dineway 0.1.17 → 0.1.19

package/dist/ui/server-runtime.mjs

@@ -4,19 +4,19 @@ import "../types-D1DjBFA9.mjs";
 import "../media-Cg4zc9fq.mjs";
 import "../comment-BmJXz3lc.mjs";
 import "../options-BF11H_FD.mjs";
-import "../request-cache-DmVyQUBh.mjs";
-import "../fts-manager-D7KVeBmg.mjs";
-import "../registry-DumDzFDn.mjs";
-import "../loader-CQFxFOt1.mjs";
-import { i as getSiteSettings, s as buildRenderMediaUrl } from "../settings-qPzY2KIF.mjs";
-import { t as getCollectionInfo } from "../query-BtuwuZRd.mjs";
-import { a as getTaxonomyTerms } from "../taxonomies-BWmxbumf.mjs";
+import "../request-cache-BzuhyUXj.mjs";
+import "../fts-manager-DYRy6HVi.mjs";
+import "../registry-CYO6XQ-4.mjs";
+import "../loader-dt5DoyI1.mjs";
+import { i as getSiteSettings, s as buildRenderMediaUrl } from "../settings-D2k1JraC.mjs";
+import { t as getCollectionInfo } from "../query-CH1GaJmt.mjs";
+import { a as getTaxonomyTerms } from "../taxonomies-DPNIwTGk.mjs";
 import { n as sanitizeHref } from "../url-DOS4RGym.mjs";
-import { r as getEditMeta, t as getDinewayCollection } from "../query-CWPxZjGM.mjs";
-import { i as getComments, t as getMenu } from "../menus-BDW1yIdj.mjs";
-import { t as getWidgetArea } from "../widgets-Cce2-2fM.mjs";
+import { r as getEditMeta, t as getDinewayCollection } from "../query-TQqoOaxy.mjs";
+import { i as getComments, t as getMenu } from "../menus-BTOa-tsI.mjs";
+import { t as getWidgetArea } from "../widgets-D7UK-2hW.mjs";
 import { t as getMediaProvider } from "../provider-loader-Decn0Ktc.mjs";
-import { c as escapeHtmlAttr, l as renderPageMetadata, n as generateSiteSeoContributions, o as renderFragments, t as generateBaseSeoContributions, u as resolvePageMetadata } from "../seo-contributions-CQzUjJKY.mjs";
+import { c as escapeHtmlAttr, l as renderPageMetadata, n as generateSiteSeoContributions, o as renderFragments, t as generateBaseSeoContributions, u as resolvePageMetadata } from "../seo-contributions-BG4TtU7H.mjs";
 import { getPageRuntime } from "../page/index.mjs";
 import sanitizeHtml from "sanitize-html";
 
@@ -64,6 +64,47 @@ function sanitizeContent(html) {
 	});
 }
 
+//#endregion
+//#region src/page/absolute-url.ts
+const HTTP_URL_RE = /^https?:\/\//i;
+const PROTOCOL_RELATIVE_RE = /^\/\//;
+const PASSTHROUGH_SCHEME_RE = /^data:image\//i;
+const OTHER_SCHEME_RE = /^[a-z][a-z0-9+.-]*:/i;
+const WHITESPACE_OR_CONTROL_RE = /[\s\u0000-\u001f\u007f-\u009f]/;
+const TRAILING_SLASH_RE = /\/$/;
+function isUsableOrigin(origin) {
+	return origin !== "null" && origin !== "";
+}
+function resolveSiteOrigin(configuredSiteUrl, page) {
+	const candidates = [
+		configuredSiteUrl,
+		page.siteUrl,
+		page.url
+	];
+	for (const candidate of candidates) {
+		if (!candidate || typeof candidate !== "string") continue;
+		try {
+			const parsed = new URL(candidate);
+			if (parsed.protocol !== "http:" && parsed.protocol !== "https:") continue;
+			if (!isUsableOrigin(parsed.origin)) continue;
+			return parsed.origin;
+		} catch {}
+	}
+	return null;
+}
+function absolutizeMediaUrl(url, configuredSiteUrl, page) {
+	if (!url) return null;
+	if (WHITESPACE_OR_CONTROL_RE.test(url)) return null;
+	if (HTTP_URL_RE.test(url)) return url;
+	if (PASSTHROUGH_SCHEME_RE.test(url)) return url;
+	if (PROTOCOL_RELATIVE_RE.test(url)) return null;
+	if (OTHER_SCHEME_RE.test(url)) return null;
+	const origin = resolveSiteOrigin(configuredSiteUrl, page);
+	if (!origin) return url;
+	const safePath = url.startsWith("/") ? url : `/${url}`;
+	return `${origin.replace(TRAILING_SLASH_RE, "")}${safePath}`;
+}
+
 //#endregion
 //#region src/page/site-identity.ts
 function renderSiteIdentity(input) {
@@ -77,4 +118,4 @@ function renderSiteIdentity(input) {
 }
 
 //#endregion
-export { buildRenderMediaUrl, generateBaseSeoContributions, generateSiteSeoContributions, getCollectionInfo, getComments, getDinewayCollection, getEditMeta, getMediaProvider, getMenu, getPageRuntime, getSiteSettings, getTaxonomyTerms, getWidgetArea, renderFragments, renderPageMetadata, renderSiteIdentity, resolvePageMetadata, sanitizeContent, sanitizeHref };
+export { absolutizeMediaUrl, buildRenderMediaUrl, generateBaseSeoContributions, generateSiteSeoContributions, getCollectionInfo, getComments, getDinewayCollection, getEditMeta, getMediaProvider, getMenu, getPageRuntime, getSiteSettings, getTaxonomyTerms, getWidgetArea, renderFragments, renderPageMetadata, renderSiteIdentity, resolvePageMetadata, sanitizeContent, sanitizeHref };

package/dist/{validate-B8ZvLeOE.mjs → validate-CaKEnLed.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./chunk-ClPoSABd.mjs";
-import { t as FIELD_TYPES } from "./types-Dz2EKzsX.mjs";
+import { t as FIELD_TYPES } from "./types-zfg8SDVI.mjs";
 
