dineway 0.1.27 → 0.1.28

package/dist/astro/routes/api/schema/collections/index.mjs

@@ -13,7 +13,7 @@ import "../../../../../menus-DOaL6NaF.mjs";
 import "../../../../../redirect-BaVvo2te.mjs";
 import "../../../../../byline-DpNNSjET.mjs";
 import "../../../../../seo-BPb_reaG.mjs";
-import { _ as handleSchemaCollectionList, m as handleSchemaCollectionCreate } from "../../../../../api-DHgai7zP.mjs";
+import { _ as handleSchemaCollectionList, m as handleSchemaCollectionCreate } from "../../../../../api-B1tPdBKN.mjs";
 import "../../../../../request-cache-BpwuE2ix.mjs";
 import "../../../../../dashboard-BC9bgPOH.mjs";
 import "../../../../../briefing-Jsxs587i.mjs";

package/dist/astro/routes/api/schema/orphans/_slug_.mjs

@@ -13,7 +13,7 @@ import "../../../../../menus-DOaL6NaF.mjs";
 import "../../../../../redirect-BaVvo2te.mjs";
 import "../../../../../byline-DpNNSjET.mjs";
 import "../../../../../seo-BPb_reaG.mjs";
-import { p as handleOrphanedTableRegister } from "../../../../../api-DHgai7zP.mjs";
+import { p as handleOrphanedTableRegister } from "../../../../../api-B1tPdBKN.mjs";
 import "../../../../../request-cache-BpwuE2ix.mjs";
 import "../../../../../dashboard-BC9bgPOH.mjs";
 import "../../../../../briefing-Jsxs587i.mjs";

package/dist/astro/routes/api/schema/orphans/index.mjs

@@ -13,7 +13,7 @@ import "../../../../../menus-DOaL6NaF.mjs";
 import "../../../../../redirect-BaVvo2te.mjs";
 import "../../../../../byline-DpNNSjET.mjs";
 import "../../../../../seo-BPb_reaG.mjs";
-import { f as handleOrphanedTableList } from "../../../../../api-DHgai7zP.mjs";
+import { f as handleOrphanedTableList } from "../../../../../api-B1tPdBKN.mjs";
 import "../../../../../request-cache-BpwuE2ix.mjs";
 import "../../../../../dashboard-BC9bgPOH.mjs";
 import "../../../../../briefing-Jsxs587i.mjs";

package/dist/astro/routes/api/well-known/auth.mjs

@@ -1,5 +1,5 @@
 import { t as OptionsRepository } from "../../../../options-BF11H_FD.mjs";
-import { n as VERSION } from "../../../../version-D-jCq-i4.mjs";
+import { n as VERSION } from "../../../../version-B9lKhZ7w.mjs";
 import { t as getAuthMode } from "../../../../mode-Bd55iLcP.mjs";
 
 //#region src/astro/routes/api/well-known/auth.ts

package/dist/astro/types.d.mts

@@ -1,5 +1,5 @@
 import { r as ContentItem } from "../types-DvwHUku7.mjs";
-import { Kn as MediaItem, en as SandboxRunner, mn as MediaResponse, nt as HookPipeline, or as ContentListResponse, pn as MediaListResponse, sr as ContentResponse, t as DinewayConfig, tt as EmailPipeline } from "../runtime-Cg87dCSm.mjs";
+import { Kn as MediaItem, en as SandboxRunner, mn as MediaResponse, nt as HookPipeline, or as ContentListResponse, pn as MediaListResponse, sr as ContentResponse, t as DinewayConfig, tt as EmailPipeline } from "../runtime-BM9sqnzO.mjs";
 import { t as Database } from "../types-B1NksXAb.mjs";
 import { A as PageMetadataContribution, D as PageFragmentContribution, X as ResolvedPlugin, ct as Element, q as PublicPageContext } from "../types-BIM7jwxr.mjs";
 import "../types-BgE6gMFI.mjs";
@@ -8,7 +8,7 @@ import "../runner-pAnQS6iI.mjs";
 import "../index-2tBfB_8X.mjs";
 import "../index-CpbixmRL.mjs";
 import { d as Storage } from "../types-BYjPylrZ.mjs";
-import "../bylines-Cb7nzI9t.mjs";
+import "../bylines-Cf_VHc-Y.mjs";
 import "../types-BBETcziA.mjs";
 import "../validate-BzUCAU2a.mjs";
 import "../index.mjs";

