endregion
-export { DinewayRequestContext, getRequestContext, runWithContext };
+export { DinewayRequestContext, RequestMetrics, createRequestMetrics, getRequestContext, runWithContext };

package/dist/request-context.mjs

@@ -8,8 +8,9 @@ import { AsyncLocalStorage } from "node:async_hooks";
 * without requiring explicit parameter passing. The middleware wraps next()
 * in als.run(), making the context available to all code during rendering.
 *
-* For logged-out users with no CMS signals (no edit cookie, no preview param),
-* the middleware skips ALS entirely — zero overhead for normal traffic.
+* Middleware attaches a context whenever request-scoped state is needed: editing
+* signals, preview state, a request-local database, instrumentation, or
+* Server-Timing metrics.
 *
 * The AsyncLocalStorage instance is stored on globalThis with a Symbol key
 * to guarantee a singleton even when bundlers duplicate this module across
@@ -17,6 +18,17 @@ import { AsyncLocalStorage } from "node:async_hooks";
 * multiple chunks (e.g. middleware and page components), each with its own
 * ALS instance — breaking request-scoped state propagation.
 */
+function createRequestMetrics(start) {
+	return {
+		start,
+		dbCount: 0,
+		dbTotalMs: 0,
+		dbFirstOffset: null,
+		dbLastOffset: null,
+		cacheHits: 0,
+		cacheMisses: 0
+	};
+}
 const ALS_KEY = Symbol.for("dineway:request-context");
 const storage = globalThis[ALS_KEY] ?? (() => {
 	const als = new AsyncLocalStorage();
@@ -39,4 +51,4 @@ function getRequestContext() {
 }
 
 //#endregion
-export { getRequestContext, runWithContext };
+export { createRequestMetrics, getRequestContext, runWithContext };

package/dist/{request-meta-DixlNKKa.mjs → request-meta-BVx9KkL-.mjs}

@@ -1,4 +1,4 @@
-import { n as normalizeTrustedHeaders, t as getTrustedProxyHeaders } from "./trusted-proxy-BbaZfkT9.mjs";
+import { n as normalizeTrustedHeaders, t as getTrustedProxyHeaders } from "./trusted-proxy-8N8sX1D1.mjs";
 
 //#region src/plugins/request-meta.ts
 /**

package/dist/{review-requests-C2DIHwlJ.mjs → review-requests-BYuoyse0.mjs}

@@ -1,4 +1,4 @@
-import { n as decodeCursor, r as encodeCursor } from "./types-Bs6lTBBW.mjs";
+import { n as decodeCursor, r as encodeCursor } from "./types-D1DjBFA9.mjs";
 import { ulid } from "ulidx";
 
 //#region src/database/repositories/review-requests.ts

package/dist/{review-requests-DIyjw-K_.mjs → review-requests-vCw7_3DS.mjs}

@@ -1,4 +1,4 @@
-import { t as ReviewRequestRepository } from "./review-requests-C2DIHwlJ.mjs";
+import { t as ReviewRequestRepository } from "./review-requests-BYuoyse0.mjs";
 
 //#region src/api/handlers/review-requests.ts
 async function handleReviewRequestList(db, query) {

package/dist/{runner-BU6Lo1ZS.d.mts → runner-CHR_W79l.d.mts}

@@ -1,4 +1,4 @@
-import { t as Database } from "./types-DZPw8Rru.mjs";
+import { t as Database } from "./types-CYBaBvtm.mjs";
 import { Kysely } from "kysely";
 
 //#region src/database/migrations/runner.d.ts