dineway 0.1.25 → 0.1.27

package/README.md

@@ -200,10 +200,11 @@ Writes `.dineway/types.ts` and `.dineway/schema.json` for full type safety in yo
 One-command deployment to any Node.js host:
 
 ```bash
-npx dineway deploy railway    # generates railway.json, runs railway up
-npx dineway deploy docker     # generates Dockerfile + .dockerignore
-npx dineway deploy fly        # generates Fly config, runs fly deploy
-npx dineway deploy gcp        # experimental: gcloud run deploy
+npx dineway@latest deploy            # default deploy to dineway platform (no setup required)
+npx dineway@latest deploy railway    # generates railway.json, runs railway up
+npx dineway@latest deploy docker     # generates Dockerfile + .dockerignore
+npx dineway@latest deploy fly        # generates Fly config, runs fly deploy
+npx dineway@latest deploy gcp        # experimental: gcloud run deploy
 ```
 
 ### JSON Output

package/dist/{activity-events-CjOgr0Uv.mjs → activity-events-CpcTzKpF.mjs}

@@ -1,4 +1,4 @@
-import { t as SiteActivityRepository } from "./site-activity-lsCX_cqp.mjs";
+import { t as SiteActivityRepository } from "./site-activity-KFZprBZM.mjs";
 
 //#region src/site-context/actor.ts
 const SYSTEM_ACTOR_ID = "system";

package/dist/{allowed-origins-3nAx5Xeo.mjs → allowed-origins-3RuuoFjC.mjs}

@@ -1,4 +1,4 @@
-import { t as getEnvAllowedOrigins } from "./public-url-DuRGs0uF.mjs";
+import { t as getEnvAllowedOrigins } from "./public-url-BL2r8dmQ.mjs";
 
 //#region src/auth/allowed-origins.ts
 function getConfiguredAllowedOrigins(config) {

package/dist/api/route-utils.d.mts

@@ -1,13 +1,13 @@
-import { $n as isParseError, Qn as ParseResult, Zn as OptionsRepository, er as parseBody, ir as handleError, nr as apiError, rr as apiSuccess, t as DinewayConfig, tr as parseQuery } from "../runtime-fyApolZR.mjs";
-import { t as Database } from "../types-DwIXYH8s.mjs";
-import { at as StorageCollectionConfig, it as StorageCollection } from "../types-DzBAohLy.mjs";
-import "../types-BSP1HbdT.mjs";
-import "../runner-BJm_NJr2.mjs";
-import "../index-CxVXYBXq.mjs";
-import "../index-DUurmpun.mjs";
-import "../bylines-DXqaE0d1.mjs";
-import "../types-DbtpYtHx.mjs";
-import "../validate-BikB29gc.mjs";
+import { $n as isParseError, Qn as ParseResult, Zn as OptionsRepository, er as parseBody, ir as handleError, nr as apiError, rr as apiSuccess, t as DinewayConfig, tr as parseQuery } from "../runtime-Cg87dCSm.mjs";
+import { t as Database } from "../types-B1NksXAb.mjs";
+import { at as StorageCollectionConfig, it as StorageCollection } from "../types-BIM7jwxr.mjs";
+import "../types-BgE6gMFI.mjs";
+import "../runner-pAnQS6iI.mjs";
+import "../index-2tBfB_8X.mjs";
+import "../index-CpbixmRL.mjs";
+import "../bylines-Cb7nzI9t.mjs";
+import "../types-BBETcziA.mjs";
+import "../validate-BzUCAU2a.mjs";
 import { Kysely } from "kysely";
 
 //#region src/api/auth-storage.d.ts

package/dist/api/route-utils.mjs

@@ -5,14 +5,14 @@ import "../types-D1DjBFA9.mjs";
 import "../media-Cg4zc9fq.mjs";
 import "../user-2aI21yV1.mjs";
 import { t as OptionsRepository } from "../options-BF11H_FD.mjs";
-import { r as createStorageAccess } from "../context-DRq-f4sM.mjs";
-import "../seo-DASNc4gD.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../error-Dyf9fGZE.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-BBfZRZYb.mjs";
-import "../ssrf-z3oH8wjK.mjs";
-import "../cron-fV9baRVc.mjs";
-import { n as getPublicOrigin } from "../public-url-DuRGs0uF.mjs";
-import { t as finalizeSetup } from "../setup-complete-BvSeN5Wh.mjs";
+import { r as createStorageAccess } from "../context-Ufrm1lOv.mjs";
+import "../seo-BPb_reaG.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../error-DLkgOP5m.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-D7Tu6ku4.mjs";
+import "../ssrf-KAIQS48_.mjs";
+import "../cron-D7FDsRu-.mjs";
+import { n as getPublicOrigin } from "../public-url-BL2r8dmQ.mjs";
+import { t as finalizeSetup } from "../setup-complete-C2ztsNhJ.mjs";
 