package/dist/{bylines-Cb7nzI9t.d.mts → bylines-Cf_VHc-Y.d.mts}

@@ -519,11 +519,11 @@ declare const createCollectionBody: z.ZodObject<{
   description: z.ZodOptional<z.ZodString>;
   icon: z.ZodOptional<z.ZodString>;
   supports: z.ZodOptional<z.ZodArray<z.ZodEnum<{
-    search: "search";
     drafts: "drafts";
     revisions: "revisions";
     preview: "preview";
     scheduling: "scheduling";
+    search: "search";
   }>>>;
   source: z.ZodOptional<z.ZodString>;
   urlPattern: z.ZodOptional<z.ZodString>;
@@ -535,11 +535,11 @@ declare const updateCollectionBody: z.ZodObject<{
   description: z.ZodOptional<z.ZodString>;
   icon: z.ZodOptional<z.ZodString>;
   supports: z.ZodOptional<z.ZodArray<z.ZodEnum<{
-    search: "search";
     drafts: "drafts";
     revisions: "revisions";
     preview: "preview";
     scheduling: "scheduling";
+    search: "search";
   }>>>;
   urlPattern: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   hasSeo: z.ZodOptional<z.ZodBoolean>;
@@ -560,15 +560,15 @@ declare const createFieldBody: z.ZodObject<{
     number: "number";
     boolean: "boolean";
     file: "file";
-    slug: "slug";
     url: "url";
+    image: "image";
+    slug: "slug";
     datetime: "datetime";
     text: "text";
     integer: "integer";
     select: "select";
     multiSelect: "multiSelect";
     portableText: "portableText";
-    image: "image";
     reference: "reference";
     json: "json";
     repeater: "repeater";
@@ -687,15 +687,15 @@ declare const fieldSchema: z.ZodObject<{
     number: "number";
     boolean: "boolean";
     file: "file";
-    slug: "slug";
     url: "url";
+    image: "image";
+    slug: "slug";
     datetime: "datetime";
     text: "text";
     integer: "integer";
     select: "select";
     multiSelect: "multiSelect";
     portableText: "portableText";
-    image: "image";
     reference: "reference";
     json: "json";
     repeater: "repeater";
@@ -752,15 +752,15 @@ declare const collectionWithFieldsResponseSchema: z.ZodObject<{
         number: "number";
         boolean: "boolean";
         file: "file";
-        slug: "slug";
         url: "url";
+        image: "image";
+        slug: "slug";
         datetime: "datetime";
         text: "text";
         integer: "integer";
         select: "select";
         multiSelect: "multiSelect";
         portableText: "portableText";
-        image: "image";
         reference: "reference";
         json: "json";
         repeater: "repeater";
@@ -806,15 +806,15 @@ declare const fieldResponseSchema: z.ZodObject<{
       number: "number";
       boolean: "boolean";
       file: "file";
-      slug: "slug";
       url: "url";
+      image: "image";
+      slug: "slug";
       datetime: "datetime";
       text: "text";
       integer: "integer";
       select: "select";
       multiSelect: "multiSelect";
       portableText: "portableText";
-      image: "image";
       reference: "reference";
       json: "json";
       repeater: "repeater";
@@ -843,15 +843,15 @@ declare const fieldListResponseSchema: z.ZodObject<{
       number: "number";
       boolean: "boolean";
       file: "file";
-      slug: "slug";
       url: "url";
+      image: "image";
+      slug: "slug";
       datetime: "datetime";
       text: "text";
       integer: "integer";
       select: "select";
       multiSelect: "multiSelect";
       portableText: "portableText";
-      image: "image";
       reference: "reference";
       json: "json";
       repeater: "repeater";
@@ -1022,21 +1022,21 @@ declare const contextEntryListQuery: z.ZodObject<{
   cursor: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 declare const contextEntryStaleQuery: z.ZodObject<{
-  limit: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
-  cursor: z.ZodOptional<z.ZodString>;
-  scope: z.ZodOptional<z.ZodString>;
   includeInherited: z.ZodPipe<z.ZodOptional<z.ZodEnum<{
     true: "true";
     false: "false";
   }>>, z.ZodTransform<boolean | undefined, "true" | "false" | undefined>>;
   contextTypes: z.ZodPipe<z.ZodOptional<z.ZodString>, z.ZodTransform<string[] | undefined, string | undefined>>;
   tags: z.ZodPipe<z.ZodOptional<z.ZodString>, z.ZodTransform<string[] | undefined, string | undefined>>;
+  scope: z.ZodOptional<z.ZodString>;
   createdByActorType: z.ZodOptional<z.ZodEnum<{
     user: "user";
     api_token: "api_token";
     system: "system";
   }>>;
   createdByActorId: z.ZodOptional<z.ZodString>;
+  limit: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+  cursor: z.ZodOptional<z.ZodString>;
   now: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 declare const contextEntryDiffQuery: z.ZodObject<{
@@ -1051,7 +1051,6 @@ declare const contextEntryDiffQuery: z.ZodObject<{
 declare const contextEntryCreateBody: z.ZodObject<{
   scope: z.ZodString;
   contextType: z.ZodEnum<{
-    decision: "decision";
     brand_voice: "brand_voice";
     seo_strategy: "seo_strategy";
     audience: "audience";
@@ -1061,6 +1060,7 @@ declare const contextEntryCreateBody: z.ZodObject<{
     migration_note: "migration_note";
     plugin_note: "plugin_note";
     agent_reasoning: "agent_reasoning";
+    decision: "decision";
     risk: "risk";
     content_gap: "content_gap";
     style_exception: "style_exception";
@@ -1075,7 +1075,6 @@ declare const contextEntryCreateBody: z.ZodObject<{
 declare const contextEntrySupersedeBody: z.ZodObject<{
   scope: z.ZodOptional<z.ZodString>;
   contextType: z.ZodOptional<z.ZodEnum<{
-    decision: "decision";
     brand_voice: "brand_voice";
     seo_strategy: "seo_strategy";
     audience: "audience";
@@ -1085,6 +1084,7 @@ declare const contextEntrySupersedeBody: z.ZodObject<{
     migration_note: "migration_note";
     plugin_note: "plugin_note";
     agent_reasoning: "agent_reasoning";
+    decision: "decision";
     risk: "risk";
     content_gap: "content_gap";
     style_exception: "style_exception";
@@ -1520,8 +1520,8 @@ declare const termGetResponseSchema: z.ZodObject<{
 //#region src/api/schemas/sections.d.ts
 declare const sectionsListQuery: z.ZodObject<{
   source: z.ZodOptional<z.ZodEnum<{
-    theme: "theme";
     user: "user";
+    theme: "theme";
     import: "import";
   }>>;
   search: z.ZodOptional<z.ZodString>;

