dineway 0.1.3 → 0.1.5

package/dist/client/external-auth-headers.d.mts

@@ -1,4 +1,4 @@
-import { t as Interceptor } from "../transport-gIL-e43D.mjs";
+import { t as Interceptor } from "../transport-Wge_IzKl.mjs";
 
 //#region src/client/external-auth-headers.d.ts
 /**

package/dist/client/index.d.mts

@@ -1,4 +1,4 @@
-import { a as tokenInterceptor, i as devBypassInterceptor, n as createTransport, r as csrfInterceptor, t as Interceptor } from "../transport-gIL-e43D.mjs";
+import { a as tokenInterceptor, i as devBypassInterceptor, n as createTransport, r as csrfInterceptor, t as Interceptor } from "../transport-Wge_IzKl.mjs";
 
 //#region src/client/portable-text.d.ts
 /**
@@ -75,6 +75,11 @@ interface ListResult<T> {
   items: T[];
   nextCursor?: string;
 }
+/** Options for publishing content. */
+interface PublishContentOptions {
+  /** Approved review request ID for token-authenticated publish execution. */
+  reviewRequestId?: string;
+}
 /** Content item as returned by the API */
 interface ContentItem {
   id: string;
@@ -204,6 +209,9 @@ interface SchemaExport {
 interface Manifest {
   version: string;
   hash: string;
+  features?: {
+    siteContextWorkflows: boolean;
+  };
   collections: Record<string, {
     label: string;
     labelSingular: string;
@@ -313,7 +321,7 @@ declare class DinewayClient {
   /** Delete (soft) a content item */
   delete(collection: string, id: string): Promise<void>;
   /** Publish a content item */
-  publish(collection: string, id: string): Promise<void>;
+  publish(collection: string, id: string, options?: PublishContentOptions): Promise<void>;
   /** Unpublish a content item */
   unpublish(collection: string, id: string): Promise<void>;
   /** Schedule publishing */
@@ -394,4 +402,4 @@ declare class DinewayClient {
   private getFieldSchemas;
 }
 //#endregion
-export { ApiError, ClientResponse, Collection, CollectionWithFields, ContentItem, DinewayApiError, DinewayClient, DinewayClientError, DinewayClientOptions, Field, type Interceptor, ListResult, Manifest, MediaItem, Menu, MenuItem, MenuWithItems, type PortableTextBlock, SchemaExport, SearchResult, Taxonomy, Term, createTransport, csrfInterceptor, devBypassInterceptor, markdownToPortableText, portableTextToMarkdown, tokenInterceptor };
+export { ApiError, ClientResponse, Collection, CollectionWithFields, ContentItem, DinewayApiError, DinewayClient, DinewayClientError, DinewayClientOptions, Field, type Interceptor, ListResult, Manifest, MediaItem, Menu, MenuItem, MenuWithItems, type PortableTextBlock, PublishContentOptions, SchemaExport, SearchResult, Taxonomy, Term, createTransport, csrfInterceptor, devBypassInterceptor, markdownToPortableText, portableTextToMarkdown, tokenInterceptor };

package/dist/client/index.mjs

@@ -1,4 +1,4 @@
-import { a as tokenInterceptor, c as markdownToPortableText, i as refreshInterceptor, l as portableTextToMarkdown, n as csrfInterceptor, o as convertDataForRead, r as devBypassInterceptor, s as convertDataForWrite, t as createTransport } from "../transport-C5FYnid7.mjs";
+import { a as tokenInterceptor, c as markdownToPortableText, i as refreshInterceptor, l as portableTextToMarkdown, n as csrfInterceptor, o as convertDataForRead, r as devBypassInterceptor, s as convertDataForWrite, t as createTransport } from "../transport-DB5eDN4x.mjs";
 import mime from "mime/lite";
 
