dineway 0.1.48 → 0.2.0

package/dist/astro/middleware.mjs

@@ -1,81 +1,94 @@
-import { i as runMigrations } from "../runner-B-tbV751.mjs";
+import { i as runMigrations } from "../runner-DB7CRfOF.mjs";
 import "../connection-CiJWiWya.mjs";
 import { t as validateIdentifier } from "../validate-VPnKoIzW.mjs";
 import { s as isSqlite } from "../dialect-helpers-fk43GbDb.mjs";
 import { i as setI18nConfig } from "../config-CVssduLe.mjs";
-import { d as EmailPipeline, g as after, h as definePlugin, m as resolveExclusiveHooks, p as createHookPipeline, u as PluginRouteRegistry } from "../plugins-C57YQi4l.mjs";
-import { r as RevisionRepository, t as ContentRepository } from "../content-QaryevFO.mjs";
-import "../base64-C1Q9yr0B.mjs";
-import "../types-DfuD0Afl.mjs";
-import { t as MediaRepository } from "../media-DUAjMfvR.mjs";
-import "../user-DtNmjNYt.mjs";
-import "../taxonomy-CBmkmMuU.mjs";
-import "../comment-CXDOQ93N.mjs";
-import { t as OptionsRepository } from "../options-BvJoSSJR.mjs";
-import "../audit-D1cbG7xH.mjs";
-import "../site-activity-D7Xyropw.mjs";
-import "../review-requests-gGMyYYhy.mjs";
-import "../entity-aliases-Egjmqc7I.mjs";
-import "../context-CoYb_fvK.mjs";
-import "../menus-WpFRMXjz.mjs";
-import "../redirect-C2zXRj3c.mjs";
+import { _ as readBoundedPluginRouteBody, d as EmailPipeline, g as DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES, h as definePlugin, m as resolveExclusiveHooks, p as createHookPipeline, u as PluginRouteRegistry } from "../plugins-BolVa-tl.mjs";
 import { createRequestMetrics, getRequestContext, runWithContext } from "../request-context.mjs";
-import { r as requestCached } from "../request-cache-CYMbwZc6.mjs";
-import "../byline-registry-CUSvkasJ.mjs";
-import "../byline-1ntDwv8c.mjs";
-import { n as normalizeMediaValue } from "../normalize-DUnoXAa9.mjs";
-import "../placeholder-BDo81Is5.mjs";
-import "../seo-Cd45Po8L.mjs";
-import { $ as handleContentUpdate, A as handleRevisionGet, B as handleContentDiscardDraft, D as handleMediaGet, E as handleMediaDelete, F as handleContentCompare, G as handleContentListTrashed, H as handleContentGet, I as handleContentCountScheduled, J as handleContentRestore, K as handleContentPermanentDelete, L as handleContentCountTrashed, M as handleRevisionRestore, O as handleMediaList, P as handleContentAuthors, Q as handleContentUnschedule, R as handleContentCreate, T as handleMediaCreate, U as handleContentGetIncludingTrashed, V as handleContentDuplicate, W as handleContentList, X as handleContentTranslations, Y as handleContentSchedule, Z as handleContentUnpublish, d as createPluginBundleStore, et as validateRev, j as handleRevisionList, k as handleMediaUpdate, q as handleContentPublish, z as handleContentDelete } from "../api-Eiy8_zVZ.mjs";
-import "../dashboard-DNlqsknJ.mjs";
-import { u as PluginStateRepository } from "../briefing-gKWiGLt1.mjs";
-import "../context-types-DQh_XKkn.mjs";
-import { t as FTSManager } from "../fts-manager-CIZlScg5.mjs";
-import { n as SchemaRegistry } from "../registry-CTkbIDB9.mjs";
 import { createRecorder, flushRecorder, formatServerTimingHeader, isInstrumentationEnabled, isServerTimingEnabled, kyselyLogOption } from "../database/instrumentation.mjs";
-import { a as isMissingTableError, r as getDb } from "../loader-tg63WSY2.mjs";
-import { c as createPublicMediaUrlResolver } from "../settings-yLjz_I4T.mjs";
-import "../briefing-CObXGOGz.mjs";
-import "../review-requests-C0un5kdV.mjs";
+import "../base64-F8-DUraK.mjs";
+import "../types-Dq1qT19x.mjs";
+import { o as isMissingTableError, r as getDb } from "../loader-CjWqjweO.mjs";
+import { t as after } from "../after-BfniwgIf.mjs";
+import "../object-cache-D51qOseS.mjs";
+import { r as RevisionRepository, t as ContentRepository } from "../content-Bh4BDjv8.mjs";
+import { t as MediaRepository } from "../media-DMj0grzC.mjs";
+import "../user-BIZPzCb9.mjs";
+import "../taxonomy-Dvsw6BOs.mjs";
+import "../comment-DlA4iChg.mjs";