package/dist/cli/index.mjs

@@ -23,8 +23,8 @@ import "../ssrf-KAIQS48_.mjs";
 import { t as validateSeed } from "../validate-JE-WfUQ5.mjs";
 import { t as applySeed } from "../apply-TIoQ00aH.mjs";
 import { n as fingerprintKey, r as generateEncryptionKey, t as DinewaySecretsError } from "../secrets-DfeNNoLa.mjs";
-import { o as convertDataForRead } from "../transport-B7kO-4ee.mjs";
 import { createHeaderAwareFetch, customHeadersInterceptor, isRedirectResponse, resolveCustomHeaders } from "../client/external-auth-headers.mjs";
+import { o as convertDataForRead } from "../transport-B7kO-4ee.mjs";
 import { DinewayClient } from "../client/index.mjs";
 import { LocalStorage } from "../storage/local.mjs";
 import { imageSize } from "image-size";
@@ -35,50 +35,13 @@ import { basename, dirname, extname, isAbsolute, join, relative, resolve } from
 import { defineCommand, runCommand, runMain } from "citty";
 import consola, { consola as consola$1 } from "consola";
 import pc from "picocolors";
-import { access, chmod, copyFile, mkdir, readFile, readdir, rm, stat, symlink, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
+import { access, chmod, copyFile, mkdir, readFile, readdir, rm, stat, symlink, writeFile } from "node:fs/promises";
 import { createInterface } from "node:readline/promises";
 import { spawn } from "node:child_process";
 import { pipeline } from "node:stream/promises";
 import { packTar } from "modern-tar/fs";
 
-//#region src/cli/commands/auth.ts
-/**
-* Auth CLI commands
-*/
-/**
-* Generate a cryptographically secure auth secret
-*/
-function generateAuthSecret() {
-	const bytes = new Uint8Array(32);
-	crypto.getRandomValues(bytes);
-	return encodeBase64url(bytes);
-}
-const secretCommand = defineCommand({
-	meta: {
-		name: "secret",
-		description: "Generate a secure auth secret"
-	},
-	run() {
-		const secret = generateAuthSecret();
-		consola$1.log("");
-		consola$1.log(pc.bold("Generated auth secret:"));
-		consola$1.log("");
-		consola$1.log(`  ${pc.cyan("DINEWAY_AUTH_SECRET")}=${pc.green(secret)}`);
-		consola$1.log("");
-		consola$1.log(pc.dim("Add this to your environment variables."));
-		consola$1.log("");
-	}
-});
-const authCommand = defineCommand({
-	meta: {
-		name: "auth",
-		description: "Authentication utilities"
-	},
-	subCommands: { secret: secretCommand }
-});
-
-//#endregion
 //#region src/cli/credentials.ts
 /**
 * Credential storage for CLI auth tokens.
@@ -223,6 +186,79 @@ function removeMarketplaceCredential(registryUrl) {
 	return false;
 }
 
+//#endregion
+//#region src/cli/project-env.ts
+const DEFAULT_DINEWAY_URL = "http://localhost:4321";
+const ENV_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const LINE_SPLIT_PATTERN = /\r?\n/;
+const NEWLINE_PATTERN = /\r?\n/g;
+function parseDotenvValue(value) {
+	const trimmed = value.trim();
+	if (trimmed.startsWith("\"") && trimmed.endsWith("\"") || trimmed.startsWith("'") && trimmed.endsWith("'")) return trimmed.slice(1, -1);
+	return trimmed;
+}
+function parseDotenv(text) {
+	const env = {};
+	for (const line of text.split(LINE_SPLIT_PATTERN)) {
+		const trimmed = line.trim();
+		if (!trimmed || trimmed.startsWith("#")) continue;
+		const normalized = trimmed.startsWith("export ") ? trimmed.slice(7).trim() : trimmed;
+		const equalsIndex = normalized.indexOf("=");
+		if (equalsIndex <= 0) continue;
+		const key = normalized.slice(0, equalsIndex).trim();
+		if (!ENV_KEY_PATTERN.test(key)) continue;
+		env[key] = parseDotenvValue(normalized.slice(equalsIndex + 1));
+	}
+	return env;
+}
+function readProjectEnv(cwd = process.cwd()) {
+	const envPath = join(cwd, ".env");
+	if (!existsSync(envPath)) return {};
+	return parseDotenv(readFileSync(envPath, "utf-8"));
+}
+function getProjectEnvValue(name, cwd = process.cwd()) {
+	return process.env[name] ?? readProjectEnv(cwd)[name];
+}
+function resolveDinewayBaseUrl(url, cwd = process.cwd()) {
+	if (url && url !== DEFAULT_DINEWAY_URL) return url;
+	const projectEnv = readProjectEnv(cwd);
+	return process.env["DINEWAY_URL"] ?? process.env["DINEWAY_SITE_URL"] ?? projectEnv["DINEWAY_SITE_URL"] ?? projectEnv["DINEWAY_URL"] ?? url ?? DEFAULT_DINEWAY_URL;
+}
+function resolveDinewayToken(token, cwd = process.cwd()) {
+	return token ?? getProjectEnvValue("DINEWAY_TOKEN", cwd);
+}
+function formatEnvValue(value) {
+	return value.replace(NEWLINE_PATTERN, "");
+}
+async function upsertProjectEnv(cwd, values) {
+	const envPath = join(cwd, ".env");
+	const existing = await readFile(envPath, "utf-8").catch(() => "");
+	const lines = existing ? existing.split(LINE_SPLIT_PATTERN) : [];
+	const seen = /* @__PURE__ */ new Set();
+	const nextLines = lines.map((line) => {
+		const trimmed = line.trim();
+		const normalized = trimmed.startsWith("export ") ? trimmed.slice(7).trim() : trimmed;
+		const equalsIndex = normalized.indexOf("=");
+		if (equalsIndex <= 0) return line;
+		const key = normalized.slice(0, equalsIndex).trim();
+		const value = values[key];
+		if (!(key in values) || value === void 0) return line;
+		seen.add(key);
+		return `${key}=${formatEnvValue(value)}`;
+	});
+	for (const [key, value] of Object.entries(values)) {
+		if (value === void 0 || seen.has(key)) continue;
+		nextLines.push(`${key}=${formatEnvValue(value)}`);
+	}
+	await writeFile(envPath, `${nextLines.filter((line, index) => line || index < nextLines.length - 1).join("\n")}\n`, "utf-8");
+}
+async function ensureProjectGitignoreEntry(cwd, entry) {
+	const gitignorePath = join(cwd, ".gitignore");
+	const existing = await readFile(gitignorePath, "utf-8").catch(() => "");
+	if (existing.split(LINE_SPLIT_PATTERN).map((line) => line.trim()).includes(entry)) return;
+	await writeFile(gitignorePath, `${existing}${existing && !existing.endsWith("\n") ? "\n" : ""}${entry}\n`, "utf-8");
+}
+
 //#endregion
 //#region src/cli/client-factory.ts
 var client_factory_exports = /* @__PURE__ */ __exportAll({
@@ -238,7 +274,7 @@ const connectionArgs = {
 		type: "string",
 		alias: "u",
 		description: "Dineway instance URL",
-		default: "http://localhost:4321"
+		default: DEFAULT_DINEWAY_URL
 	},
 	token: {
 		type: "string",
@@ -270,8 +306,8 @@ const connectionArgs = {
 * 3. --header CLI flags
 */
 function createClientFromArgs(args) {
-	const baseUrl = args.url || process.env["DINEWAY_URL"] || "http://localhost:4321";
-	let token = args.token || process.env["DINEWAY_TOKEN"];
+	const baseUrl = resolveDinewayBaseUrl(args.url);
+	let token = resolveDinewayToken(args.token);
 	const isLocal = baseUrl.includes("localhost") || baseUrl.includes("127.0.0.1");
 	const cred = !token ? getCredentials(baseUrl) : null;
 	const customHeaders = {
@@ -367,6 +403,69 @@ function prettyPrint(data, indent = 0) {
 	consola$1.log(typeof data === "string" ? data : JSON.stringify(data));
 }
 