 //#region src/api/auth-storage.ts
 /**

package/dist/api/schemas/index.d.mts

@@ -1,3 +1,3 @@
-import { $ as updateSectionBody, $n as cursorPaginationQuery, $t as createCommentBody, A as userDetailSchema, An as mediaUploadUrlBody, At as passkeyRegisterVerifyBody, B as wpRewriteUrlsBody, Bn as contentScheduleBody, Bt as contextEntryCreateBody, C as updateWidgetBody, Cn as mediaExistingResponseSchema, Ct as authMeActionBody, D as widgetSchema, Dn as mediaProviderListQuery, Dt as magicLinkSendBody, E as widgetAreaWithWidgetsSchema, En as mediaListResponseSchema, Et as inviteRegisterOptionsBody, F as importProbeBody, Fn as contentListQuery, Ft as reviewRequestListQuery, G as searchResultSchema, Gn as contentTranslationsResponseSchema, Gt as contextEntrySupersedeBody, H as searchQuery, Hn as contentSeoSchema, Ht as contextEntryListQuery, I as wpMediaImportBody, In as contentListResponseSchema, It as reviewRequestResolveBody, J as siteSettingsSchema, Jn as trashedContentItemSchema, Jt as commentBulkResponseSchema, K as searchSuggestQuery, Kn as contentTrashQuery, Kt as adminCommentListResponseSchema, L as wpPluginAnalyzeBody, Ln as contentPreviewUrlBody, Lt as hitlRequestListQuery, M as userSchema, Mn as contentCompareResponseSchema, Mt as passkeyVerifyBody, N as userUpdateBody, Nn as contentCreateBody, Nt as signupCompleteBody, O as allowedDomainCreateBody, On as mediaResponseSchema, Ot as passkeyOptionsBody, P as usersListQuery, Pn as contentItemSchema, Pt as signupRequestBody, Q as sectionsListQuery, Qn as countResponseSchema, Qt as commentStatusBody, R as wpPluginExecuteBody, Rn as contentPublishBody, Rt as hitlRequestResolveBody, S as reorderWidgetsBody, Sn as mediaConfirmResponseSchema, St as updateMenuItemBody, T as widgetAreaWithWidgetsAndCountSchema, Tn as mediaListQuery, Tt as inviteCreateBody, U as searchRebuildBody, Un as contentTermsBody, Ut as contextEntryReviewBody, V as searchEnableBody, Vn as contentSeoInput, Vt as contextEntryDiffQuery, W as searchResponseSchema, Wn as contentTranslationSchema, Wt as contextEntryStaleQuery, X as sectionListResponseSchema, Xn as VALID_ROLE_LEVELS, Xt as commentListQuery, Y as createSectionBody, Yn as trashedContentListResponseSchema, Yt as commentCountsResponseSchema, Z as sectionSchema, Zn as apiErrorSchema, Zt as commentSchema, _ as redirectSchema, _n as updateCollectionBody, _t as menuSchema, a as bylineUpdateBody, an as collectionSchema, ar as roleLevel, at as termGetResponseSchema, b as createWidgetAreaBody, bn as formatFileSize, bt as reorderMenuItemsBody, c as createRedirectBody, cn as createFieldBody, ct as termSchema, d as notFoundListResponseSchema, dn as fieldResponseSchema, dt as updateTermBody, en as publicCommentListResponseSchema, er as deleteResponseSchema, et as createTaxonomyDefBody, f as notFoundPruneBody, fn as fieldSchema, ft as createMenuBody, g as redirectListResponseSchema, gn as schemaExportQuery, gt as menuListItemSchema, h as notFoundSummarySchema, hn as orphanedTableSchema, ht as menuItemTypeEnum, i as bylineSummarySchema, in as collectionResponseSchema, ir as offsetPaginationQuery, it as taxonomyListResponseSchema, j as userListResponseSchema, jn as mediaUploadUrlResponseSchema, jt as passkeyRenameBody, k as allowedDomainUpdateBody, kn as mediaUpdateBody, kt as passkeyRegisterOptionsBody, l as notFoundEntrySchema, ln as fieldListResponseSchema, lt as termTranslationsSchema, m as notFoundSummaryResponseSchema, mn as orphanedTableListResponseSchema, mt as menuItemSchema, n as bylineCreditSchema, nn as collectionGetQuery, nr as localeCode, nt as taxonomyDefSchema, o as bylinesListQuery, on as collectionWithFieldsResponseSchema, or as slugPattern, ot as termListResponseSchema, p as notFoundSummaryQuery, pn as orphanRegisterBody, pt as createMenuItemBody, q as settingsUpdateBody, qn as contentUpdateBody, qt as commentBulkBody, r as bylineListResponseSchema, rn as collectionListResponseSchema, rr as localeFilterQuery, rt as taxonomyDefTranslationsSchema, s as contentBylineInputSchema, sn as createCollectionBody, sr as successEnvelope, st as termResponseSchema, t as bylineCreateBody, tn as publicCommentSchema, tr as httpUrl, tt as createTermBody, u as notFoundListQuery, un as fieldReorderBody, ut as termWithCountSchema, v as redirectsListQuery, vn as updateFieldBody, vt as menuTranslationsSchema, w as widgetAreaSchema, wn as mediaItemSchema, wt as inviteCompleteBody, x as createWidgetBody, xn as mediaConfirmBody, xt as updateMenuBody, y as updateRedirectBody, yn as DEFAULT_MAX_UPLOAD_SIZE, yt as menuWithItemsSchema, z as wpPrepareBody, zn as contentResponseSchema, zt as siteBriefingQuery } from "../../bylines-DXqaE0d1.mjs";