 //#region src/client/index.ts
@@ -186,8 +186,9 @@ var DinewayClient = class {
 		await this.request("DELETE", `/content/${encodeURIComponent(collection)}/${encodeURIComponent(id)}`);
 	}
 	/** Publish a content item */
-	async publish(collection, id) {
-		await this.request("POST", `/content/${encodeURIComponent(collection)}/${encodeURIComponent(id)}/publish`);
+	async publish(collection, id, options = {}) {
+		const body = options.reviewRequestId ? { reviewRequestId: options.reviewRequestId } : void 0;
+		await this.request("POST", `/content/${encodeURIComponent(collection)}/${encodeURIComponent(id)}/publish`, body);
 	}
 	/** Unpublish a content item */
 	async unpublish(collection, id) {

package/dist/{connection-C9pxzuag.mjs → connection-BCNICDWN.mjs}

@@ -1,4 +1,5 @@
 import { n as __require } from "./chunk-ClPoSABd.mjs";
+import { kyselyLogOption } from "./database/instrumentation.mjs";
 import BetterSqlite3 from "better-sqlite3";
 import { Kysely, SqliteDialect } from "kysely";
 
@@ -18,6 +19,14 @@ var DinewayDatabaseError = class extends Error {
 	}
 };
 /**
+* Returns a helpful message when better-sqlite3's native binary was compiled
+* against a different Node.js version than the one running.
+*/
+function formatNativeModuleVersionError(error) {
+	if (!(error instanceof Error ? error.message : String(error)).includes("NODE_MODULE_VERSION")) return null;
+	return "better-sqlite3's native binary was compiled against a different Node.js version. Rebuild it with `pnpm rebuild better-sqlite3` (or `npm rebuild better-sqlite3`), or reinstall dependencies with your current Node.js version.";
+}
+/**
 * Creates a Kysely database instance
 * Supports:
 * - file:./path/to/db.sqlite (local SQLite)
@@ -30,20 +39,28 @@ function createDatabase(config) {
 			const sqlite = new BetterSqlite3(config.url === ":memory:" ? ":memory:" : config.url.replace("file:", ""));
 			sqlite.pragma("journal_mode = WAL");
 			sqlite.pragma("foreign_keys = ON");
-			return new Kysely({ dialect: new SqliteDialect({ database: sqlite }) });
+			return new Kysely({
+				dialect: new SqliteDialect({ database: sqlite }),
+				log: kyselyLogOption()
+			});
 		}
 		if (LIBSQL_REMOTE_URL_PREFIXES.some((prefix) => config.url.startsWith(prefix))) try {
 			const { LibsqlDialect } = __require("@libsql/kysely-libsql");
-			return new Kysely({ dialect: new LibsqlDialect({
-				url: config.url,
-				authToken: config.authToken
-			}) });
+			return new Kysely({
+				dialect: new LibsqlDialect({
+					url: config.url,
+					authToken: config.authToken
+				}),
+				log: kyselyLogOption()
+			});
 		} catch (error) {
 			throw new DinewayDatabaseError("Failed to load libSQL dialect. Install @libsql/kysely-libsql to use remote libSQL databases", error);
 		}
 		throw new DinewayDatabaseError(`Unsupported database URL scheme: ${config.url}`);
 	} catch (error) {
 		if (error instanceof DinewayDatabaseError) throw error;
+		const nativeVersionHint = formatNativeModuleVersionError(error);
+		if (nativeVersionHint) throw new DinewayDatabaseError(nativeVersionHint, error);
 		throw new DinewayDatabaseError("Failed to create database", error);
 	}
 }