+//#endregion
+//#region src/cli/commands/auth.ts
+/**
+* Auth CLI commands
+*/
+/**
+* Generate a cryptographically secure auth secret
+*/
+function generateAuthSecret() {
+	const bytes = new Uint8Array(32);
+	crypto.getRandomValues(bytes);
+	return encodeBase64url(bytes);
+}
+const secretCommand = defineCommand({
+	meta: {
+		name: "secret",
+		description: "Generate a secure auth secret"
+	},
+	run() {
+		const secret = generateAuthSecret();
+		consola$1.log("");
+		consola$1.log(pc.bold("Generated auth secret:"));
+		consola$1.log("");
+		consola$1.log(`  ${pc.cyan("DINEWAY_AUTH_SECRET")}=${pc.green(secret)}`);
+		consola$1.log("");
+		consola$1.log(pc.dim("Add this to your environment variables."));
+		consola$1.log("");
+	}
+});
+const setupLinkCommand = defineCommand({
+	meta: {
+		name: "setup-link",
+		description: "Create a one-time admin setup link"
+	},
+	args: connectionArgs,
+	async run({ args }) {
+		configureOutputMode(args);
+		try {
+			const result = await createClientFromArgs(args).createSetupLink();
+			if (args.json || !process.stdout.isTTY) {
+				output(result, args);
+				return;
+			}
+			consola$1.success("Created one-time setup link");
+			consola$1.info(`Expires: ${result.expiresAt}`);
+			consola$1.log(result.setupUrl);
+		} catch (error) {
+			consola$1.error(error instanceof Error ? error.message : "Failed to create setup link");
+			process.exit(2);
+		}
+	}
+});
+const authCommand = defineCommand({
+	meta: {
+		name: "auth",
+		description: "Authentication utilities"
+	},
+	subCommands: {
+		secret: secretCommand,
+		"setup-link": setupLinkCommand
+	}
+});
+
 //#endregion
 //#region src/cli/commands/content.ts
 /**
@@ -1745,8 +1844,8 @@ function getSavedForgewayMetadata(pkg) {
 async function resolveForgewayAccountEmail(options, grant, cwd, deps) {
 	const stored = await (deps.readCredentials ?? readForgewayCredentials)(cwd);
 	const storedEmail = stored?.source === "shadow-email-upgrade" && stored.placeId === grant.placeId && stored.user?.emailVerified === true && !isShadowEmail(stored.user?.email) ? stored.user?.email : void 0;
-	const email = normalizeEmail(options.email ?? getEnv("FORGEWAY_EMAIL") ?? storedEmail ?? await promptRequired("Forgeway account email: ", void 0, deps, "Forgeway account email is required. Pass --email or set FORGEWAY_EMAIL."));
-	if (!email || isShadowEmail(email)) throw new Error("Forgeway account email must be a real owner email, not a shadow user email.");
+	const email = normalizeEmail(options.email ?? getEnv("DINEWAY_EMAIL") ?? getEnv("FORGEWAY_EMAIL") ?? storedEmail ?? await promptRequired("Dineway account email: ", void 0, deps, "Dineway account email is required. Pass --email or set DINEWAY_EMAIL."));
+	if (!email || isShadowEmail(email)) throw new Error("Dineway account email must be a real owner email, not a shadow user email.");
 	return email;
 }
 function isStoredFormalCredentialForGrant(stored, grant, email) {
@@ -2306,15 +2405,21 @@ async function deploySiteProject(options) {
 		dinewayAdminBootstrap: createResult.dinewayAdminBootstrap
 	};
 }
-function formatDinewayAdminBootstrapMessage(bootstrap, siteUrl) {
+async function persistForgewayCliEnv(cwd, params) {
+	await upsertProjectEnv(cwd, {
+		DINEWAY_SITE_URL: params.siteUrl,
+		DINEWAY_TOKEN: params.token
+	});
+	await ensureProjectGitignoreEntry(cwd, ".env");
+}
+function formatDinewayAdminBootstrapMessage(bootstrap) {
 	if (!bootstrap) return "";
 	if (bootstrap.status === "already_issued") return `Dineway admin bootstrap: ${bootstrap.message}`;
 	return [
-		"Dineway admin bootstrap credentials were issued. Forgeway will not print these again.",
-		`Admin email: ${bootstrap.adminEmail}`,
+		"Dineway admin access is ready. Local CLI defaults were saved to .env.",
+		`Dineway admin email: ${bootstrap.adminEmail}`,
 		`Setup link (expires ${bootstrap.setupTokenExpiresAt}): ${bootstrap.setupUrl}`,
-		`Admin API token: ${bootstrap.apiToken}`,
-		`CLI example: DINEWAY_TOKEN=${bootstrap.apiToken} dineway whoami --url ${siteUrl}`
+		"CLI example: dineway whoami"
 	].join("\n");
 }
 async function deployForgeway(cwd, options, deps = {}) {
@@ -2353,7 +2458,11 @@ async function deployForgeway(cwd, options, deps = {}) {
 		deps
 	});
 	const url = deployment.liveUrl ?? `https://${site.domain}`;
-	const bootstrapMessage = formatDinewayAdminBootstrapMessage(deployment.dinewayAdminBootstrap, url);
+	await (deps.writeProjectEnv ?? persistForgewayCliEnv)(cwd, {
+		siteUrl: url,
+		token: deployment.dinewayAdminBootstrap?.status === "issued" ? deployment.dinewayAdminBootstrap.apiToken : void 0
+	});
+	const bootstrapMessage = formatDinewayAdminBootstrapMessage(deployment.dinewayAdminBootstrap);
 	const statusMessage = deployment.isReady ? `Deploy complete: ${url}` : `Deploy started for ${site.domain}. Check Forgeway for build status.`;
 	return {
 		url,
@@ -2891,7 +3000,7 @@ const deployCommand = defineCommand({
 		},
 		email: {
 			type: "string",
-			description: "Forgeway account email for shadow-user upgrade",
+			description: "Dineway account email for deploy authorization",
 			required: false
 		},
 		"restaurant-name": {
@@ -3901,7 +4010,7 @@ const loginCommand = defineCommand({
 			type: "string",
 			alias: "u",
 			description: "Dineway instance URL",
-			default: "http://localhost:4321"
+			default: DEFAULT_DINEWAY_URL
 		},
 		header: {
 			type: "string",
@@ -3910,7 +4019,7 @@ const loginCommand = defineCommand({
 		}
 	},
 	async run({ args }) {
-		const baseUrl = args.url || "http://localhost:4321";
+		const baseUrl = resolveDinewayBaseUrl(args.url);
 		consola$1.start(`Connecting to ${baseUrl}...`);
 		const customHeaders = resolveCustomHeaders();
 		let headerFetch = createHeaderAwareFetch(customHeaders);
@@ -4022,10 +4131,10 @@ const logoutCommand = defineCommand({
 		type: "string",
 		alias: "u",
 		description: "Dineway instance URL",
-		default: "http://localhost:4321"
+		default: DEFAULT_DINEWAY_URL
 	} },
 	async run({ args }) {
-		const baseUrl = args.url || "http://localhost:4321";
+		const baseUrl = resolveDinewayBaseUrl(args.url);
 		const cred = getCredentials(baseUrl);
 		if (!cred) {
 			consola$1.info("No stored credentials found for this instance.");
@@ -4053,7 +4162,7 @@ const whoamiCommand = defineCommand({
 			type: "string",
 			alias: "u",
 			description: "Dineway instance URL",
-			default: "http://localhost:4321"
+			default: DEFAULT_DINEWAY_URL
 		},
 		token: {
 			type: "string",
@@ -4067,8 +4176,8 @@ const whoamiCommand = defineCommand({
 	},
 	async run({ args }) {
 		configureOutputMode(args);
-		const baseUrl = args.url || "http://localhost:4321";
-		let token = args.token || process.env["DINEWAY_TOKEN"];
+		const baseUrl = resolveDinewayBaseUrl(args.url);
+		let token = resolveDinewayToken(args.token);
 		let authMethod = token ? "token" : "none";
 		let storedHeaders = {};
 		if (!token) {