+import { $ as updateSectionBody, $n as cursorPaginationQuery, $t as createCommentBody, A as userDetailSchema, An as mediaUploadUrlBody, At as passkeyRegisterVerifyBody, B as wpRewriteUrlsBody, Bn as contentScheduleBody, Bt as contextEntryCreateBody, C as updateWidgetBody, Cn as mediaExistingResponseSchema, Ct as authMeActionBody, D as widgetSchema, Dn as mediaProviderListQuery, Dt as magicLinkSendBody, E as widgetAreaWithWidgetsSchema, En as mediaListResponseSchema, Et as inviteRegisterOptionsBody, F as importProbeBody, Fn as contentListQuery, Ft as reviewRequestListQuery, G as searchResultSchema, Gn as contentTranslationsResponseSchema, Gt as contextEntrySupersedeBody, H as searchQuery, Hn as contentSeoSchema, Ht as contextEntryListQuery, I as wpMediaImportBody, In as contentListResponseSchema, It as reviewRequestResolveBody, J as siteSettingsSchema, Jn as trashedContentItemSchema, Jt as commentBulkResponseSchema, K as searchSuggestQuery, Kn as contentTrashQuery, Kt as adminCommentListResponseSchema, L as wpPluginAnalyzeBody, Ln as contentPreviewUrlBody, Lt as hitlRequestListQuery, M as userSchema, Mn as contentCompareResponseSchema, Mt as passkeyVerifyBody, N as userUpdateBody, Nn as contentCreateBody, Nt as signupCompleteBody, O as allowedDomainCreateBody, On as mediaResponseSchema, Ot as passkeyOptionsBody, P as usersListQuery, Pn as contentItemSchema, Pt as signupRequestBody, Q as sectionsListQuery, Qn as countResponseSchema, Qt as commentStatusBody, R as wpPluginExecuteBody, Rn as contentPublishBody, Rt as hitlRequestResolveBody, S as reorderWidgetsBody, Sn as mediaConfirmResponseSchema, St as updateMenuItemBody, T as widgetAreaWithWidgetsAndCountSchema, Tn as mediaListQuery, Tt as inviteCreateBody, U as searchRebuildBody, Un as contentTermsBody, Ut as contextEntryReviewBody, V as searchEnableBody, Vn as contentSeoInput, Vt as contextEntryDiffQuery, W as searchResponseSchema, Wn as contentTranslationSchema, Wt as contextEntryStaleQuery, X as sectionListResponseSchema, Xn as VALID_ROLE_LEVELS, Xt as commentListQuery, Y as createSectionBody, Yn as trashedContentListResponseSchema, Yt as commentCountsResponseSchema, Z as sectionSchema, Zn as apiErrorSchema, Zt as commentSchema, _ as redirectSchema, _n as updateCollectionBody, _t as menuSchema, a as bylineUpdateBody, an as collectionSchema, ar as roleLevel, at as termGetResponseSchema, b as createWidgetAreaBody, bn as formatFileSize, bt as reorderMenuItemsBody, c as createRedirectBody, cn as createFieldBody, ct as termSchema, d as notFoundListResponseSchema, dn as fieldResponseSchema, dt as updateTermBody, en as publicCommentListResponseSchema, er as deleteResponseSchema, et as createTaxonomyDefBody, f as notFoundPruneBody, fn as fieldSchema, ft as createMenuBody, g as redirectListResponseSchema, gn as schemaExportQuery, gt as menuListItemSchema, h as notFoundSummarySchema, hn as orphanedTableSchema, ht as menuItemTypeEnum, i as bylineSummarySchema, in as collectionResponseSchema, ir as offsetPaginationQuery, it as taxonomyListResponseSchema, j as userListResponseSchema, jn as mediaUploadUrlResponseSchema, jt as passkeyRenameBody, k as allowedDomainUpdateBody, kn as mediaUpdateBody, kt as passkeyRegisterOptionsBody, l as notFoundEntrySchema, ln as fieldListResponseSchema, lt as termTranslationsSchema, m as notFoundSummaryResponseSchema, mn as orphanedTableListResponseSchema, mt as menuItemSchema, n as bylineCreditSchema, nn as collectionGetQuery, nr as localeCode, nt as taxonomyDefSchema, o as bylinesListQuery, on as collectionWithFieldsResponseSchema, or as slugPattern, ot as termListResponseSchema, p as notFoundSummaryQuery, pn as orphanRegisterBody, pt as createMenuItemBody, q as settingsUpdateBody, qn as contentUpdateBody, qt as commentBulkBody, r as bylineListResponseSchema, rn as collectionListResponseSchema, rr as localeFilterQuery, rt as taxonomyDefTranslationsSchema, s as contentBylineInputSchema, sn as createCollectionBody, sr as successEnvelope, st as termResponseSchema, t as bylineCreateBody, tn as publicCommentSchema, tr as httpUrl, tt as createTermBody, u as notFoundListQuery, un as fieldReorderBody, ut as termWithCountSchema, v as redirectsListQuery, vn as updateFieldBody, vt as menuTranslationsSchema, w as widgetAreaSchema, wn as mediaItemSchema, wt as inviteCompleteBody, x as createWidgetBody, xn as mediaConfirmBody, xt as updateMenuBody, y as updateRedirectBody, yn as DEFAULT_MAX_UPLOAD_SIZE, yt as menuWithItemsSchema, z as wpPrepareBody, zn as contentResponseSchema, zt as siteBriefingQuery } from "../../bylines-Cb7nzI9t.mjs";
 import { atprotoLoginBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody } from "./setup.mjs";
 export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineListResponseSchema, bylineSummarySchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, contextEntryCreateBody, contextEntryDiffQuery, contextEntryListQuery, contextEntryReviewBody, contextEntryStaleQuery, contextEntrySupersedeBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, hitlRequestListQuery, hitlRequestResolveBody, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, localeFilterQuery, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemSchema, menuItemTypeEnum, menuListItemSchema, menuSchema, menuTranslationsSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, reviewRequestListQuery, reviewRequestResolveBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteBriefingQuery, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyDefTranslationsSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termTranslationsSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };

