dineway 0.1.27 → 0.1.29

package/dist/cli/index.mjs

@@ -22,9 +22,9 @@ import { i as pluginManifestSchema } from "../manifest-schema-C6fzQoWn.mjs";
 import "../ssrf-KAIQS48_.mjs";
 import { t as validateSeed } from "../validate-JE-WfUQ5.mjs";
 import { t as applySeed } from "../apply-TIoQ00aH.mjs";
-import { n as fingerprintKey, r as generateEncryptionKey, t as DinewaySecretsError } from "../secrets-DfeNNoLa.mjs";
-import { o as convertDataForRead } from "../transport-B7kO-4ee.mjs";
+import { n as fingerprintKey, r as generateEncryptionKey, t as DinewaySecretsError } from "../secrets-DOkSNlfQ.mjs";
 import { createHeaderAwareFetch, customHeadersInterceptor, isRedirectResponse, resolveCustomHeaders } from "../client/external-auth-headers.mjs";
+import { o as convertDataForRead } from "../transport-B7kO-4ee.mjs";
 import { DinewayClient } from "../client/index.mjs";
 import { LocalStorage } from "../storage/local.mjs";
 import { imageSize } from "image-size";
@@ -35,50 +35,13 @@ import { basename, dirname, extname, isAbsolute, join, relative, resolve } from
 import { defineCommand, runCommand, runMain } from "citty";
 import consola, { consola as consola$1 } from "consola";
 import pc from "picocolors";
-import { access, chmod, copyFile, mkdir, readFile, readdir, rm, stat, symlink, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
+import { access, chmod, copyFile, mkdir, readFile, readdir, rm, stat, symlink, writeFile } from "node:fs/promises";
 import { createInterface } from "node:readline/promises";
 import { spawn } from "node:child_process";
 import { pipeline } from "node:stream/promises";
 import { packTar } from "modern-tar/fs";
 
-//#region src/cli/commands/auth.ts
-/**
-* Auth CLI commands
-*/
-/**
-* Generate a cryptographically secure auth secret
-*/
-function generateAuthSecret() {
-	const bytes = new Uint8Array(32);
-	crypto.getRandomValues(bytes);
-	return encodeBase64url(bytes);
-}
-const secretCommand = defineCommand({
-	meta: {
-		name: "secret",
-		description: "Generate a secure auth secret"
-	},
-	run() {
-		const secret = generateAuthSecret();
-		consola$1.log("");
-		consola$1.log(pc.bold("Generated auth secret:"));
-		consola$1.log("");
-		consola$1.log(`  ${pc.cyan("DINEWAY_AUTH_SECRET")}=${pc.green(secret)}`);
-		consola$1.log("");
-		consola$1.log(pc.dim("Add this to your environment variables."));
-		consola$1.log("");
-	}
-});
-const authCommand = defineCommand({
-	meta: {
-		name: "auth",
-		description: "Authentication utilities"
-	},
-	subCommands: { secret: secretCommand }
-});
-
-//#endregion
 //#region src/cli/credentials.ts
 /**
 * Credential storage for CLI auth tokens.
@@ -223,6 +186,79 @@ function removeMarketplaceCredential(registryUrl) {
 	return false;
 }
 