package/dist/client/index.d.mts

@@ -182,6 +182,10 @@ interface MenuItem {
   parentId?: string | null;
   sortOrder: number;
 }
+interface SetupLinkResult {
+  setupUrl: string;
+  expiresAt: string;
+}
 /** Full schema export (returned by /api/schema) */
 interface SchemaExport {
   collections: Array<{
@@ -392,6 +396,8 @@ declare class DinewayClient {
   menus(): Promise<Menu[]>;
   /** Get a menu with its items */
   menu(name: string): Promise<MenuWithItems>;
+  /** Create a one-time browser setup link for the current admin user. */
+  createSetupLink(): Promise<SetupLinkResult>;
   /** Make a typed JSON request to the API */
   private request;
   /** Make a raw request — caller handles response */
@@ -402,4 +408,4 @@ declare class DinewayClient {
   private getFieldSchemas;
 }
 //#endregion
-export { ApiError, ClientResponse, Collection, CollectionWithFields, ContentItem, DinewayApiError, DinewayClient, DinewayClientError, DinewayClientOptions, Field, type Interceptor, ListResult, Manifest, MediaItem, Menu, MenuItem, MenuWithItems, type PortableTextBlock, PublishContentOptions, SchemaExport, SearchResult, Taxonomy, Term, createTransport, csrfInterceptor, devBypassInterceptor, markdownToPortableText, portableTextToMarkdown, tokenInterceptor };
+export { ApiError, ClientResponse, Collection, CollectionWithFields, ContentItem, DinewayApiError, DinewayClient, DinewayClientError, DinewayClientOptions, Field, type Interceptor, ListResult, Manifest, MediaItem, Menu, MenuItem, MenuWithItems, type PortableTextBlock, PublishContentOptions, SchemaExport, SearchResult, SetupLinkResult, Taxonomy, Term, createTransport, csrfInterceptor, devBypassInterceptor, markdownToPortableText, portableTextToMarkdown, tokenInterceptor };

package/dist/client/index.mjs

@@ -285,6 +285,10 @@ var DinewayClient = class {
 	async menu(name) {
 		return this.request("GET", `/menus/${encodeURIComponent(name)}`);
 	}
+	/** Create a one-time browser setup link for the current admin user. */
+	async createSetupLink() {
+		return this.request("POST", "/auth/setup-token");
+	}
 	/** Make a typed JSON request to the API */
 	async request(method, path, body) {
 		const response = await this.requestRaw(method, path, body);