package/dist/{content-zSgdNmnt.mjs → content-DWi4d0rT.mjs}

@@ -1,4 +1,5 @@
 import { t as __exportAll } from "./chunk-ClPoSABd.mjs";
+import { t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
 import { n as decodeCursor, r as encodeCursor, t as DinewayValidationError } from "./types-BawVha09.mjs";
 import { sql } from "kysely";
 import { monotonicFactory, ulid } from "ulidx";
@@ -11,6 +12,17 @@ const MULTIPLE_HYPHENS_PATTERN = /-+/g;
 const LEADING_TRAILING_HYPHEN_PATTERN = /^-|-$/g;
 const TRAILING_HYPHEN_PATTERN = /-$/;
 /**
+* Decode a URI-encoded slug route parameter before database lookup.
+*/
+function decodeSlug(raw) {
+	if (!raw) return void 0;
+	try {
+		return decodeURIComponent(raw);
+	} catch {
+		return raw;
+	}
+}
+/**
 * Convert a string to a URL-friendly slug.
 *
 * Handles unicode by normalizing to NFD and stripping diacritics,
@@ -148,6 +160,7 @@ const SYSTEM_COLUMNS = new Set([
 * Get the table name for a collection type
 */
 function getTableName(type) {
+	validateIdentifier(type, "collection type");
 	return `ec_${type}`;
 }
 /**
@@ -236,6 +249,7 @@ var ContentRepository = class {
 		];
 		if (data && typeof data === "object") {
 			for (const [key, value] of Object.entries(data)) if (!SYSTEM_COLUMNS.has(key)) {
+				validateIdentifier(key, "content field name");
 				columns.push(key);
 				values.push(serializeValue(value));
 			}
@@ -456,7 +470,10 @@ var ContentRepository = class {
 		if (input.authorId !== void 0) updates.author_id = input.authorId;
 		if (input.primaryBylineId !== void 0) updates.primary_byline_id = input.primaryBylineId;
 		if (input.data !== void 0 && typeof input.data === "object") {
-			for (const [key, value] of Object.entries(input.data)) if (!SYSTEM_COLUMNS.has(key)) updates[key] = serializeValue(value);
+			for (const [key, value] of Object.entries(input.data)) if (!SYSTEM_COLUMNS.has(key)) {
+				validateIdentifier(key, "content field name");
+				updates[key] = serializeValue(value);
+			}
 		}
 		await this.db.updateTable(tableName).set(updates).where("id", "=", id).where("deleted_at", "is", null).execute();
 		const updated = await this.findById(type, id);
@@ -695,6 +712,27 @@ var ContentRepository = class {
 		return updated;
 	}
 	/**
+	* Stage an existing revision as the draft for a content item.
+	*
+	* Seed/import paths use this to promote freshly prepared revision data
+	* through `publish()` instead of writing live revision pointers directly.
+	*/
+	async setDraftRevision(type, id, revisionId) {
+		const tableName = getTableName(type);
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		if (!await this.findById(type, id)) throw new DinewayValidationError("Content item not found");
+		const revision = await new RevisionRepository(this.db).findById(revisionId);
+		if (!revision) throw new DinewayValidationError("Revision not found");
+		if (revision.collection !== type || revision.entryId !== id) throw new DinewayValidationError("Revision does not belong to the specified content item");
+		await sql`
+			UPDATE ${sql.ref(tableName)}
+			SET draft_revision_id = ${revisionId},
+				updated_at = ${now}
+			WHERE id = ${id}
+			AND deleted_at IS NULL
+		`.execute(this.db);
+	}
+	/**
 	* Unpublish content
 	*
 	* Removes live pointer but preserves draft. If no draft exists,
@@ -767,6 +805,7 @@ var ContentRepository = class {
 		for (const [key, value] of Object.entries(data)) {
 			if (SYSTEM_COLUMNS.has(key)) continue;
 			if (key.startsWith("_")) continue;
+			validateIdentifier(key, "content field name");
 			updates[key] = serializeValue(value);
 		}
 		if (Object.keys(updates).length === 0) return;
@@ -833,4 +872,4 @@ var ContentRepository = class {
 };
 