package/dist/api/schemas/index.mjs

@@ -1,6 +1,6 @@
-import "../../context-types-BWspNMDr.mjs";
-import { $ as createMenuBody, $t as contentListQuery, A as searchRebuildBody, An as roleLevel, At as fieldSchema, B as updateSectionBody, Bt as mediaConfirmResponseSchema, C as userDetailSchema, Cn as countResponseSchema, Ct as collectionSchema, D as usersListQuery, Dn as localeCode, Dt as fieldListResponseSchema, E as userUpdateBody, En as httpUrl, Et as createFieldBody, F as siteSettingsSchema, Ft as updateCollectionBody, G as taxonomyListResponseSchema, Gt as mediaProviderListQuery, H as createTermBody, Ht as mediaItemSchema, I as createSectionBody, It as updateFieldBody, J as termResponseSchema, Jt as mediaUploadUrlBody, K as termGetResponseSchema, Kt as mediaResponseSchema, L as sectionListResponseSchema, Lt as DEFAULT_MAX_UPLOAD_SIZE, M as searchResultSchema, Mn as successEnvelope, Mt as orphanedTableListResponseSchema, N as searchSuggestQuery, Nt as orphanedTableSchema, O as searchEnableBody, On as localeFilterQuery, Ot as fieldReorderBody, P as settingsUpdateBody, Pt as schemaExportQuery, Q as updateTermBody, Qt as contentItemSchema, R as sectionSchema, Rt as formatFileSize, S as allowedDomainUpdateBody, Sn as apiErrorSchema, St as collectionResponseSchema, T as userSchema, Tn as deleteResponseSchema, Tt as createCollectionBody, U as taxonomyDefSchema, Ut as mediaListQuery, V as createTaxonomyDefBody, Vt as mediaExistingResponseSchema, W as taxonomyDefTranslationsSchema, Wt as mediaListResponseSchema, X as termTranslationsSchema, Xt as contentCompareResponseSchema, Y as termSchema, Yt as mediaUploadUrlResponseSchema, Z as termWithCountSchema, Zt as contentCreateBody, _ as widgetAreaSchema, _n as bylineSummarySchema, _t as createCommentBody, a as notFoundPruneBody, an as contentSeoInput, at as menuTranslationsSchema, b as widgetSchema, bn as contentBylineInputSchema, bt as collectionGetQuery, c as notFoundSummarySchema, cn as contentTranslationSchema, ct as updateMenuBody, d as redirectsListQuery, dn as contentUpdateBody, dt as commentBulkBody, en as contentListResponseSchema, et as createMenuItemBody, f as updateRedirectBody, fn as trashedContentItemSchema, ft as commentBulkResponseSchema, g as updateWidgetBody, gn as bylineListResponseSchema, gt as commentStatusBody, h as reorderWidgetsBody, hn as bylineCreditSchema, ht as commentSchema, i as notFoundListResponseSchema, in as contentScheduleBody, it as menuSchema, j as searchResponseSchema, jn as slugPattern, jt as orphanRegisterBody, k as searchQuery, kn as offsetPaginationQuery, kt as fieldResponseSchema, l as redirectListResponseSchema, ln as contentTranslationsResponseSchema, lt as updateMenuItemBody, m as createWidgetBody, mn as bylineCreateBody, mt as commentListQuery, n as notFoundEntrySchema, nn as contentPublishBody, nt as menuItemTypeEnum, o as notFoundSummaryQuery, on as contentSeoSchema, ot as menuWithItemsSchema, p as createWidgetAreaBody, pn as trashedContentListResponseSchema, pt as commentCountsResponseSchema, q as termListResponseSchema, qt as mediaUpdateBody, r as notFoundListQuery, rn as contentResponseSchema, rt as menuListItemSchema, s as notFoundSummaryResponseSchema, sn as contentTermsBody, st as reorderMenuItemsBody, t as createRedirectBody, tn as contentPreviewUrlBody, tt as menuItemSchema, u as redirectSchema, un as contentTrashQuery, ut as adminCommentListResponseSchema, v as widgetAreaWithWidgetsAndCountSchema, vn as bylineUpdateBody, vt as publicCommentListResponseSchema, w as userListResponseSchema, wn as cursorPaginationQuery, wt as collectionWithFieldsResponseSchema, x as allowedDomainCreateBody, xn as VALID_ROLE_LEVELS, xt as collectionListResponseSchema, y as widgetAreaWithWidgetsSchema, yn as bylinesListQuery, yt as publicCommentSchema, z as sectionsListQuery, zt as mediaConfirmBody } from "../../redirects-BO0fI750.mjs";
-import { C as siteBriefingQuery, D as contextEntryReviewBody, E as contextEntryListQuery, O as contextEntryStaleQuery, S as hitlRequestResolveBody, T as contextEntryDiffQuery, _ as signupCompleteBody, a as wpPrepareBody, b as reviewRequestResolveBody, c as inviteCompleteBody, d as magicLinkSendBody, f as passkeyOptionsBody, g as passkeyVerifyBody, h as passkeyRenameBody, i as wpPluginExecuteBody, k as contextEntrySupersedeBody, l as inviteCreateBody, m as passkeyRegisterVerifyBody, n as wpMediaImportBody, o as wpRewriteUrlsBody, p as passkeyRegisterOptionsBody, r as wpPluginAnalyzeBody, s as authMeActionBody, t as importProbeBody, u as inviteRegisterOptionsBody, v as signupRequestBody, w as contextEntryCreateBody, x as hitlRequestListQuery, y as reviewRequestListQuery } from "../../import-BO_gy5vZ.mjs";
+import "../../context-types-BrSQNye5.mjs";
+import { $ as createMenuBody, $t as contentListQuery, A as searchRebuildBody, An as roleLevel, At as fieldSchema, B as updateSectionBody, Bt as mediaConfirmResponseSchema, C as userDetailSchema, Cn as countResponseSchema, Ct as collectionSchema, D as usersListQuery, Dn as localeCode, Dt as fieldListResponseSchema, E as userUpdateBody, En as httpUrl, Et as createFieldBody, F as siteSettingsSchema, Ft as updateCollectionBody, G as taxonomyListResponseSchema, Gt as mediaProviderListQuery, H as createTermBody, Ht as mediaItemSchema, I as createSectionBody, It as updateFieldBody, J as termResponseSchema, Jt as mediaUploadUrlBody, K as termGetResponseSchema, Kt as mediaResponseSchema, L as sectionListResponseSchema, Lt as DEFAULT_MAX_UPLOAD_SIZE, M as searchResultSchema, Mn as successEnvelope, Mt as orphanedTableListResponseSchema, N as searchSuggestQuery, Nt as orphanedTableSchema, O as searchEnableBody, On as localeFilterQuery, Ot as fieldReorderBody, P as settingsUpdateBody, Pt as schemaExportQuery, Q as updateTermBody, Qt as contentItemSchema, R as sectionSchema, Rt as formatFileSize, S as allowedDomainUpdateBody, Sn as apiErrorSchema, St as collectionResponseSchema, T as userSchema, Tn as deleteResponseSchema, Tt as createCollectionBody, U as taxonomyDefSchema, Ut as mediaListQuery, V as createTaxonomyDefBody, Vt as mediaExistingResponseSchema, W as taxonomyDefTranslationsSchema, Wt as mediaListResponseSchema, X as termTranslationsSchema, Xt as contentCompareResponseSchema, Y as termSchema, Yt as mediaUploadUrlResponseSchema, Z as termWithCountSchema, Zt as contentCreateBody, _ as widgetAreaSchema, _n as bylineSummarySchema, _t as createCommentBody, a as notFoundPruneBody, an as contentSeoInput, at as menuTranslationsSchema, b as widgetSchema, bn as contentBylineInputSchema, bt as collectionGetQuery, c as notFoundSummarySchema, cn as contentTranslationSchema, ct as updateMenuBody, d as redirectsListQuery, dn as contentUpdateBody, dt as commentBulkBody, en as contentListResponseSchema, et as createMenuItemBody, f as updateRedirectBody, fn as trashedContentItemSchema, ft as commentBulkResponseSchema, g as updateWidgetBody, gn as bylineListResponseSchema, gt as commentStatusBody, h as reorderWidgetsBody, hn as bylineCreditSchema, ht as commentSchema, i as notFoundListResponseSchema, in as contentScheduleBody, it as menuSchema, j as searchResponseSchema, jn as slugPattern, jt as orphanRegisterBody, k as searchQuery, kn as offsetPaginationQuery, kt as fieldResponseSchema, l as redirectListResponseSchema, ln as contentTranslationsResponseSchema, lt as updateMenuItemBody, m as createWidgetBody, mn as bylineCreateBody, mt as commentListQuery, n as notFoundEntrySchema, nn as contentPublishBody, nt as menuItemTypeEnum, o as notFoundSummaryQuery, on as contentSeoSchema, ot as menuWithItemsSchema, p as createWidgetAreaBody, pn as trashedContentListResponseSchema, pt as commentCountsResponseSchema, q as termListResponseSchema, qt as mediaUpdateBody, r as notFoundListQuery, rn as contentResponseSchema, rt as menuListItemSchema, s as notFoundSummaryResponseSchema, sn as contentTermsBody, st as reorderMenuItemsBody, t as createRedirectBody, tn as contentPreviewUrlBody, tt as menuItemSchema, u as redirectSchema, un as contentTrashQuery, ut as adminCommentListResponseSchema, v as widgetAreaWithWidgetsAndCountSchema, vn as bylineUpdateBody, vt as publicCommentListResponseSchema, w as userListResponseSchema, wn as cursorPaginationQuery, wt as collectionWithFieldsResponseSchema, x as allowedDomainCreateBody, xn as VALID_ROLE_LEVELS, xt as collectionListResponseSchema, y as widgetAreaWithWidgetsSchema, yn as bylinesListQuery, yt as publicCommentSchema, z as sectionsListQuery, zt as mediaConfirmBody } from "../../redirects-CoYlqu8e.mjs";
+import { C as siteBriefingQuery, D as contextEntryReviewBody, E as contextEntryListQuery, O as contextEntryStaleQuery, S as hitlRequestResolveBody, T as contextEntryDiffQuery, _ as signupCompleteBody, a as wpPrepareBody, b as reviewRequestResolveBody, c as inviteCompleteBody, d as magicLinkSendBody, f as passkeyOptionsBody, g as passkeyVerifyBody, h as passkeyRenameBody, i as wpPluginExecuteBody, k as contextEntrySupersedeBody, l as inviteCreateBody, m as passkeyRegisterVerifyBody, n as wpMediaImportBody, o as wpRewriteUrlsBody, p as passkeyRegisterOptionsBody, r as wpPluginAnalyzeBody, s as authMeActionBody, t as importProbeBody, u as inviteRegisterOptionsBody, v as signupRequestBody, w as contextEntryCreateBody, x as hitlRequestListQuery, y as reviewRequestListQuery } from "../../import-DQ4Rfh5h.mjs";
 import { atprotoLoginBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody } from "./setup.mjs";
 