+//#endregion
+//#region src/cli/project-env.ts
+const DEFAULT_DINEWAY_URL = "http://localhost:4321";
+const ENV_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const LINE_SPLIT_PATTERN = /\r?\n/;
+const NEWLINE_PATTERN = /\r?\n/g;
+function parseDotenvValue(value) {
+	const trimmed = value.trim();
+	if (trimmed.startsWith("\"") && trimmed.endsWith("\"") || trimmed.startsWith("'") && trimmed.endsWith("'")) return trimmed.slice(1, -1);
+	return trimmed;
+}
+function parseDotenv(text) {
+	const env = {};
+	for (const line of text.split(LINE_SPLIT_PATTERN)) {
+		const trimmed = line.trim();
+		if (!trimmed || trimmed.startsWith("#")) continue;
+		const normalized = trimmed.startsWith("export ") ? trimmed.slice(7).trim() : trimmed;
+		const equalsIndex = normalized.indexOf("=");
+		if (equalsIndex <= 0) continue;
+		const key = normalized.slice(0, equalsIndex).trim();
+		if (!ENV_KEY_PATTERN.test(key)) continue;
+		env[key] = parseDotenvValue(normalized.slice(equalsIndex + 1));
+	}
+	return env;
+}
+function readProjectEnv(cwd = process.cwd()) {
+	const envPath = join(cwd, ".env");
+	if (!existsSync(envPath)) return {};
+	return parseDotenv(readFileSync(envPath, "utf-8"));
+}
+function getProjectEnvValue(name, cwd = process.cwd()) {
+	return process.env[name] ?? readProjectEnv(cwd)[name];
+}
+function resolveDinewayBaseUrl(url, cwd = process.cwd()) {
+	if (url && url !== DEFAULT_DINEWAY_URL) return url;
+	const projectEnv = readProjectEnv(cwd);
+	return process.env["DINEWAY_URL"] ?? process.env["DINEWAY_SITE_URL"] ?? projectEnv["DINEWAY_SITE_URL"] ?? projectEnv["DINEWAY_URL"] ?? url ?? DEFAULT_DINEWAY_URL;
+}
+function resolveDinewayToken(token, cwd = process.cwd()) {
+	return token ?? getProjectEnvValue("DINEWAY_TOKEN", cwd);
+}
+function formatEnvValue(value) {
+	return value.replace(NEWLINE_PATTERN, "");
+}
+async function upsertProjectEnv(cwd, values) {
+	const envPath = join(cwd, ".env");
+	const existing = await readFile(envPath, "utf-8").catch(() => "");
+	const lines = existing ? existing.split(LINE_SPLIT_PATTERN) : [];
+	const seen = /* @__PURE__ */ new Set();
+	const nextLines = lines.map((line) => {
+		const trimmed = line.trim();
+		const normalized = trimmed.startsWith("export ") ? trimmed.slice(7).trim() : trimmed;
+		const equalsIndex = normalized.indexOf("=");
+		if (equalsIndex <= 0) return line;
+		const key = normalized.slice(0, equalsIndex).trim();
+		const value = values[key];
+		if (!(key in values) || value === void 0) return line;
+		seen.add(key);
+		return `${key}=${formatEnvValue(value)}`;
+	});
+	for (const [key, value] of Object.entries(values)) {
+		if (value === void 0 || seen.has(key)) continue;
+		nextLines.push(`${key}=${formatEnvValue(value)}`);
+	}
+	await writeFile(envPath, `${nextLines.filter((line, index) => line || index < nextLines.length - 1).join("\n")}\n`, "utf-8");
+}
+async function ensureProjectGitignoreEntry(cwd, entry) {
+	const gitignorePath = join(cwd, ".gitignore");
+	const existing = await readFile(gitignorePath, "utf-8").catch(() => "");
+	if (existing.split(LINE_SPLIT_PATTERN).map((line) => line.trim()).includes(entry)) return;
+	await writeFile(gitignorePath, `${existing}${existing && !existing.endsWith("\n") ? "\n" : ""}${entry}\n`, "utf-8");
+}
+
 //#endregion
 //#region src/cli/client-factory.ts
 var client_factory_exports = /* @__PURE__ */ __exportAll({
@@ -238,7 +274,7 @@ const connectionArgs = {
 		type: "string",
 		alias: "u",
 		description: "Dineway instance URL",
-		default: "http://localhost:4321"
+		default: DEFAULT_DINEWAY_URL
 	},
 	token: {
 		type: "string",
@@ -270,8 +306,8 @@ const connectionArgs = {
 * 3. --header CLI flags
 */
 function createClientFromArgs(args) {
-	const baseUrl = args.url || process.env["DINEWAY_URL"] || "http://localhost:4321";
-	let token = args.token || process.env["DINEWAY_TOKEN"];
+	const baseUrl = resolveDinewayBaseUrl(args.url);
+	let token = resolveDinewayToken(args.token);
 	const isLocal = baseUrl.includes("localhost") || baseUrl.includes("127.0.0.1");
 	const cred = !token ? getCredentials(baseUrl) : null;
 	const customHeaders = {
@@ -367,6 +403,69 @@ function prettyPrint(data, indent = 0) {
 	consola$1.log(typeof data === "string" ? data : JSON.stringify(data));
 }
 