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { a as ContentSeoInput, c as FindManyOptions, i as ContentSeo, l as FindManyResult, n as ContentBylineCredit, o as CreateContentInput, r as ContentItem, s as DinewayValidationError, t as BylineSummary, u as UpdateContentInput } from "./types-DvwHUku7.mjs";
-import { $ as createPluginManager, $t as SandboxOptions, A as dropSessionDatabaseTables, An as handleContentDelete, At as verifyPreviewSignature, B as GeneratePreviewTokenOptions, Bn as handleContentSchedule, Bt as prosemirrorToPortableText, C as getByline, Cn as handleRevisionList, Ct as SessionOpenOrCreateOptions, D as AppliedSnapshotMeta, Dn as handleContentCountScheduled, Dt as defaultPreviewSidecarClient, E as renderPreviewToolbar, En as handleContentCompare, Et as buildPreviewSignatureHeader, F as getPreviewToken, Fn as handleContentList, Ft as AfterCallback, G as parseContentId, Gn as CreateMediaInput, Gt as PortableTextSpan, H as VerifyPreviewTokenOptions, Hn as handleContentUnpublish, Ht as PortableTextImageBlock, I as isPreviewRequest, In as handleContentListTrashed, It as after, J as createNodeSandboxRunner, Jn as ContentRepository, Jt as ProseMirrorDocument, K as verifyPreviewToken, Kn as MediaItem, Kt as PortableTextTextBlock, L as GetPreviewUrlOptions, Ln as handleContentPermanentDelete, Lt as computeContentHash, M as Snapshot, Mn as handleContentDuplicate, Mt as getFallbackChain, N as renderPreviewLoadingPage, Nn as handleContentGet, Nt as getI18nConfig, O as ApplySnapshotToDatabaseOptions, On as handleContentCountTrashed, Ot as parsePreviewSignatureHeader, P as isBlockedInPreview, Pn as handleContentGetIncludingTrashed, Pt as isI18nEnabled, Q as PluginManager, Qt as SandboxEmailSendCallback, R as buildPreviewUrl, Rn as handleContentPublish, Rt as hashString, S as Suggestion, Sn as handleRevisionGet, St as SessionOpenOptions, T as PreviewToolbarConfig, Tn as generateManifest, Tt as PreviewSidecarSignature, U as VerifyPreviewTokenResult, Un as handleContentUnschedule, Ut as PortableTextLinkMark, V as PreviewTokenPayload, Vn as handleContentTranslations, Vt as PortableTextCodeBlock, W as generatePreviewToken, Wn as handleContentUpdate, Wt as PortableTextMarkDef, X as SandboxNotAvailableError, Xn as DinewayDatabaseError, Xt as ProseMirrorNode, Y as NoopSandboxRunner, Yn as DatabaseConfig, Yt as ProseMirrorMark, Z as createNoopSandboxRunner, Zt as SandboxEmailMessage, _ as SearchOptions, _n as handleMediaGet, _t as SessionCleanupResult, an as getSections, ar as ApiContext, at as ValidatedPluginManifest, b as SearchStats, bn as RevisionListResponse, bt as SessionDatabaseInfo, c as extractSearchableFields, cn as Section, cr as FieldDescriptor, ct as CollectionFilter$1, d as search, dn as SchemaError, en as SandboxRunner, et as PluginRouteError, f as searchCollection, fn as SchemaRegistry, g as SearchConfig, gn as handleMediaDelete, gt as FileSessionDatabaseFactoryOptions, h as CollectionSearchOptions, hn as handleMediaCreate, ht as FileSessionDatabaseFactory, in as getSection, it as createHookPipeline, j as getAppliedSnapshotMeta, jn as handleContentDiscardDraft, jt as I18nConfig, k as applySnapshotToDatabase, kn as handleContentCreate, kt as signPreviewUrl, l as getSearchStats, ln as SectionSource, lr as ListResponse, lt as EntryData, m as FTSManager, mn as MediaResponse, mt as createFilePreviewMiddleware, n as PluginDescriptor, nn as SandboxedPlugin, nt as HookPipeline, on as CreateSectionInput, or as ContentListResponse, ot as pluginManifestSchema, p as searchWithDb, pn as MediaListResponse, pt as FilePreviewMiddlewareConfig, q as NodeSandboxRunner, qn as MediaRepository, qt as PortableTextUnknownBlock, rn as SerializedRequest, rt as HookResult, s as extractPlainText, sn as GetSectionsOptions, sr as ContentResponse, st as definePlugin, tn as SandboxRunnerFactory, u as getSuggestions, un as UpdateSectionInput, ur as ManifestResponse, ut as EntryFilter, v as SearchResponse, vn as handleMediaList, vt as SessionDatabaseFactory, w as getBylineBySlug, wn as handleRevisionRestore, wt as PreviewSidecarClient, x as SuggestOptions, xn as RevisionResponse, xt as SessionDatabaseLimitError, y as SearchResult, yn as handleMediaUpdate, yt as SessionDatabaseHandle, z as getPreviewUrl, zn as handleContentRestore, zt as portableTextToProsemirror } from "./runtime-Cg87dCSm.mjs";
+import { $ as createPluginManager, $t as SandboxOptions, A as dropSessionDatabaseTables, An as handleContentDelete, At as verifyPreviewSignature, B as GeneratePreviewTokenOptions, Bn as handleContentSchedule, Bt as prosemirrorToPortableText, C as getByline, Cn as handleRevisionList, Ct as SessionOpenOrCreateOptions, D as AppliedSnapshotMeta, Dn as handleContentCountScheduled, Dt as defaultPreviewSidecarClient, E as renderPreviewToolbar, En as handleContentCompare, Et as buildPreviewSignatureHeader, F as getPreviewToken, Fn as handleContentList, Ft as AfterCallback, G as parseContentId, Gn as CreateMediaInput, Gt as PortableTextSpan, H as VerifyPreviewTokenOptions, Hn as handleContentUnpublish, Ht as PortableTextImageBlock, I as isPreviewRequest, In as handleContentListTrashed, It as after, J as createNodeSandboxRunner, Jn as ContentRepository, Jt as ProseMirrorDocument, K as verifyPreviewToken, Kn as MediaItem, Kt as PortableTextTextBlock, L as GetPreviewUrlOptions, Ln as handleContentPermanentDelete, Lt as computeContentHash, M as Snapshot, Mn as handleContentDuplicate, Mt as getFallbackChain, N as renderPreviewLoadingPage, Nn as handleContentGet, Nt as getI18nConfig, O as ApplySnapshotToDatabaseOptions, On as handleContentCountTrashed, Ot as parsePreviewSignatureHeader, P as isBlockedInPreview, Pn as handleContentGetIncludingTrashed, Pt as isI18nEnabled, Q as PluginManager, Qt as SandboxEmailSendCallback, R as buildPreviewUrl, Rn as handleContentPublish, Rt as hashString, S as Suggestion, Sn as handleRevisionGet, St as SessionOpenOptions, T as PreviewToolbarConfig, Tn as generateManifest, Tt as PreviewSidecarSignature, U as VerifyPreviewTokenResult, Un