 //#endregion
-export { slugify as i, content_exports as n, RevisionRepository as r, ContentRepository as t };
+export { slugify as a, decodeSlug as i, content_exports as n, RevisionRepository as r, ContentRepository as t };

package/dist/database/instrumentation.d.mts

@@ -0,0 +1,34 @@
+import { Logger } from "kysely";
+
+//#region src/database/instrumentation.d.ts
+declare const QUERY_LOG_ENV = "DINEWAY_QUERY_LOG";
+declare const QUERY_LOG_PREFIX = "[dineway-query-log]";
+declare const SERVER_TIMING_ENV = "DINEWAY_SERVER_TIMING";
+interface QueryEvent {
+  sql: string;
+  params: readonly unknown[];
+  durationMs: number;
+  route: string;
+  method: string;
+  phase: string;
+}
+interface QueryRecorder {
+  events: QueryEvent[];
+  route: string;
+  method: string;
+  phase: string;
+}
+interface ServerTimingMetric {
+  name: string;
+  dur: number;
+  desc?: string;
+}
+declare function createRecorder(route: string, method: string, phase: string): QueryRecorder;
+declare function recordEvent(recorder: QueryRecorder, sql: string, params: readonly unknown[], durationMs: number): void;
+declare function flushRecorder(recorder: QueryRecorder): void;
+declare function isInstrumentationEnabled(): boolean;
+declare function isServerTimingEnabled(): boolean;
+declare function formatServerTimingHeader(metrics: readonly ServerTimingMetric[]): string;
+declare function kyselyLogOption(): Logger | undefined;
+//#endregion
+export { QUERY_LOG_ENV, QUERY_LOG_PREFIX, QueryEvent, QueryRecorder, SERVER_TIMING_ENV, ServerTimingMetric, createRecorder, flushRecorder, formatServerTimingHeader, isInstrumentationEnabled, isServerTimingEnabled, kyselyLogOption, recordEvent };

package/dist/database/instrumentation.mjs

@@ -0,0 +1,53 @@
+import { getRequestContext } from "../request-context.mjs";
+
+//#region src/database/instrumentation.ts
+const QUERY_LOG_ENV = "DINEWAY_QUERY_LOG";
+const QUERY_LOG_PREFIX = "[dineway-query-log]";
+const SERVER_TIMING_ENV = "DINEWAY_SERVER_TIMING";
+function createRecorder(route, method, phase) {
+	return {
+		events: [],
+		route,
+		method,
+		phase
+	};
+}
+function recordEvent(recorder, sql, params, durationMs) {
+	recorder.events.push({
+		sql,
+		params,
+		durationMs,
+		route: recorder.route,
+		method: recorder.method,
+		phase: recorder.phase
+	});
+}
+function flushRecorder(recorder) {
+	for (const event of recorder.events) console.log(`${QUERY_LOG_PREFIX} ${JSON.stringify(event)}`);
+}
+function isInstrumentationEnabled() {
+	return Boolean(typeof process !== "undefined" && process.env && process.env[QUERY_LOG_ENV] === "1");
+}
+function isServerTimingEnabled() {
+	return Boolean(typeof process !== "undefined" && process.env && process.env[SERVER_TIMING_ENV] === "1");
+}
+function formatServerTimingHeader(metrics) {
+	return metrics.map((metric) => {
+		const dur = Math.max(0, Math.round(metric.dur));
+		if (!metric.desc) return `${metric.name};dur=${dur}`;
+		const desc = metric.desc.replaceAll("\\", "\\\\").replaceAll("\"", "\\\"");
+		return `${metric.name};dur=${dur};desc="${desc}"`;
+	}).join(", ");
+}
+function kyselyLog(event) {
+	if (event.level !== "query") return;
+	const recorder = getRequestContext()?.queryRecorder;
+	if (!recorder) return;
+	recordEvent(recorder, event.query.sql, event.query.parameters, event.queryDurationMillis);
+}
+function kyselyLogOption() {
+	return isInstrumentationEnabled() ? kyselyLog : void 0;
+}
+
+//#endregion
+export { QUERY_LOG_ENV, QUERY_LOG_PREFIX, SERVER_TIMING_ENV, createRecorder, flushRecorder, formatServerTimingHeader, isInstrumentationEnabled, isServerTimingEnabled, kyselyLogOption, recordEvent };