+//#endregion
+//#region src/cli/commands/auth.ts
+/**
+* Auth CLI commands
+*/
+/**
+* Generate a cryptographically secure auth secret
+*/
+function generateAuthSecret() {
+	const bytes = new Uint8Array(32);
+	crypto.getRandomValues(bytes);
+	return encodeBase64url(bytes);
+}
+const secretCommand = defineCommand({
+	meta: {
+		name: "secret",
+		description: "Generate a secure auth secret"
+	},
+	run() {
+		const secret = generateAuthSecret();
+		consola$1.log("");
+		consola$1.log(pc.bold("Generated auth secret:"));
+		consola$1.log("");
+		consola$1.log(`  ${pc.cyan("DINEWAY_AUTH_SECRET")}=${pc.green(secret)}`);
+		consola$1.log("");
+		consola$1.log(pc.dim("Add this to your environment variables."));
+		consola$1.log("");
+	}
+});
+const setupLinkCommand = defineCommand({
+	meta: {
+		name: "setup-link",
+		description: "Create a one-time admin setup link"
+	},
+	args: connectionArgs,
+	async run({ args }) {
+		configureOutputMode(args);
+		try {
+			const result = await createClientFromArgs(args).createSetupLink();
+			if (args.json || !process.stdout.isTTY) {
+				output(result, args);
+				return;
+			}
+			consola$1.success("Created one-time setup link");
+			consola$1.info(`Expires: ${result.expiresAt}`);
+			consola$1.log(result.setupUrl);
+		} catch (error) {
+			consola$1.error(error instanceof Error ? error.message : "Failed to create setup link");
+			process.exit(2);
+		}
+	}
+});
+const authCommand = defineCommand({
+	meta: {
+		name: "auth",
+		description: "Authentication utilities"
+	},
+	subCommands: {
+		secret: secretCommand,
+		"setup-link": setupLinkCommand
+	}
+});
+
 //#endregion
 //#region src/cli/commands/content.ts
 /**
@@ -1745,8 +1844,8 @@ function getSavedForgewayMetadata(pkg) {
 async function resolveForgewayAccountEmail(options, grant, cwd, deps) {
 	const stored = await (deps.readCredentials ?? readForgewayCredentials)(cwd);
 	const storedEmail = stored?.source === "shadow-email-upgrade" && stored.placeId === grant.placeId && stored.user?.emailVerified === true && !isShadowEmail(stored.user?.email) ? stored.user?.email : void 0;
-	const email = normalizeEmail(options.email ?? getEnv("FORGEWAY_EMAIL") ?? storedEmail ?? await promptRequired("Forgeway account email: ", void 0, deps, "Forgeway account email is required. Pass --email or set FORGEWAY_EMAIL."));
-	if (!email || isShadowEmail(email)) throw new Error("Forgeway account email must be a real owner email, not a shadow user email.");
+	const email = normalizeEmail(options.email ?? getEnv("DINEWAY_EMAIL") ?? getEnv("FORGEWAY_EMAIL") ?? storedEmail ?? await promptRequired("Dineway account email: ", void 0, deps, "Dineway account email is required. Pass --email or set DINEWAY_EMAIL."));
+	if (!email || isShadowEmail(email)) throw new Error("Dineway account email must be a real owner email, not a shadow user email.");
 	return email;
 }
 function isStoredFormalCredentialForGrant(stored, grant, email) {
@@ -2306,15 +2405,21 @@ async function deploySiteProject(options) {
 		dinewayAdminBootstrap: createResult.dinewayAdminBootstrap
 	};
 }
-function formatDinewayAdminBootstrapMessage(bootstrap, siteUrl) {
+async function persistForgewayCliEnv(cwd, params) {
+	await upsertProjectEnv(cwd, {
+		DINEWAY_SITE_URL: params.siteUrl,
+		DINEWAY_TOKEN: params.token
+	});
+	await ensureProjectGitignoreEntry(cwd, ".env");
+}
+function formatDinewayAdminBootstrapMessage(bootstrap) {
 	if (!bootstrap) return "";
 	if (bootstrap.status === "already_issued") return `Dineway admin bootstrap: ${bootstrap.message}`;
 	return [
-		"Dineway admin bootstrap credentials were issued. Forgeway will not print these again.",
-		`Admin email: ${bootstrap.adminEmail}`,
+		"Dineway admin access is ready. Local CLI defaults were saved to .env.",
+		`Dineway admin email: ${bootstrap.adminEmail}`,
 		`Setup link (expires ${bootstrap.setupTokenExpiresAt}): ${bootstrap.setupUrl}`,
-		`Admin API token: ${bootstrap.apiToken}`,
-		`CLI example: DINEWAY_TOKEN=${bootstrap.apiToken} dineway whoami --url ${siteUrl}`
+		"CLI example: npx dineway whoami"
 	].join("\n");
 }
 async function deployForgeway(cwd, options, deps = {}) {
@@ -2353,7 +2458,11 @@ async function deployForgeway(cwd, options, deps = {}) {
 		deps
 	});
 	const url = deployment.liveUrl ?? `https://${site.domain}`;
-	const bootstrapMessage = formatDinewayAdminBootstrapMessage(deployment.dinewayAdminBootstrap, url);
+	await (deps.writeProjectEnv ?? persistForgewayCliEnv)(cwd, {
+		siteUrl: url,
+		token: deployment.dinewayAdminBootstrap?.status === "issued" ? deployment.dinewayAdminBootstrap.apiToken : void 0
+	});
+	const bootstrapMessage = formatDinewayAdminBootstrapMessage(deployment.dinewayAdminBootstrap);
 	const statusMessage = deployment.isReady ? `Deploy complete: ${url}` : `Deploy started for ${site.domain}. Check Forgeway for build status.`;
 	return {
 		url,
@@ -2891,7 +3000,7 @@ const deployCommand = defineCommand({
 		},
 		email: {
 			type: "string",
-			description: "Forgeway account email for shadow-user upgrade",
+			description: "Dineway account email for deploy authorization",
 			required: false
 		},
 		"restaurant-name": {
@@ -3901,7 +4010,7 @@ const loginCommand = defineCommand({
 			type: "string",
 			alias: "u",
 			description: "Dineway instance URL",
-			default: "http://localhost:4321"
+			default: DEFAULT_DINEWAY_URL
 		},
 		header: {
 			type: "string",
@@ -3910,7 +4019,7 @@ const loginCommand = defineCommand({
 		}
 	},
 	async run({ args }) {
-		const baseUrl = args.url || "http://localhost:4321";
+		const baseUrl = resolveDinewayBaseUrl(args.url);
 		consola$1.start(`Connecting to ${baseUrl}...`);
 		const customHeaders = resolveCustomHeaders();
 		let headerFetch = createHeaderAwareFetch(customHeaders);
@@ -4022,10 +4131,10 @@ const logoutCommand = defineCommand({
 		type: "string",
 		alias: "u",
 		description: "Dineway instance URL",
-		default: "http://localhost:4321"
+		default: DEFAULT_DINEWAY_URL
 	} },
 	async run({ args }) {
-		const baseUrl = args.url || "http://localhost:4321";
+		const baseUrl = resolveDinewayBaseUrl(args.url);
 		const cred = getCredentials(baseUrl);
 		if (!cred) {
 			consola$1.info("No stored credentials found for this instance.");
@@ -4053,7 +4162,7 @@ const whoamiCommand = defineCommand({
 			type: "string",
 			alias: "u",
 			description: "Dineway instance URL",
-			default: "http://localhost:4321"
+			default: DEFAULT_DINEWAY_URL
 		},
 		token: {
 			type: "string",
@@ -4067,8 +4176,8 @@ const whoamiCommand = defineCommand({
 	},
 	async run({ args }) {
 		configureOutputMode(args);
-		const baseUrl = args.url || "http://localhost:4321";
-		let token = args.token || process.env["DINEWAY_TOKEN"];
+		const baseUrl = resolveDinewayBaseUrl(args.url);
+		let token = resolveDinewayToken(args.token);
 		let authMethod = token ? "token" : "none";
 		let storedHeaders = {};
 		if (!token) {