as handleContentUnschedule, Ut as PortableTextLinkMark, V as PreviewTokenPayload, Vn as handleContentTranslations, Vt as PortableTextCodeBlock, W as generatePreviewToken, Wn as handleContentUpdate, Wt as PortableTextMarkDef, X as SandboxNotAvailableError, Xn as DinewayDatabaseError, Xt as ProseMirrorNode, Y as NoopSandboxRunner, Yn as DatabaseConfig, Yt as ProseMirrorMark, Z as createNoopSandboxRunner, Zt as SandboxEmailMessage, _ as SearchOptions, _n as handleMediaGet, _t as SessionCleanupResult, an as getSections, ar as ApiContext, at as ValidatedPluginManifest, b as SearchStats, bn as RevisionListResponse, bt as SessionDatabaseInfo, c as extractSearchableFields, cn as Section, cr as FieldDescriptor, ct as CollectionFilter$1, d as search, dn as SchemaError, en as SandboxRunner, et as PluginRouteError, f as searchCollection, fn as SchemaRegistry, g as SearchConfig, gn as handleMediaDelete, gt as FileSessionDatabaseFactoryOptions, h as CollectionSearchOptions, hn as handleMediaCreate, ht as FileSessionDatabaseFactory, in as getSection, it as createHookPipeline, j as getAppliedSnapshotMeta, jn as handleContentDiscardDraft, jt as I18nConfig, k as applySnapshotToDatabase, kn as handleContentCreate, kt as signPreviewUrl, l as getSearchStats, ln as SectionSource, lr as ListResponse, lt as EntryData, m as FTSManager, mn as MediaResponse, mt as createFilePreviewMiddleware, n as PluginDescriptor, nn as SandboxedPlugin, nt as HookPipeline, on as CreateSectionInput, or as ContentListResponse, ot as pluginManifestSchema, p as searchWithDb, pn as MediaListResponse, pt as FilePreviewMiddlewareConfig, q as NodeSandboxRunner, qn as MediaRepository, qt as PortableTextUnknownBlock, rn as SerializedRequest, rt as HookResult, s as extractPlainText, sn as GetSectionsOptions, sr as ContentResponse, st as definePlugin, tn as SandboxRunnerFactory, u as getSuggestions, un as UpdateSectionInput, ur as ManifestResponse, ut as EntryFilter, v as SearchResponse, vn as handleMediaList, vt as SessionDatabaseFactory, w as getBylineBySlug, wn as handleRevisionRestore, wt as PreviewSidecarClient, x as SuggestOptions, xn as RevisionResponse, xt as SessionDatabaseLimitError, y as SearchResult, yn as handleMediaUpdate, yt as SessionDatabaseHandle, z as getPreviewUrl, zn as handleContentRestore, zt as portableTextToProsemirror } from "./runtime-BM9sqnzO.mjs";
 import { n as MediaTable, r as UserTable, t as Database } from "./types-B1NksXAb.mjs";
 import { $ as StandardHookEntry, A as PageMetadataContribution, B as PluginDefinition, C as MediaAccess, D as PageFragmentContribution, E as ModerationDecision, F as PluginAdminConfig, G as PortableTextBlockConfig, H as PluginManifest, I as PluginAdminExports, K as PortableTextBlockField, L as PluginAdminPage, M as PageMetadataHandler, O as PageFragmentEvent, P as PagePlacement, Q as RouteContext, R as PluginCapability, S as LogAccess, T as MediaUploadEvent, U as PluginRoute, V as PluginHooks, W as PluginStorageConfig, X as ResolvedPlugin, Y as ResolvedHook, Z as ResolvedPluginHooks, _ as FieldWidgetConfig, a as CommentAfterModerateEvent, b as HttpAccess, c as CommentBeforeCreateHandler, d as ContentAccess, et as StandardHookHandler, f as ContentDeleteEvent, i as CommentAfterCreateHandler, it as StorageCollection, j as PageMetadataEvent, k as PageFragmentHandler, l as CommentModerateEvent, m as ContentPublishStateChangeEvent, n as CollectionCommentSettings, nt as StandardRouteEntry, o as CommentAfterModerateHandler, ot as StoredComment, p as ContentHookEvent, q as PublicPageContext, r as CommentAfterCreateEvent, rt as StandardRouteHandler, s as CommentBeforeCreateEvent, st as isStandardPluginDefinition, t as BreadcrumbItem, tt as StandardPluginDefinition, u as CommentModerateHandler, v as HookConfig, x as KVAccess, y as HookName, z as PluginContext } from "./types-BIM7jwxr.mjs";
 import { _ as RESERVED_COLLECTION_SLUGS, a as Collection, b as UpdateFieldInput, c as CollectionWithFields, d as CreateFieldInput, f as FIELD_TYPE_TO_COLUMN, g as FieldWidgetOptions, h as FieldValidation, i as SiteSettings, l as ColumnType, m as FieldType, n as SeoSettings, o as CollectionSource, p as Field, r as SiteSettingKey, s as CollectionSupport, t as MediaReference, u as CreateCollectionInput, v as RESERVED_FIELD_SLUGS, y as UpdateCollectionInput } from "./types-t7_nCCA9.mjs";
@@ -11,7 +11,7 @@ import { $ as TranslationSummary, A as MenuItem, B as getPluginSettings, C as Ta
 import { _ as WxrSite, a as getAllSources, b as parseWxrString, c as getUrlSources, d as importReusableBlocksAsSections, f as WxrAttachment, g as WxrPost, h as WxrData, i as clearSources, l as probeUrl, m as WxrCategory, n as parseWxrDate, o as getFileSources, p as WxrAuthor, r as wxrSource, s as getSource, t as wordpressRestSource, u as registerSource, v as WxrTag, x as decodeSlug, y as parseWxr } from "./index-CpbixmRL.mjs";
 import { n as generatePlaceholder, r as normalizeMediaValue, t as PlaceholderData } from "./placeholder-BZpCpid_.mjs";
 import { a as ListOptions, c as S3StorageConfig, d as Storage, f as StorageDescriptor, i as FileInfo, l as SignedUploadOptions, n as DinewayStorageError, o as ListResult, p as UploadResult, r as DownloadResult, s as LocalStorageConfig, t as CreateStorageFn, u as SignedUploadUrl } from "./types-BYjPylrZ.mjs";
-import "./bylines-Cb7nzI9t.mjs";
+import "./bylines-Cf_VHc-Y.mjs";
 import { DinewayRequestContext, getRequestContext, runWithContext } from "./request-context.mjs";
 import { adaptSandboxEntry } from "./plugins/adapt-sandbox-entry.mjs";
 import { S as UrlInput, _ as SourceAuth, a as FileInput, b as SourceProbeResult, c as ImportContext, d as ImportSource, f as NormalizedItem, g as ProbeResult, h as PostTypeMapping, i as FieldCompatibility, l as ImportFieldDef, m as PostTypeAnalysis, n as CollectionSchemaStatus, o as ImportAnalysis, p as OAuthInput, r as FetchOptions, s as ImportConfig, t as AttachmentInfo, u as ImportResult, v as SourceCapabilities, x as SuggestedAction, y as SourceInput } from "./types-BBETcziA.mjs";