package/dist/db/index.d.mts

@@ -1,4 +1,4 @@
-import "../types-DkvMXalq.mjs";
-import { i as runMigrations, n as getMigrationStatus, r as rollbackMigration, t as MigrationStatus } from "../runner-B5l1JfOj.mjs";
-import { a as SqliteConfig, c as sqlite, i as PostgresConfig, n as DatabaseDialectType, o as libsql, r as LibsqlConfig, s as postgres, t as DatabaseDescriptor } from "../adapters-BlzWJG82.mjs";
+import "../types-DOrVigru.mjs";
+import { i as runMigrations, n as getMigrationStatus, r as rollbackMigration, t as MigrationStatus } from "../runner-CFI6B6J2.mjs";
+import { a as SqliteConfig, c as sqlite, i as PostgresConfig, n as DatabaseDialectType, o as libsql, r as LibsqlConfig, s as postgres, t as DatabaseDescriptor } from "../adapters-C2ypTrZZ.mjs";
 export { type DatabaseDescriptor, type DatabaseDialectType, type LibsqlConfig, type MigrationStatus, type PostgresConfig, type SqliteConfig, getMigrationStatus, libsql, postgres, rollbackMigration, runMigrations, sqlite };

package/dist/db/index.mjs

@@ -1,5 +1,5 @@
-import "../dialect-helpers-B9uSp2GJ.mjs";
-import { n as rollbackMigration, r as runMigrations, t as getMigrationStatus } from "../runner-BGUGywgG.mjs";
+import "../dialect-helpers-DhTzaUxP.mjs";
+import { n as rollbackMigration, r as runMigrations, t as getMigrationStatus } from "../runner-DWZm2KQm.mjs";
 
 //#region src/db/adapters.ts
 /**

package/dist/db/libsql.d.mts

@@ -1,4 +1,4 @@
-import { r as LibsqlConfig } from "../adapters-BlzWJG82.mjs";
+import { r as LibsqlConfig } from "../adapters-C2ypTrZZ.mjs";
 import { Dialect } from "kysely";
 
 //#region src/db/libsql.d.ts

package/dist/db/libsql.mjs

@@ -1,15 +1,21 @@
 import { n as __require } from "../chunk-ClPoSABd.mjs";
+import { SqliteDialect } from "kysely";
 
 //#region src/db/libsql.ts
 /**
+* libSQL runtime adapter
+*
+* Creates a Kysely dialect for libSQL/Turso.
+* Falls back to the local SQLite dialect for file-backed URLs so the
+* public `libsql()` adapter can be used in both local development and
+* remote libSQL deployments.
+* Loaded at runtime via virtual module.
+*/
+/**
 * Create a libSQL dialect from config
 */
 function createDialect(config) {
-	if (config.url === ":memory:" || config.url.startsWith("file:")) {
-		const BetterSqlite3 = __require("better-sqlite3");
-		const { SqliteDialect } = __require("kysely");
-		return new SqliteDialect({ database: new BetterSqlite3(config.url === ":memory:" ? config.url : config.url.slice(5)) });
-	}
+	if (config.url === ":memory:" || config.url.startsWith("file:")) return new SqliteDialect({ database: new (__require("better-sqlite3"))(config.url === ":memory:" ? config.url : config.url.slice(5)) });
 	const { LibsqlDialect } = __require("@libsql/kysely-libsql");
 	return new LibsqlDialect({
 		url: config.url,

package/dist/db/postgres.d.mts

@@ -1,4 +1,4 @@
-import { i as PostgresConfig } from "../adapters-BlzWJG82.mjs";
+import { i as PostgresConfig } from "../adapters-C2ypTrZZ.mjs";
 import { PostgresDialect } from "kysely";
 