package/dist/client/index.d.mts

@@ -182,6 +182,10 @@ interface MenuItem {
   parentId?: string | null;
   sortOrder: number;
 }
+interface SetupLinkResult {
+  setupUrl: string;
+  expiresAt: string;
+}
 /** Full schema export (returned by /api/schema) */
 interface SchemaExport {
   collections: Array<{
@@ -392,6 +396,8 @@ declare class DinewayClient {
   menus(): Promise<Menu[]>;
   /** Get a menu with its items */
   menu(name: string): Promise<MenuWithItems>;
+  /** Create a one-time browser setup link for the current admin user. */
+  createSetupLink(): Promise<SetupLinkResult>;
   /** Make a typed JSON request to the API */
   private request;
   /** Make a raw request — caller handles response */
@@ -402,4 +408,4 @@ declare class DinewayClient {
   private getFieldSchemas;
 }
 //#endregion
-export { ApiError, ClientResponse, Collection, CollectionWithFields, ContentItem, DinewayApiError, DinewayClient, DinewayClientError, DinewayClientOptions, Field, type Interceptor, ListResult, Manifest, MediaItem, Menu, MenuItem, MenuWithItems, type PortableTextBlock, PublishContentOptions, SchemaExport, SearchResult, Taxonomy, Term, createTransport, csrfInterceptor, devBypassInterceptor, markdownToPortableText, portableTextToMarkdown, tokenInterceptor };
+export { ApiError, ClientResponse, Collection, CollectionWithFields, ContentItem, DinewayApiError, DinewayClient, DinewayClientError, DinewayClientOptions, Field, type Interceptor, ListResult, Manifest, MediaItem, Menu, MenuItem, MenuWithItems, type PortableTextBlock, PublishContentOptions, SchemaExport, SearchResult, SetupLinkResult, Taxonomy, Term, createTransport, csrfInterceptor, devBypassInterceptor, markdownToPortableText, portableTextToMarkdown, tokenInterceptor };

package/dist/client/index.mjs

@@ -285,6 +285,10 @@ var DinewayClient = class {
 	async menu(name) {
 		return this.request("GET", `/menus/${encodeURIComponent(name)}`);
 	}
+	/** Create a one-time browser setup link for the current admin user. */
+	async createSetupLink() {
+		return this.request("POST", "/auth/setup-token");
+	}
 	/** Make a typed JSON request to the API */
 	async request(method, path, body) {
 		const response = await this.requestRaw(method, path, body);

package/dist/{context-DgqEfcWz.mjs → context-BnD2m5tn.mjs}

@@ -1,5 +1,5 @@
 import { a as ContextRepository, i as parseSiteBriefingScope, n as SiteBriefingError } from "./briefing-Jsxs587i.mjs";
-import { b as toPublicContextEntry, x as toPublicContextEntryPage, y as toPublicContextDiff } from "./site-context-DuBQk6Mp.mjs";
+import { b as toPublicContextEntry, x as toPublicContextEntryPage, y as toPublicContextDiff } from "./site-context-BBX9G7FT.mjs";
 
 //#region src/api/handlers/context.ts
 async function handleContextEntryList(db, input = {}) {

package/dist/{device-flow-CTS91g4A.mjs → device-flow-DDZjntgf.mjs}

@@ -1,7 +1,7 @@
 import { t as withTransaction } from "./transaction-D0FOsb3X.mjs";
-import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-BbZbIEZp.mjs";
+import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-_I9NlZbO.mjs";
 import { a as hashApiToken, n as TOKEN_PREFIXES, r as generatePrefixedToken, t as ALL_VALID_SCOPES } from "./api-tokens-L0o9Bd7v.mjs";
-import { o as lookupOAuthClient } from "./oauth-clients-BMs_bmoz.mjs";
+import { o as lookupOAuthClient } from "./oauth-clients-D1n0ykZJ.mjs";
 import { t as lookupUserRoleAndStatus } from "./oauth-user-lookup-DdcI8ZVL.mjs";
 import { clampScopes } from "@dineway-ai/auth";
 import { generateCodeVerifier } from "arctic";

package/dist/{hitl-requests-DaRuZ7tb.mjs → hitl-requests-Dt7JsXh5.mjs}

@@ -1,5 +1,5 @@
-import { t as ExperimentalSiteContextWorkflowDisabledError } from "./experimental-workflows-BbZbIEZp.mjs";
-import { n as HitlRequestService } from "./site-context-DuBQk6Mp.mjs";
+import { t as ExperimentalSiteContextWorkflowDisabledError } from "./experimental-workflows-_I9NlZbO.mjs";
+import { n as HitlRequestService } from "./site-context-BBX9G7FT.mjs";
 
 //#region src/api/handlers/hitl-requests.ts
 const HITL_NOT_FOUND_RE = /not found/i;

package/dist/{hitl-route-helpers-DcPySbZ3.mjs → hitl-route-helpers-F3voM_3Y.mjs}

@@ -1,6 +1,6 @@
 import { t as apiError } from "./error-DLkgOP5m.mjs";
-import { t as ExperimentalSiteContextWorkflowDisabledError } from "./experimental-workflows-BbZbIEZp.mjs";
-import { t as WorkflowHitlCoordinator } from "./site-context-DuBQk6Mp.mjs";
+import { t as ExperimentalSiteContextWorkflowDisabledError } from "./experimental-workflows-_I9NlZbO.mjs";
+import { t as WorkflowHitlCoordinator } from "./site-context-BBX9G7FT.mjs";
 import { T as resolveActorIdentity, p as logSiteActivitySafely } from "./activity-events-CpcTzKpF.mjs";
 import { Role } from "@dineway-ai/auth";
 