 export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineListResponseSchema, bylineSummarySchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, contextEntryCreateBody, contextEntryDiffQuery, contextEntryListQuery, contextEntryReviewBody, contextEntryStaleQuery, contextEntrySupersedeBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, hitlRequestListQuery, hitlRequestResolveBody, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, localeFilterQuery, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemSchema, menuItemTypeEnum, menuListItemSchema, menuSchema, menuTranslationsSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, reviewRequestListQuery, reviewRequestResolveBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteBriefingQuery, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyDefTranslationsSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termTranslationsSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };

package/dist/{api-BRxIrKsY.mjs → api-DHgai7zP.mjs}

@@ -5,20 +5,20 @@ import { r as encodeBase64, t as decodeBase64 } from "./base64-C1Q9yr0B.mjs";
 import { t as DinewayValidationError } from "./types-D1DjBFA9.mjs";
 import { t as MediaRepository } from "./media-Cg4zc9fq.mjs";
 import { t as CommentRepository } from "./comment-BmJXz3lc.mjs";
-import { t as withTransaction } from "./transaction-qfqpPVpu.mjs";
-import { t as RedirectRepository } from "./redirect-hKO66LS_.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-BjOMG4LF.mjs";
-import { t as BylineRepository } from "./byline-9WeA8b0a.mjs";
-import { t as SeoRepository } from "./seo-DASNc4gD.mjs";
-import { i as invalidateRedirectCache } from "./cache-BhJYDPP8.mjs";
-import { r as parseAllowedMimeTypes, t as matchesMimeAllowlist } from "./mime-DltzYYAL.mjs";
-import { n as requestCached } from "./request-cache-BzuhyUXj.mjs";
-import { u as PluginStateRepository } from "./briefing-Dk4I4VC8.mjs";
-import { n as SchemaRegistry, t as SchemaError } from "./registry-CYO6XQ-4.mjs";
-import { n as hashString } from "./hash-DHSsP6_G.mjs";
-import { n as VERSION, t as COMMIT } from "./version-pVYv71Mu.mjs";
-import { i as pluginManifestSchema, r as normalizeManifestRoute } from "./manifest-schema-CU0XL_ZK.mjs";
-import { t as DinewayStorageError } from "./types-iNqHe2-V.mjs";
+import { t as withTransaction } from "./transaction-D0FOsb3X.mjs";
+import { t as RedirectRepository } from "./redirect-BaVvo2te.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-D8KL0nCY.mjs";
+import { t as BylineRepository } from "./byline-DpNNSjET.mjs";
+import { t as SeoRepository } from "./seo-BPb_reaG.mjs";
+import { i as invalidateRedirectCache } from "./cache-DQyZ-QaB.mjs";
+import { r as parseAllowedMimeTypes, t as matchesMimeAllowlist } from "./mime-DYP4V5Ks.mjs";
+import { n as requestCached } from "./request-cache-BpwuE2ix.mjs";
+import { u as PluginStateRepository } from "./briefing-Jsxs587i.mjs";
+import { n as SchemaRegistry, t as SchemaError } from "./registry-i__XP2WV.mjs";
+import { n as hashString } from "./hash-DFFrkivP.mjs";
+import { n as VERSION, t as COMMIT } from "./version-D-jCq-i4.mjs";
+import { i as pluginManifestSchema, r as normalizeManifestRoute } from "./manifest-schema-C6fzQoWn.mjs";
+import { t as DinewayStorageError } from "./types-CNNQ8l0v.mjs";
 import { sql } from "kysely";
 import { createGzipDecoder, unpackTar } from "modern-tar";
 

package/dist/{api-tokens-DAMwe5Kj.mjs → api-tokens-BFg7tiOQ.mjs}

@@ -1,4 +1,4 @@
-import { a as hashApiToken, r as generatePrefixedToken } from "./api-tokens-BZ9aAeCo.mjs";
+import { a as hashApiToken, r as generatePrefixedToken } from "./api-tokens-L0o9Bd7v.mjs";
 import { ulid } from "ulidx";
 
 //#region src/api/handlers/api-tokens.ts

package/dist/api-tokens-L0o9Bd7v.mjs

@@ -0,0 +1,3 @@
+import { ALL_VALID_SCOPES, TOKEN_PREFIXES, generatePrefixedToken, hasScope, hashPrefixedToken, hashPrefixedToken as hashApiToken, validateScopes } from "@dineway-ai/auth";
+
+export { hashApiToken as a, hasScope as i, TOKEN_PREFIXES as n, hashPrefixedToken as o, generatePrefixedToken as r, validateScopes as s, ALL_VALID_SCOPES as t };