package/dist/index.mjs

@@ -24,7 +24,7 @@ import "./byline-DpNNSjET.mjs";
 import { t as normalizeMediaValue } from "./normalize-BY_EJnd9.mjs";
 import { t as generatePlaceholder } from "./placeholder-b0Ufu0La.mjs";
 import "./seo-BPb_reaG.mjs";
-import { A as handleRevisionGet, B as handleContentDuplicate, D as handleMediaGet, E as handleMediaDelete, F as handleContentCountScheduled, G as handleContentPermanentDelete, H as handleContentGetIncludingTrashed, I as handleContentCountTrashed, J as handleContentSchedule, K as handleContentPublish, L as handleContentCreate, M as handleRevisionRestore, N as generateManifest, O as handleMediaList, P as handleContentCompare, Q as handleContentUpdate, R as handleContentDelete, T as handleMediaCreate, U as handleContentList, V as handleContentGet, W as handleContentListTrashed, X as handleContentUnpublish, Y as handleContentTranslations, Z as handleContentUnschedule, j as handleRevisionList, k as handleMediaUpdate, q as handleContentRestore, z as handleContentDiscardDraft } from "./api-DHgai7zP.mjs";
+import { A as handleRevisionGet, B as handleContentDuplicate, D as handleMediaGet, E as handleMediaDelete, F as handleContentCountScheduled, G as handleContentPermanentDelete, H as handleContentGetIncludingTrashed, I as handleContentCountTrashed, J as handleContentSchedule, K as handleContentPublish, L as handleContentCreate, M as handleRevisionRestore, N as generateManifest, O as handleMediaList, P as handleContentCompare, Q as handleContentUpdate, R as handleContentDelete, T as handleMediaCreate, U as handleContentList, V as handleContentGet, W as handleContentListTrashed, X as handleContentUnpublish, Y as handleContentTranslations, Z as handleContentUnschedule, j as handleRevisionList, k as handleMediaUpdate, q as handleContentRestore, z as handleContentDiscardDraft } from "./api-B1tPdBKN.mjs";
 import "./request-cache-BpwuE2ix.mjs";
 import "./dashboard-BC9bgPOH.mjs";
 import "./briefing-Jsxs587i.mjs";