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { a as ContentSeoInput, c as FindManyOptions, i as ContentSeo, l as FindManyResult, n as ContentBylineCredit, o as CreateContentInput, r as ContentItem, s as DinewayValidationError, t as BylineSummary, u as UpdateContentInput } from "./types-DvwHUku7.mjs";
-import { $ as createPluginManager, $t as SandboxOptions, A as dropSessionDatabaseTables, An as handleContentDelete, At as verifyPreviewSignature, B as GeneratePreviewTokenOptions, Bn as handleContentSchedule, Bt as prosemirrorToPortableText, C as getByline, Cn as handleRevisionList, Ct as SessionOpenOrCreateOptions, D as AppliedSnapshotMeta, Dn as handleContentCountScheduled, Dt as defaultPreviewSidecarClient, E as renderPreviewToolbar, En as handleContentCompare, Et as buildPreviewSignatureHeader, F as getPreviewToken, Fn as handleContentList, Ft as AfterCallback, G as parseContentId, Gn as CreateMediaInput, Gt as PortableTextSpan, H as VerifyPreviewTokenOptions, Hn as handleContentUnpublish, Ht as PortableTextImageBlock, I as isPreviewRequest, In as handleContentListTrashed, It as after, J as createNodeSandboxRunner, Jn as ContentRepository, Jt as ProseMirrorDocument, K as verifyPreviewToken, Kn as MediaItem, Kt as PortableTextTextBlock, L as GetPreviewUrlOptions, Ln as handleContentPermanentDelete, Lt as computeContentHash, M as Snapshot, Mn as handleContentDuplicate, Mt as getFallbackChain, N as renderPreviewLoadingPage, Nn as handleContentGet, Nt as getI18nConfig, O as ApplySnapshotToDatabaseOptions, On as handleContentCountTrashed, Ot as parsePreviewSignatureHeader, P as isBlockedInPreview, Pn as handleContentGetIncludingTrashed, Pt as isI18nEnabled, Q as PluginManager, Qt as SandboxEmailSendCallback, R as buildPreviewUrl, Rn as handleContentPublish, Rt as hashString, S as Suggestion, Sn as handleRevisionGet, St as SessionOpenOptions, T as PreviewToolbarConfig, Tn as generateManifest, Tt as PreviewSidecarSignature, U as VerifyPreviewTokenResult, Un as handleContentUnschedule, Ut as PortableTextLinkMark, V as PreviewTokenPayload, Vn as handleContentTranslations, Vt as PortableTextCodeBlock, W as generatePreviewToken, Wn as handleContentUpdate, Wt as PortableTextMarkDef, X as SandboxNotAvailableError, Xn as DinewayDatabaseError, Xt as ProseMirrorNode, Y as NoopSandboxRunner, Yn as DatabaseConfig, Yt as ProseMirrorMark, Z as createNoopSandboxRunner, Zt as SandboxEmailMessage, _ as SearchOptions, _n as handleMediaGet, _t as SessionCleanupResult, an as getSections, ar as ApiContext, at as ValidatedPluginManifest, b as SearchStats, bn as RevisionListResponse, bt as SessionDatabaseInfo, c as extractSearchableFields, cn as Section, cr as FieldDescriptor, ct as CollectionFilter$1, d as search, dn as SchemaError, en as SandboxRunner, et as PluginRouteError, f as searchCollection, fn as SchemaRegistry, g as SearchConfig, gn as handleMediaDelete, gt as FileSessionDatabaseFactoryOptions, h as CollectionSearchOptions, hn as handleMediaCreate, ht as FileSessionDatabaseFactory, in as getSection, it as createHookPipeline, j as getAppliedSnapshotMeta, jn as handleContentDiscardDraft, jt as I18nConfig, k as applySnapshotToDatabase, kn as handleContentCreate, kt as signPreviewUrl, l as getSearchStats, ln as SectionSource, lr as ListResponse, lt as EntryData, m as FTSManager, mn as MediaResponse, mt as createFilePreviewMiddleware, n as PluginDescriptor, nn as SandboxedPlugin, nt as HookPipeline, on as CreateSectionInput, or as ContentListResponse, ot as pluginManifestSchema, p as searchWithDb, pn as MediaListResponse, pt as FilePreviewMiddlewareConfig, q as NodeSandboxRunner, qn as MediaRepository, qt as PortableTextUnknownBlock, rn as SerializedRequest, rt as HookResult, s as extractPlainText, sn as GetSectionsOptions, sr as ContentResponse, st as definePlugin, tn as SandboxRunnerFactory, u as getSuggestions, un as UpdateSectionInput, ur as ManifestResponse, ut as EntryFilter, v as SearchResponse, vn as handleMediaList, vt as SessionDatabaseFactory, w as getBylineBySlug, wn as handleRevisionRestore, wt as PreviewSidecarClient, x as SuggestOptions, xn as RevisionResponse, xt as SessionDatabaseLimitError, y as SearchResult, yn as handleMediaUpdate, yt as SessionDatabaseHandle, z as getPreviewUrl, zn as handleContentRestore, zt as portableTextToProsemirror } from "./runtime-Cg87dCSm.mjs";
+import { $ as createPluginManager, $t as SandboxOptions, A as dropSessionDatabaseTables, An as handleContentDelete, At as verifyPreviewSignature, B as GeneratePreviewTokenOptions, Bn as handleContentSchedule, Bt as prosemirrorToPortableText, C as getByline, Cn as handleRevisionList, Ct as SessionOpenOrCreateOptions, D as AppliedSnapshotMeta, Dn as handleContentCountScheduled, Dt as defaultPreviewSidecarClient, E as renderPreviewToolbar, En as handleContentCompare, Et as buildPreviewSignatureHeader, F as getPreviewToken, Fn as handleContentList, Ft as AfterCallback, G as parseContentId, Gn as CreateMediaInput, Gt as PortableTextSpan, H as VerifyPreviewTokenOptions, Hn as handleContentUnpublish, Ht as PortableTextImageBlock, I as isPreviewRequest, In as handleContentListTrashed, It as after, J as createNodeSandboxRunner, Jn as ContentRepository, Jt as ProseMirrorDocument, K as verifyPreviewToken, Kn as MediaItem, Kt as PortableTextTextBlock, L as GetPreviewUrlOptions, Ln as handleContentPermanentDelete, Lt as computeContentHash, M as Snapshot, Mn as handleContentDuplicate, Mt as getFallbackChain, N as renderPreviewLoadingPage, Nn as handleContentGet, Nt as getI18nConfig, O as ApplySnapshotToDatabaseOptions, On as handleContentCountTrashed, Ot as parsePreviewSignatureHeader, P as isBlockedInPreview, Pn as handleContentGetIncludingTrashed, Pt as isI18nEnabled, Q as PluginManager, Qt as SandboxEmailSendCallback, R as buildPreviewUrl, Rn as handleContentPublish, Rt as hashString, S as Suggestion, Sn as handleRevisionGet, St as SessionOpenOptions, T as PreviewToolbarConfig, Tn as generateManifest, Tt as PreviewSidecarSignature, U as VerifyPreviewTokenResult, Un