package/dist/{apply-D7vu4aFn.mjs → apply-TIoQ00aH.mjs}

@@ -2,15 +2,15 @@ import { t as __exportAll } from "./chunk-ClPoSABd.mjs";
 import { n as getI18nConfig } from "./config-XW5tMrH8.mjs";
 import { r as RevisionRepository, t as ContentRepository } from "./content-DvpMad_N.mjs";
 import { t as MediaRepository } from "./media-Cg4zc9fq.mjs";
-import { t as TaxonomyRepository } from "./taxonomy-DpXdVSSR.mjs";
-import { t as withTransaction } from "./transaction-qfqpPVpu.mjs";
-import { t as RedirectRepository } from "./redirect-hKO66LS_.mjs";
-import { t as BylineRepository } from "./byline-9WeA8b0a.mjs";
-import { t as FTSManager } from "./fts-manager-DYRy6HVi.mjs";
-import { n as SchemaRegistry } from "./registry-CYO6XQ-4.mjs";
-import { o as setSiteSettings } from "./settings-D2k1JraC.mjs";
-import { a as validateExternalUrl, r as ssrfSafeFetch } from "./ssrf-z3oH8wjK.mjs";
-import { t as validateSeed } from "./validate-BGpmNtMe.mjs";
+import { t as TaxonomyRepository } from "./taxonomy-BvXRL85P.mjs";
+import { t as withTransaction } from "./transaction-D0FOsb3X.mjs";
+import { t as RedirectRepository } from "./redirect-BaVvo2te.mjs";
+import { t as BylineRepository } from "./byline-DpNNSjET.mjs";
+import { t as FTSManager } from "./fts-manager-DnfOsF4s.mjs";
+import { n as SchemaRegistry } from "./registry-i__XP2WV.mjs";
+import { o as setSiteSettings } from "./settings-DORe02PC.mjs";
+import { a as validateExternalUrl, r as ssrfSafeFetch } from "./ssrf-KAIQS48_.mjs";
+import { t as validateSeed } from "./validate-JE-WfUQ5.mjs";
 import { ulid } from "ulidx";
 import { imageSize } from "image-size";
 import mime from "mime/lite";
@@ -496,9 +496,9 @@ async function applySeed(db, seed, options = {}) {
 			}
 		}
 	}
-	const { invalidateBylineCache } = await import("./bylines-CaPwztlL.mjs").then((n) => n.t);
-	const { invalidateUrlPatternCache } = await import("./query-D5CIGQv4.mjs").then((n) => n.o);
-	const { invalidateRedirectCache } = await import("./cache-BhJYDPP8.mjs").then((n) => n.t);
+	const { invalidateBylineCache } = await import("./bylines-75_STR73.mjs").then((n) => n.t);
+	const { invalidateUrlPatternCache } = await import("./query-DHvNhBhi.mjs").then((n) => n.o);
+	const { invalidateRedirectCache } = await import("./cache-DQyZ-QaB.mjs").then((n) => n.t);
 	invalidateBylineCache();
 	invalidateUrlPatternCache();
 	invalidateRedirectCache();
@@ -582,7 +582,7 @@ async function applyContentTaxonomies(db, collectionSlug, contentId, entry, isUp
 	if (isUpdate) await db.deleteFrom("content_taxonomies").where("collection", "=", collectionSlug).where("entry_id", "=", contentId).execute();
 	if (!entry.taxonomies) {
 		if (isUpdate) {
-			const { invalidateTermCache } = await import("./taxonomies-DVXCWoUF.mjs").then((n) => n.l);
+			const { invalidateTermCache } = await import("./taxonomies-BVBKoXRf.mjs").then((n) => n.l);
 			invalidateTermCache();
 		}
 		return;
@@ -594,7 +594,7 @@ async function applyContentTaxonomies(db, collectionSlug, contentId, entry, isUp
 			if (term) await termRepo.attachToEntry(collectionSlug, contentId, term.id);
 		}
 	}
-	const { invalidateTermCache } = await import("./taxonomies-DVXCWoUF.mjs").then((n) => n.l);
+	const { invalidateTermCache } = await import("./taxonomies-BVBKoXRf.mjs").then((n) => n.l);
 	invalidateTermCache();
 }
 /**

package/dist/astro/index.d.mts

@@ -1,14 +1,14 @@
-import { r as ContentItem } from "../types-Brp7Hv9S.mjs";
-import { Kn as MediaItem, a as S3StorageConfig, i as LocalStorageConfig, o as StorageDescriptor, r as getStoredConfig, t as DinewayConfig } from "../runtime-fyApolZR.mjs";
-import "../types-DwIXYH8s.mjs";
-import { X as ResolvedPlugin } from "../types-DzBAohLy.mjs";
-import "../types-BSP1HbdT.mjs";
-import "../runner-BJm_NJr2.mjs";
-import "../index-CxVXYBXq.mjs";
-import "../index-DUurmpun.mjs";
-import "../bylines-DXqaE0d1.mjs";
-import "../types-DbtpYtHx.mjs";
-import "../validate-BikB29gc.mjs";
+import { r as ContentItem } from "../types-DvwHUku7.mjs";
+import { Kn as MediaItem, a as S3StorageConfig, i as LocalStorageConfig, o as StorageDescriptor, r as getStoredConfig, t as DinewayConfig } from "../runtime-Cg87dCSm.mjs";
+import "../types-B1NksXAb.mjs";
+import { X as ResolvedPlugin } from "../types-BIM7jwxr.mjs";
+import "../types-BgE6gMFI.mjs";
+import "../runner-pAnQS6iI.mjs";
+import "../index-2tBfB_8X.mjs";
+import "../index-CpbixmRL.mjs";
+import "../bylines-Cb7nzI9t.mjs";
+import "../types-BBETcziA.mjs";
+import "../validate-BzUCAU2a.mjs";
 import { DinewayHandlers, DinewayManifest, ManifestCollection } from "./types.mjs";
 import { AstroIntegration } from "astro";
 

package/dist/astro/index.mjs

@@ -1,6 +1,6 @@
-import { n as VERSION, t as COMMIT } from "../version-pVYv71Mu.mjs";
-import { t as defaultSeed } from "../default-CiZ8bvSC.mjs";
-import { n as validateAllowedOrigins, r as validateOriginShape } from "../allowed-origins-3nAx5Xeo.mjs";
+import { n as VERSION, t as COMMIT } from "../version-D-jCq-i4.mjs";
+import { t as defaultSeed } from "../default-5A3XVR7L.mjs";
+import { n as validateAllowedOrigins, r as validateOriginShape } from "../allowed-origins-3RuuoFjC.mjs";
 import { createRequire } from "node:module";
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, isAbsolute, relative, resolve } from "node:path";
@@ -836,6 +836,14 @@ function injectBuiltinAuthRoutes(injectRoute) {
 		pattern: "/_dineway/api/auth/passkey/[id]",
 		entrypoint: resolveRoute("api/auth/passkey/[id].ts")
 	});
+	injectRoute({
+		pattern: "/_dineway/api/auth/setup-token/verify",
+		entrypoint: resolveRoute("api/auth/setup-token/verify.ts")
+	});
+	injectRoute({
+		pattern: "/_dineway/api/auth/setup-token",
+		entrypoint: resolveRoute("api/auth/setup-token/index.ts")
+	});
 	injectRoute({
 		pattern: "/_dineway/api/auth/dev-bypass",
 		entrypoint: resolveRoute("api/auth/dev-bypass.ts")
@@ -1568,6 +1576,10 @@ function dineway(config = {}) {
 					order: "pre"
 				});
 				if (!resolvedConfig.playground) {
+					addMiddleware({
+						entrypoint: "dineway/middleware/seed",
+						order: "pre"
+					});
 					addMiddleware({
 						entrypoint: "dineway/middleware/setup",
 						order: "pre"

package/dist/astro/middleware/auth.d.mts

@@ -1,13 +1,13 @@
-import "../../runtime-fyApolZR.mjs";
-import "../../types-DwIXYH8s.mjs";
-import "../../types-DzBAohLy.mjs";
-import "../../types-BSP1HbdT.mjs";
-import "../../runner-BJm_NJr2.mjs";
-import "../../index-CxVXYBXq.mjs";
-import "../../index-DUurmpun.mjs";
-import "../../bylines-DXqaE0d1.mjs";
-import "../../types-DbtpYtHx.mjs";
-import "../../validate-BikB29gc.mjs";
+import "../../runtime-Cg87dCSm.mjs";
+import "../../types-B1NksXAb.mjs";
+import "../../types-BIM7jwxr.mjs";
+import "../../types-BgE6gMFI.mjs";
+import "../../runner-pAnQS6iI.mjs";
+import "../../index-2tBfB_8X.mjs";
+import "../../index-CpbixmRL.mjs";
+import "../../bylines-Cb7nzI9t.mjs";
+import "../../types-BBETcziA.mjs";
+import "../../validate-BzUCAU2a.mjs";
 import { DinewayHandlers } from "../types.mjs";
 import { Kysely } from "kysely";
 import { User } from "@dineway-ai/auth";