 //#region src/db/postgres.d.ts

package/dist/db/sqlite.d.mts

@@ -1,4 +1,4 @@
-import { a as SqliteConfig } from "../adapters-BlzWJG82.mjs";
+import { a as SqliteConfig } from "../adapters-C2ypTrZZ.mjs";
 import { Dialect } from "kysely";
 
 //#region src/db/sqlite.d.ts

package/dist/db/sqlite.mjs

@@ -1,12 +1,18 @@
 import { n as __require } from "../chunk-ClPoSABd.mjs";
+import { SqliteDialect } from "kysely";
 
 //#region src/db/sqlite.ts
 /**
+* SQLite runtime adapter
+*
+* Creates a Kysely dialect for better-sqlite3.
+* Loaded at runtime via virtual module.
+*/
+/**
 * Create a SQLite dialect from config
 */
 function createDialect(config) {
 	const BetterSqlite3 = __require("better-sqlite3");
-	const { SqliteDialect } = __require("kysely");
 	const url = config.url;
 	return new SqliteDialect({ database: new BetterSqlite3(url.startsWith("file:") ? url.slice(5) : url) });
 }

package/dist/db-errors-CEqD7qH9.mjs

@@ -0,0 +1,23 @@
+//#region src/utils/db-errors.ts
+/**
+* Shared detection helpers for database-layer error messages.
+*
+* Different SQL dialects phrase "table or relation does not exist" differently.
+* Runtime code that treats pre-migration databases as empty should use this
+* helper rather than duplicating string checks per call-site.
+*/
+function messageOf(error) {
+	if (error instanceof Error) return error.message.toLowerCase();
+	if (typeof error === "string") return error.toLowerCase();
+	return "";
+}
+function isMissingTableError(error) {
+	const message = messageOf(error);
+	if (!message) return false;
+	if (message.includes("no such table")) return true;
+	if (message.includes("does not exist") || message.includes("doesn't exist")) return message.includes("relation") || message.includes("table");
+	return false;
+}
+
+//#endregion
+export { isMissingTableError as t };

package/dist/{default-WYlzADZL.mjs → default-VjJyuuG9.mjs}

@@ -9,6 +9,7 @@ const defaultSeed = {
 		slug: "posts",
 		label: "Posts",
 		labelSingular: "Post",
+		urlPattern: "/posts/{slug}",
 		supports: [
 			"drafts",
 			"revisions",
@@ -43,6 +44,7 @@ const defaultSeed = {
 		slug: "pages",
 		label: "Pages",
 		labelSingular: "Page",
+		urlPattern: "/{slug}",
 		supports: [
 			"drafts",
 			"revisions",

package/dist/{dialect-helpers-B9uSp2GJ.mjs → dialect-helpers-DhTzaUxP.mjs}

@@ -1,3 +1,4 @@
+import { n as validateJsonFieldName, t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
 import { sql } from "kysely";
 
 //#region src/database/dialect-helpers.ts
@@ -81,6 +82,8 @@ function binaryType(db) {
 * postgres: column->>'path'
 */
 function jsonExtractExpr(db, column, path) {
+	validateIdentifier(column, "JSON column name");
+	validateJsonFieldName(path, "JSON path");
 	if (isPostgres(db)) return `${column}->>'${path}'`;
 	return `json_extract(${column}, '$.${path}')`;
 }

package/dist/{error-DrxtnGPg.mjs → error-BmL6QipT.mjs}

@@ -9,11 +9,15 @@ const API_CACHE_HEADERS = { "Cache-Control": "private, no-store" };
 /**
 * Create a standardized error response.
 *
-* Always returns `{ error: { code, message } }` with correct Content-Type.
+* Always returns `{ error: { code, message, details? } }` with correct Content-Type.
 * Use this for all error responses in API routes.
 */
-function apiError(code, message, status) {
-	return Response.json({ error: {
+function apiError(code, message, status, details) {
+	return Response.json({ error: details ? {
+		code,
+		message,
+		details
+	} : {
 		code,
 		message
 	} }, {