as handleContentUnschedule, Ut as PortableTextLinkMark, V as PreviewTokenPayload, Vn as handleContentTranslations, Vt as PortableTextCodeBlock, W as generatePreviewToken, Wn as handleContentUpdate, Wt as PortableTextMarkDef, X as SandboxNotAvailableError, Xn as DinewayDatabaseError, Xt as ProseMirrorNode, Y as NoopSandboxRunner, Yn as DatabaseConfig, Yt as ProseMirrorMark, Z as createNoopSandboxRunner, Zt as SandboxEmailMessage, _ as SearchOptions, _n as handleMediaGet, _t as SessionCleanupResult, an as getSections, ar as ApiContext, at as ValidatedPluginManifest, b as SearchStats, bn as RevisionListResponse, bt as SessionDatabaseInfo, c as extractSearchableFields, cn as Section, cr as FieldDescriptor, ct as CollectionFilter$1, d as search, dn as SchemaError, en as SandboxRunner, et as PluginRouteError, f as searchCollection, fn as SchemaRegistry, g as SearchConfig, gn as handleMediaDelete, gt as FileSessionDatabaseFactoryOptions, h as CollectionSearchOptions, hn as handleMediaCreate, ht as FileSessionDatabaseFactory, in as getSection, it as createHookPipeline, j as getAppliedSnapshotMeta, jn as handleContentDiscardDraft, jt as I18nConfig, k as applySnapshotToDatabase, kn as handleContentCreate, kt as signPreviewUrl, l as getSearchStats, ln as SectionSource, lr as ListResponse, lt as EntryData, m as FTSManager, mn as MediaResponse, mt as createFilePreviewMiddleware, n as PluginDescriptor, nn as SandboxedPlugin, nt as HookPipeline, on as CreateSectionInput, or as ContentListResponse, ot as pluginManifestSchema, p as searchWithDb, pn as MediaListResponse, pt as FilePreviewMiddlewareConfig, q as NodeSandboxRunner, qn as MediaRepository, qt as PortableTextUnknownBlock, rn as SerializedRequest, rt as HookResult, s as extractPlainText, sn as GetSectionsOptions, sr as ContentResponse, st as definePlugin, tn as SandboxRunnerFactory, u as getSuggestions, un as UpdateSectionInput, ur as ManifestResponse, ut as EntryFilter, v as SearchResponse, vn as handleMediaList, vt as SessionDatabaseFactory, w as getBylineBySlug, wn as handleRevisionRestore, wt as PreviewSidecarClient, x as SuggestOptions, xn as RevisionResponse, xt as SessionDatabaseLimitError, y as SearchResult, yn as handleMediaUpdate, yt as SessionDatabaseHandle, z as getPreviewUrl, zn as handleContentRestore, zt as portableTextToProsemirror } from "./runtime-BM9sqnzO.mjs";
 import { n as MediaTable, r as UserTable, t as Database } from "./types-B1NksXAb.mjs";
 import { $ as StandardHookEntry, A as PageMetadataContribution, B as PluginDefinition, C as MediaAccess, D as PageFragmentContribution, E as ModerationDecision, F as PluginAdminConfig, G as PortableTextBlockConfig, H as PluginManifest, I as PluginAdminExports, K as PortableTextBlockField, L as PluginAdminPage, M as PageMetadataHandler, O as PageFragmentEvent, P as PagePlacement, Q as RouteContext, R as PluginCapability, S as LogAccess, T as MediaUploadEvent, U as PluginRoute, V as PluginHooks, W as PluginStorageConfig, X as ResolvedPlugin, Y as ResolvedHook, Z as ResolvedPluginHooks, _ as FieldWidgetConfig, a as CommentAfterModerateEvent, b as HttpAccess, c as CommentBeforeCreateHandler, d as ContentAccess, et as StandardHookHandler, f as ContentDeleteEvent, i as CommentAfterCreateHandler, it as StorageCollection, j as PageMetadataEvent, k as PageFragmentHandler, l as CommentModerateEvent, m as ContentPublishStateChangeEvent, n as CollectionCommentSettings, nt as StandardRouteEntry, o as CommentAfterModerateHandler, ot as StoredComment, p as ContentHookEvent, q as PublicPageContext, r as CommentAfterCreateEvent, rt as StandardRouteHandler, s as CommentBeforeCreateEvent, st as isStandardPluginDefinition, t as BreadcrumbItem, tt as StandardPluginDefinition, u as CommentModerateHandler, v as HookConfig, x as KVAccess, y as HookName, z as PluginContext } from "./types-BIM7jwxr.mjs";
 import { _ as RESERVED_COLLECTION_SLUGS, a as Collection, b as UpdateFieldInput, c as CollectionWithFields, d as CreateFieldInput, f as FIELD_TYPE_TO_COLUMN, g as FieldWidgetOptions, h as FieldValidation, i as SiteSettings, l as ColumnType, m as FieldType, n as SeoSettings, o as CollectionSource, p as Field, r as SiteSettingKey, s as CollectionSupport, t as MediaReference, u as CreateCollectionInput, v as RESERVED_FIELD_SLUGS, y as UpdateCollectionInput } from "./types-t7_nCCA9.mjs";
@@ -11,7 +11,7 @@ import { $ as TranslationSummary, A as MenuItem, B as getPluginSettings, C as Ta
 import { _ as WxrSite, a as getAllSources, b as parseWxrString, c as getUrlSources, d as importReusableBlocksAsSections, f as WxrAttachment, g as WxrPost, h as WxrData, i as clearSources, l as probeUrl, m as WxrCategory, n as parseWxrDate, o as getFileSources, p as WxrAuthor, r as wxrSource, s as getSource, t as wordpressRestSource, u as registerSource, v as WxrTag, x as decodeSlug, y as parseWxr } from "./index-CpbixmRL.mjs";
 import { n as generatePlaceholder, r as normalizeMediaValue, t as PlaceholderData } from "./placeholder-BZpCpid_.mjs";
 import { a as ListOptions, c as S3StorageConfig, d as Storage, f as StorageDescriptor, i as FileInfo, l as SignedUploadOptions, n as DinewayStorageError, o as ListResult, p as UploadResult, r as DownloadResult, s as LocalStorageConfig, t as CreateStorageFn, u as SignedUploadUrl } from "./types-BYjPylrZ.mjs";
-import "./bylines-Cb7nzI9t.mjs";
+import "./bylines-CqLv_DIj.mjs";
 import { DinewayRequestContext, getRequestContext, runWithContext } from "./request-context.mjs";
 import { adaptSandboxEntry } from "./plugins/adapt-sandbox-entry.mjs";
 import { S as UrlInput, _ as SourceAuth, a as FileInput, b as SourceProbeResult, c as ImportContext, d as ImportSource, f as NormalizedItem, g as ProbeResult, h as PostTypeMapping, i as FieldCompatibility, l as ImportFieldDef, m as PostTypeAnalysis, n as CollectionSchemaStatus, o as ImportAnalysis, p as OAuthInput, r as FetchOptions, s as ImportConfig, t as AttachmentInfo, u as ImportResult, v as SourceCapabilities, x as SuggestedAction, y as SourceInput } from "./types-BBETcziA.mjs";