package/dist/astro/middleware/auth.mjs

@@ -1,8 +1,8 @@
-import { t as apiError } from "../../error-Dyf9fGZE.mjs";
-import { n as getPublicOrigin } from "../../public-url-DuRGs0uF.mjs";
-import { t as getAuthMode } from "../../mode-BI1kRvlT.mjs";
-import { i as hasScope } from "../../api-tokens-BZ9aAeCo.mjs";
-import { a as resolveOAuthToken, i as resolveApiToken } from "../../api-tokens-DAMwe5Kj.mjs";
+import { t as apiError } from "../../error-DLkgOP5m.mjs";
+import { n as getPublicOrigin } from "../../public-url-BL2r8dmQ.mjs";
+import { t as getAuthMode } from "../../mode-Bd55iLcP.mjs";
+import { i as hasScope } from "../../api-tokens-L0o9Bd7v.mjs";
+import { a as resolveOAuthToken, i as resolveApiToken } from "../../api-tokens-BFg7tiOQ.mjs";
 import { ulid } from "ulidx";
 import { defineMiddleware } from "astro:middleware";
 import { createKyselyAdapter } from "@dineway-ai/auth/adapters/kysely";
@@ -140,11 +140,13 @@ const PUBLIC_API_EXACT = new Set([
 	"/_dineway/api/health",
 	"/_dineway/api/auth/passkey/options",
 	"/_dineway/api/auth/passkey/verify",
+	"/_dineway/api/auth/setup-token/verify",
 	"/_dineway/api/oauth/token",
 	"/_dineway/api/snapshot",
 	"/_dineway/api/search"
 ]);
 const CSRF_EXEMPT_PUBLIC_ROUTES = new Set([
+	"/_dineway/api/auth/setup-token/verify",
 	"/_dineway/api/oauth/token",
 	"/_dineway/api/oauth/register",
 	"/_dineway/api/oauth/device/code",

package/dist/astro/middleware/redirect.mjs

@@ -2,9 +2,9 @@ import { getRequestContext } from "../../request-context.mjs";
 import "../../dialect-helpers-TkdbkFad.mjs";
 import "../../base64-C1Q9yr0B.mjs";
 import "../../types-D1DjBFA9.mjs";
-import { t as RedirectRepository } from "../../redirect-hKO66LS_.mjs";
-import { a as matchCachedPatterns, n as compileRedirectRules, o as setCachedRedirects, r as getCachedRedirects } from "../../cache-BhJYDPP8.mjs";
-import { r as getDb } from "../../loader-dt5DoyI1.mjs";
+import { t as RedirectRepository } from "../../redirect-BaVvo2te.mjs";
+import { a as matchCachedPatterns, n as compileRedirectRules, o as setCachedRedirects, r as getCachedRedirects } from "../../cache-DQyZ-QaB.mjs";
+import { r as getDb } from "../../loader-p2imNN98.mjs";
 import { defineMiddleware } from "astro:middleware";
 
 //#region src/astro/middleware/redirect.ts

package/dist/astro/middleware/request-context.mjs

@@ -1,8 +1,8 @@
 import { runWithContext } from "../../request-context.mjs";
 import "../../base64-C1Q9yr0B.mjs";
 import "../../options-BF11H_FD.mjs";
-import { n as parseContentId, r as verifyPreviewToken } from "../../tokens-BMTKHT6X.mjs";
-import { i as resolveSecretsCached } from "../../secrets-BIrqds5c.mjs";
+import { n as parseContentId, r as verifyPreviewToken } from "../../tokens-CsP8Se8S.mjs";
+import { i as resolveSecretsCached } from "../../secrets-DfeNNoLa.mjs";
 import { defineMiddleware } from "astro:middleware";
 
 //#region src/visual-editing/toolbar.ts

package/dist/astro/middleware/seed.d.mts

@@ -0,0 +1,29 @@
+import { t as Database } from "../../types-B1NksXAb.mjs";
+import { Kysely } from "kysely";
+import * as astro from "astro";
+
+//#region src/astro/middleware/seed.d.ts
+interface ForgewaySeedEnv {
+  DINEWAY_SEED_ADMIN_EMAIL?: string;
+  DINEWAY_SEED_ADMIN_NAME?: string;
+  DINEWAY_SEED_SETUP_TOKEN_HASH?: string;
+  DINEWAY_SEED_SETUP_TOKEN_EXPIRES_AT?: string;
+  DINEWAY_SEED_ADMIN_API_TOKEN_HASH?: string;
+  DINEWAY_SEED_ADMIN_API_TOKEN_PREFIX?: string;
+  DINEWAY_SEED_ADMIN_API_TOKEN_EXPIRES_AT?: string;
+}
+type ForgewaySeedResult = {
+  status: "absent";
+} | {
+  status: "incomplete";
+} | {
+  status: "skipped_existing_users";
+} | {
+  status: "seeded";
+  userId: string;
+  apiTokenSeeded: boolean;
+};
+declare function seedForgewayAdmin(db: Kysely<Database>, env: ForgewaySeedEnv): Promise<ForgewaySeedResult>;
+declare const onRequest: astro.MiddlewareHandler;
+//#endregion
+export { ForgewaySeedEnv, ForgewaySeedResult, onRequest, seedForgewayAdmin };