 //#region src/seed/validate.ts
 /**

package/dist/version-CGRX_5CT.mjs

@@ -0,0 +1,6 @@
+//#region src/version.ts
+const VERSION = "0.1.19";
+const COMMIT = "42354fe2";
+
+//#endregion
+export { VERSION as n, COMMIT as t };

package/dist/{widgets-Cce2-2fM.mjs → widgets-D7UK-2hW.mjs}

@@ -1,4 +1,4 @@
-import { r as getDb } from "./loader-CQFxFOt1.mjs";
+import { r as getDb } from "./loader-dt5DoyI1.mjs";
 import { t as getWidgetComponents$1 } from "./components-BQiBW_Ji.mjs";
 
 //#region src/widgets/index.ts

package/dist/{wordpress-slugs-C4EhE6fo.mjs → wordpress-slugs-Bnf3-sf8.mjs}

@@ -1,4 +1,4 @@
-import { r as RESERVED_COLLECTION_SLUGS } from "./types-Dz2EKzsX.mjs";
+import { r as RESERVED_COLLECTION_SLUGS } from "./types-zfg8SDVI.mjs";
 
 //#region src/import/wordpress-slugs.ts
 const INVALID_SLUG_CHARS = /[^a-z0-9_]/g;

package/dist/{zod-generator-BKhtHT3e.mjs → zod-generator-vOxhed6n.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./chunk-ClPoSABd.mjs";
-import { n as hashString } from "./hash-V8oZo1W2.mjs";
+import { n as hashString } from "./hash-DHSsP6_G.mjs";
 import { z } from "zod";
 
 //#region src/schema/zod-generator.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dineway",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "description": "Agentic Website builder for restaurants — structured content meets AI via the Model Context Protocol",
   "type": "module",
   "publishConfig": {
@@ -183,6 +183,7 @@
     "#menus/*": "./src/menus/*",
     "#widgets/*": "./src/widgets/*",
     "#import/*": "./src/import/*",
+    "#security/*": "./src/security/*",
     "#utils/*": "./src/utils/*",
     "#preview/*": "./src/preview/*",
     "#seed/*": "./src/seed/*",
@@ -340,10 +341,10 @@
     "sax": "^1.4.1",
     "ulidx": "^2.4.1",
     "upng-js": "^2.1.0",
-    "zod": "^4.3.5",
-    "@dineway-ai/admin": "^0.1.11",
-    "@dineway-ai/auth": "^0.1.12",
-    "@dineway-ai/gutenberg-to-portable-text": "^0.1.11"
+    "zod": "^4.4.1",
+    "@dineway-ai/admin": "^0.1.12",
+    "@dineway-ai/gutenberg-to-portable-text": "^0.1.12",
+    "@dineway-ai/auth": "^0.1.13"
   },
   "optionalDependencies": {
     "@libsql/kysely-libsql": "^0.4.0",
@@ -372,7 +373,7 @@
     "vite": "^6.0.0",
     "vitest": "^4.0.18",
     "zod-openapi": "^5.4.6",
-    "@dineway-ai/blocks": "^0.1.11"
+    "@dineway-ai/blocks": "^0.1.12"
   },
   "keywords": [
     "astro",

package/src/components/DinewayHead.astro

@@ -22,6 +22,7 @@ import {
 	renderPageMetadata,
 	renderSiteIdentity,
 	resolvePageMetadata,
+	absolutizeMediaUrl,
 	type PageMetadataContribution,
 	type PublicPageContext,
 } from "dineway/ui/server-runtime";
@@ -33,9 +34,6 @@ interface Props {
 const { page } = Astro.props;
 const runtime = getPageRuntime(Astro.locals as Record<string, unknown>);
 
-// Base SEO contributions from page context (always generated)
-const baseContributions: PageMetadataContribution[] = generateBaseSeoContributions(page);
-
 let metadataHtml = "";
 let siteIdentityHtml = "";
 let fragmentsHtml = "";
@@ -49,6 +47,15 @@ if (runtime) {
 		runtime.collectPageFragments(page),
 	]);
 
+	const defaultOgImage = absolutizeMediaUrl(
+		siteSettings.seo?.defaultOgImage?.url,
+		siteSettings.url,
+		page,
+	);
+	const baseContributions: PageMetadataContribution[] = generateBaseSeoContributions(
+		page,
+		defaultOgImage,
+	);
 	const siteContributions = generateSiteSeoContributions(siteSettings.seo);
 	const allContributions = [...pluginContributions, ...siteContributions, ...baseContributions];
 	const resolved = resolvePageMetadata(allContributions);
@@ -57,6 +64,7 @@ if (runtime) {
 	fragmentsHtml = renderFragments(fragments, "head");
 } else {
 	// No runtime (Dineway not initialized) — still render base SEO
+	const baseContributions: PageMetadataContribution[] = generateBaseSeoContributions(page);
 	const resolved = resolvePageMetadata(baseContributions);
 	metadataHtml = renderPageMetadata(resolved);
 }