package/dist/index.mjs

@@ -24,7 +24,7 @@ import "./byline-DpNNSjET.mjs";
 import { t as normalizeMediaValue } from "./normalize-BY_EJnd9.mjs";
 import { t as generatePlaceholder } from "./placeholder-b0Ufu0La.mjs";
 import "./seo-BPb_reaG.mjs";
-import { A as handleRevisionGet, B as handleContentDuplicate, D as handleMediaGet, E as handleMediaDelete, F as handleContentCountScheduled, G as handleContentPermanentDelete, H as handleContentGetIncludingTrashed, I as handleContentCountTrashed, J as handleContentSchedule, K as handleContentPublish, L as handleContentCreate, M as handleRevisionRestore, N as generateManifest, O as handleMediaList, P as handleContentCompare, Q as handleContentUpdate, R as handleContentDelete, T as handleMediaCreate, U as handleContentList, V as handleContentGet, W as handleContentListTrashed, X as handleContentUnpublish, Y as handleContentTranslations, Z as handleContentUnschedule, j as handleRevisionList, k as handleMediaUpdate, q as handleContentRestore, z as handleContentDiscardDraft } from "./api-DHgai7zP.mjs";
+import { A as handleRevisionGet, B as handleContentDuplicate, D as handleMediaGet, E as handleMediaDelete, F as handleContentCountScheduled, G as handleContentPermanentDelete, H as handleContentGetIncludingTrashed, I as handleContentCountTrashed, J as handleContentSchedule, K as handleContentPublish, L as handleContentCreate, M as handleRevisionRestore, N as generateManifest, O as handleMediaList, P as handleContentCompare, Q as handleContentUpdate, R as handleContentDelete, T as handleMediaCreate, U as handleContentList, V as handleContentGet, W as handleContentListTrashed, X as handleContentUnpublish, Y as handleContentTranslations, Z as handleContentUnschedule, j as handleRevisionList, k as handleMediaUpdate, q as handleContentRestore, z as handleContentDiscardDraft } from "./api-THnYu0ZU.mjs";
 import "./request-cache-BpwuE2ix.mjs";
 import "./dashboard-BC9bgPOH.mjs";
 import "./briefing-Jsxs587i.mjs";

package/dist/media/local-runtime.d.mts

@@ -1,4 +1,4 @@
-import "../runtime-Cg87dCSm.mjs";
+import "../runtime-BM9sqnzO.mjs";
 import { t as Database } from "../types-B1NksXAb.mjs";
 import "../types-BIM7jwxr.mjs";
 import "../types-BgE6gMFI.mjs";
@@ -7,7 +7,7 @@ import "../runner-pAnQS6iI.mjs";
 import "../index-2tBfB_8X.mjs";
 import "../index-CpbixmRL.mjs";
 import { d as Storage } from "../types-BYjPylrZ.mjs";
-import "../bylines-Cb7nzI9t.mjs";
+import "../bylines-CqLv_DIj.mjs";
 import "../types-BBETcziA.mjs";
 import "../validate-BzUCAU2a.mjs";
 import "../index.mjs";

package/dist/{oauth-authorization-DyOFXQWq.mjs → oauth-authorization-lW9vJ_hl.mjs}