package/dist/astro/middleware/seed.mjs

@@ -0,0 +1,134 @@
+import "../../dialect-helpers-TkdbkFad.mjs";
+import { r as runMigrations } from "../../runner-lqEiJbO-.mjs";
+import { t as OptionsRepository } from "../../options-BF11H_FD.mjs";
+import { ulid } from "ulidx";
+import { defineMiddleware } from "astro:middleware";
+
+//#region src/auth/api-token-seed.ts
+const PAT_DISPLAY_PREFIX_RE = /^ec_pat_[A-Za-z0-9_-]{4}$/;
+async function seedApiTokenFromHash(db, input) {
+	if (!PAT_DISPLAY_PREFIX_RE.test(input.prefix)) throw new Error("Invalid Dineway PAT display prefix");
+	const existing = await db.selectFrom("_dineway_api_tokens").select("id").where("token_hash", "=", input.tokenHash).executeTakeFirst();
+	if (existing) return {
+		id: existing.id,
+		inserted: false
+	};
+	const id = ulid();
+	await db.insertInto("_dineway_api_tokens").values({
+		id,
+		name: input.name ?? "Initial admin token",
+		token_hash: input.tokenHash,
+		prefix: input.prefix,
+		user_id: input.userId,
+		scopes: JSON.stringify(["admin"]),
+		expires_at: input.expiresAt ?? null
+	}).execute();
+	return {
+		id,
+		inserted: true
+	};
+}
+
+//#endregion
+//#region src/astro/middleware/seed.ts
+/**
+* Forgeway deployment-time admin bootstrap middleware.
+*
+* Forgeway injects only token hashes and non-secret identity data. This middleware
+* provisions the first native Dineway admin on first boot, then setup/auth continue
+* through Dineway-owned flows.
+*/
+const ROLE_ADMIN = 50;
+const BOOTSTRAP_SOURCE = "forgeway";
+let seedChecked = false;
+function normalizeEnvValue(value) {
+	const trimmed = value?.trim();
+	return trimmed ? trimmed : void 0;
+}
+function defaultNameForEmail(email) {
+	const [prefix] = email.split("@");
+	return prefix || email;
+}
+function hasValidIsoTimestamp(value) {
+	return Number.isFinite(Date.parse(value));
+}
+function resolveSeedEnv(env) {
+	return {
+		DINEWAY_SEED_ADMIN_EMAIL: normalizeEnvValue(env.DINEWAY_SEED_ADMIN_EMAIL),
+		DINEWAY_SEED_ADMIN_NAME: normalizeEnvValue(env.DINEWAY_SEED_ADMIN_NAME),
+		DINEWAY_SEED_SETUP_TOKEN_HASH: normalizeEnvValue(env.DINEWAY_SEED_SETUP_TOKEN_HASH),
+		DINEWAY_SEED_SETUP_TOKEN_EXPIRES_AT: normalizeEnvValue(env.DINEWAY_SEED_SETUP_TOKEN_EXPIRES_AT),
+		DINEWAY_SEED_ADMIN_API_TOKEN_HASH: normalizeEnvValue(env.DINEWAY_SEED_ADMIN_API_TOKEN_HASH),
+		DINEWAY_SEED_ADMIN_API_TOKEN_PREFIX: normalizeEnvValue(env.DINEWAY_SEED_ADMIN_API_TOKEN_PREFIX),
+		DINEWAY_SEED_ADMIN_API_TOKEN_EXPIRES_AT: normalizeEnvValue(env.DINEWAY_SEED_ADMIN_API_TOKEN_EXPIRES_AT)
+	};
+}
+async function seedForgewayAdmin(db, env) {
+	const seedEnv = resolveSeedEnv(env);
+	const email = seedEnv.DINEWAY_SEED_ADMIN_EMAIL;
+	if (!email) return { status: "absent" };
+	const setupTokenHash = seedEnv.DINEWAY_SEED_SETUP_TOKEN_HASH;
+	const setupTokenExpiresAt = seedEnv.DINEWAY_SEED_SETUP_TOKEN_EXPIRES_AT;
+	if (!setupTokenHash || !setupTokenExpiresAt || !hasValidIsoTimestamp(setupTokenExpiresAt) || seedEnv.DINEWAY_SEED_ADMIN_API_TOKEN_HASH && !seedEnv.DINEWAY_SEED_ADMIN_API_TOKEN_PREFIX) return { status: "incomplete" };
+	await runMigrations(db);
+	return db.transaction().execute(async (trx) => {
+		const userCount = await trx.selectFrom("users").select((eb) => eb.fn.countAll().as("count")).executeTakeFirstOrThrow();
+		if (Number(userCount.count) > 0) return { status: "skipped_existing_users" };
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		const userId = ulid();
+		const name = seedEnv.DINEWAY_SEED_ADMIN_NAME ?? defaultNameForEmail(email);
+		await trx.insertInto("users").values({
+			id: userId,
+			email,
+			name,
+			role: ROLE_ADMIN,
+			email_verified: 1,
+			created_at: now,
+			updated_at: now
+		}).execute();
+		await trx.insertInto("auth_tokens").values({
+			hash: setupTokenHash,
+			user_id: userId,
+			email,
+			type: "setup_link",
+			role: null,
+			invited_by: null,
+			expires_at: setupTokenExpiresAt
+		}).execute();
+		let apiTokenSeeded = false;
+		if (seedEnv.DINEWAY_SEED_ADMIN_API_TOKEN_HASH && seedEnv.DINEWAY_SEED_ADMIN_API_TOKEN_PREFIX) apiTokenSeeded = (await seedApiTokenFromHash(trx, {
+			tokenHash: seedEnv.DINEWAY_SEED_ADMIN_API_TOKEN_HASH,
+			prefix: seedEnv.DINEWAY_SEED_ADMIN_API_TOKEN_PREFIX,
+			userId,
+			expiresAt: seedEnv.DINEWAY_SEED_ADMIN_API_TOKEN_EXPIRES_AT ?? null
+		})).inserted;
+		const options = new OptionsRepository(trx);
+		await options.set("dineway:setup_complete", true);
+		await options.set("dineway:bootstrap_seeded_at", now);
+		await options.set("dineway:bootstrap_source", BOOTSTRAP_SOURCE);
+		return {
+			status: "seeded",
+			userId,
+			apiTokenSeeded
+		};
+	});
+}
+const onRequest = defineMiddleware(async (context, next) => {
+	const { dineway } = context.locals;
+	if (!seedChecked && dineway?.db) {
+		const result = await seedForgewayAdmin(dineway.db, {
+			DINEWAY_SEED_ADMIN_EMAIL: import.meta.env.DINEWAY_SEED_ADMIN_EMAIL,
+			DINEWAY_SEED_ADMIN_NAME: import.meta.env.DINEWAY_SEED_ADMIN_NAME,
+			DINEWAY_SEED_SETUP_TOKEN_HASH: import.meta.env.DINEWAY_SEED_SETUP_TOKEN_HASH,
+			DINEWAY_SEED_SETUP_TOKEN_EXPIRES_AT: import.meta.env.DINEWAY_SEED_SETUP_TOKEN_EXPIRES_AT,
+			DINEWAY_SEED_ADMIN_API_TOKEN_HASH: import.meta.env.DINEWAY_SEED_ADMIN_API_TOKEN_HASH,
+			DINEWAY_SEED_ADMIN_API_TOKEN_PREFIX: import.meta.env.DINEWAY_SEED_ADMIN_API_TOKEN_PREFIX,
+			DINEWAY_SEED_ADMIN_API_TOKEN_EXPIRES_AT: import.meta.env.DINEWAY_SEED_ADMIN_API_TOKEN_EXPIRES_AT
+		});
+		if (result.status === "seeded" || result.status === "skipped_existing_users") seedChecked = true;
+	}
+	return next();
+});
+
+//#endregion
+export { onRequest, seedForgewayAdmin };

package/dist/astro/middleware/setup.mjs

@@ -1,4 +1,4 @@
-import { t as getAuthMode } from "../../mode-BI1kRvlT.mjs";
+import { t as getAuthMode } from "../../mode-Bd55iLcP.mjs";
 import { defineMiddleware } from "astro:middleware";
 
 //#region src/astro/middleware/setup.ts