@@ -1,7 +1,7 @@
 import { t as withTransaction } from "./transaction-D0FOsb3X.mjs";
-import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-BbZbIEZp.mjs";
+import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-_I9NlZbO.mjs";
 import { a as hashApiToken, n as TOKEN_PREFIXES, r as generatePrefixedToken, t as ALL_VALID_SCOPES } from "./api-tokens-L0o9Bd7v.mjs";
-import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "./oauth-clients-BMs_bmoz.mjs";
+import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "./oauth-clients-D1n0ykZJ.mjs";
 import { t as lookupUserRoleAndStatus } from "./oauth-user-lookup-DdcI8ZVL.mjs";
 import { clampScopes, computeS256Challenge, secureCompare } from "@dineway-ai/auth";
 import { generateCodeVerifier } from "arctic";

package/dist/{oauth-clients-BMs_bmoz.mjs → oauth-clients-D1n0ykZJ.mjs}

@@ -1,4 +1,4 @@
-import { o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-BbZbIEZp.mjs";
+import { o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-_I9NlZbO.mjs";
 import { s as validateScopes } from "./api-tokens-L0o9Bd7v.mjs";
 
 //#region src/api/oauth/redirect-uri.ts

package/dist/plugins/adapt-sandbox-entry.d.mts

@@ -1,11 +1,11 @@
-import { n as PluginDescriptor } from "../runtime-Cg87dCSm.mjs";
+import { n as PluginDescriptor } from "../runtime-BM9sqnzO.mjs";
 import "../types-B1NksXAb.mjs";
 import { X as ResolvedPlugin, tt as StandardPluginDefinition } from "../types-BIM7jwxr.mjs";
 import "../types-BgE6gMFI.mjs";
 import "../runner-pAnQS6iI.mjs";
 import "../index-2tBfB_8X.mjs";
 import "../index-CpbixmRL.mjs";
-import "../bylines-Cb7nzI9t.mjs";
+import "../bylines-CqLv_DIj.mjs";
 import "../types-BBETcziA.mjs";
 import "../validate-BzUCAU2a.mjs";
 

package/dist/{runtime-Cg87dCSm.d.mts → runtime-BM9sqnzO.d.mts}

@@ -1787,6 +1787,7 @@ declare const pluginManifestSchema: z.ZodObject<{
         number: "number";
         boolean: "boolean";
         file: "file";
+        image: "image";
         slug: "slug";
         datetime: "datetime";
         text: "text";
@@ -1794,7 +1795,6 @@ declare const pluginManifestSchema: z.ZodObject<{
         select: "select";
         multiSelect: "multiSelect";
         portableText: "portableText";
-        image: "image";
         reference: "reference";
         json: "json";
         repeater: "repeater";

package/dist/runtime.d.mts

@@ -1,11 +1,11 @@
-import { ct as CollectionFilter, dt as dinewayLoader, ft as getDb, lt as EntryData, ut as EntryFilter } from "./runtime-Cg87dCSm.mjs";
+import { ct as CollectionFilter, dt as dinewayLoader, ft as getDb, lt as EntryData, ut as EntryFilter } from "./runtime-BM9sqnzO.mjs";
 import "./types-B1NksXAb.mjs";
 import "./types-BIM7jwxr.mjs";
 import "./types-BgE6gMFI.mjs";
 import "./runner-pAnQS6iI.mjs";
 import "./index-2tBfB_8X.mjs";
 import "./index-CpbixmRL.mjs";
-import "./bylines-Cb7nzI9t.mjs";
+import "./bylines-CqLv_DIj.mjs";
 import "./types-BBETcziA.mjs";
 import "./validate-BzUCAU2a.mjs";
 import { t as getMediaProvider } from "./provider-loader-BaZhx7E3.mjs";

package/dist/{site-context-DuBQk6Mp.mjs → site-context-BBX9G7FT.mjs}

@@ -12,7 +12,7 @@ import { a as getSiteSettingsWithDb } from "./settings-DORe02PC.mjs";
 import { p as normalizeUrl } from "./utils-FEbQMgB5.mjs";
 import { t as sanitizeWordPressImportSlug } from "./wordpress-slugs-hqItqJrQ.mjs";
 import { s as searchCollection } from "./search-Cl9preJT.mjs";
-import { n as assertExperimentalSiteContextWorkflowsEnabled } from "./experimental-workflows-BbZbIEZp.mjs";
+import { n as assertExperimentalSiteContextWorkflowsEnabled } from "./experimental-workflows-_I9NlZbO.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 import { Role } from "@dineway-ai/auth";

package/dist/version-Ds94WfbP.mjs

@@ -0,0 +1,6 @@
+//#region src/version.ts
+const VERSION = "0.1.29";
+const COMMIT = "27888812";
+
+//#endregion
+export { VERSION as n, COMMIT as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dineway",
-  "version": "0.1.27",
+  "version": "0.1.29",
   "description": "Agentic Website builder for restaurants — structured content meets AI via the Model Context Protocol",
   "type": "module",
   "publishConfig": {
@@ -347,7 +347,7 @@
     "ulidx": "^2.4.1",
     "upng-js": "^2.1.0",
     "zod": "^4.4.1",
-    "@dineway-ai/admin": "^0.1.14",
+    "@dineway-ai/admin": "^0.1.15",
     "@dineway-ai/auth": "^0.1.15",
     "@dineway-ai/gutenberg-to-portable-text": "^0.1.13"
   },

package/dist/version-D-jCq-i4.mjs

@@ -1,6 +0,0 @@
-//#region src/version.ts
-const VERSION = "0.1.27";
-const COMMIT = "1b1d4cca";
-
-//#endregion
-export { VERSION as n, COMMIT as t };