+import { t as OptionsRepository } from "../options-DQPTH5n0.mjs";
+import "../audit-ByVKIwWF.mjs";
+import "../site-activity-Dy3FROs0.mjs";
+import "../review-requests-DUyEmtmG.mjs";
+import "../hitl-Hw1RmWOq.mjs";
+import { t as PluginContextFactory } from "../context-C5W3G18y.mjs";
+import "../menus-TaW1gKnk.mjs";
+import "../redirect-BAjt4Z6b.mjs";
+import { r as requestCached } from "../request-cache-D9GQBxMP.mjs";
+import "../byline-registry-87nNnYl4.mjs";
+import { a as initWithLock, i as createInitLock, r as processCachedAsync, t as createProcessCache } from "../process-cache-7xgAO9JY.mjs";
+import "../field-defs-cache-DRNdhBJv.mjs";
+import "../byline-e51-fWRs.mjs";
+import { n as normalizeMediaValue } from "../normalize-5ek_z7de.mjs";
+import "../enrich-DIFIFA8O.mjs";
+import "../seo-CQG3GCHQ.mjs";
+import { $ as handleContentUpdate, A as handleRevisionGet, B as handleContentDiscardDraft, D as handleMediaGet, E as handleMediaDelete, F as handleContentCompare, G as handleContentListTrashed, H as handleContentGet, I as handleContentCountScheduled, J as handleContentRestore, K as handleContentPermanentDelete, L as handleContentCountTrashed, M as handleRevisionRestore, O as handleMediaList, P as handleContentAuthors, Q as handleContentUnschedule, R as handleContentCreate, T as handleMediaCreate, U as handleContentGetIncludingTrashed, V as handleContentDuplicate, W as handleContentList, X as handleContentTranslations, Y as handleContentSchedule, Z as handleContentUnpublish, d as createPluginBundleStore, et as validateRev, j as handleRevisionList, k as handleMediaUpdate, q as handleContentPublish, z as handleContentDelete } from "../api-ByrU2q-Z.mjs";
+import "../dashboard-DQkVT7Ei.mjs";
+import { u as PluginStateRepository } from "../briefing-CawZ59CY.mjs";
+import "../context-types-DqTo6C79.mjs";
+import { i as markContentMediaUsageCollectionStale, o as refreshContentMediaUsageAfterWrite, r as findNonTranslatableSiblingContentIds, t as deleteContentMediaUsage } from "../content-refresh-CgutSUfO.mjs";
 import { n as hashString } from "../hash-BPmX6P8I.mjs";
-import { n as VERSION, t as COMMIT } from "../version-xlzMSXF2.mjs";
-import "../query-DKEwzobh.mjs";
-import "../zod-generator-BS9-umbk.mjs";
-import "../schema-B6zyB-Xn.mjs";
-import "../seo-5lJOtB5J.mjs";
-import "../bylines-bC15ZqAv.mjs";
-import "../byline-fields-C9_iaPaM.mjs";
-import "../sections-OLKgXL10.mjs";
-import "../settings-lAHjaUit.mjs";
-import "../resolve-DTuDyYKs.mjs";
-import "../taxonomies-CNOGeC-3.mjs";
-import "../taxonomies-uXVEoQso.mjs";
-import { r as normalizeManifestRoute } from "../manifest-schema-qh2P7RDX.mjs";
-import "../parse-CneSgl7-.mjs";
-import "../redirects-ocRJmQHP.mjs";
-import "../byline-fields-B-ZkoVft.mjs";
-import { a as invalidateUrlPatternCache } from "../query-BYc3oruA.mjs";
-import "../preview-D5rvDhRt.mjs";
-import "../parser-DxfsARXL.mjs";
-import { t as getTrustedProxyHeaders } from "../trusted-proxy-BgIIcbsN.mjs";
-import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-DAb6xaP9.mjs";
-import "../ssrf-DiKqWd3N.mjs";
-import { n as CronExecutor } from "../cron-DxCAU_Sn.mjs";
-import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-BOVqIYpB.mjs";
-import "../import-CvHY6sf5.mjs";
-import "../utils-wv-zvC-Y.mjs";
-import "../tokens-CjSgb0AC.mjs";
-import "../menus-DU1eZqw_.mjs";
-import "../bylines-DtxChhN_.mjs";
-import "../widgets-DR8EHuRO.mjs";
-import "../apply-CX3no7XE.mjs";
-import "../load-xE01Jm0V.mjs";
-import "../search-axGQ1KY3.mjs";
+import { t as FTSManager } from "../fts-manager-Crzypjqu.mjs";
+import { n as SchemaRegistry } from "../registry-CtyVedcN.mjs";
+import { r as createPublicMediaUrlResolver } from "../url-Cac7a9QZ.mjs";
+import "../settings-BbqgHWpU.mjs";
+import "../briefing-BJaJI8dm.mjs";
+import "../review-requests-C9Ff11Vq.mjs";
+import { n as VERSION, t as COMMIT } from "../version-BTvfRGc6.mjs";
+import "../query-jaAmw8E1.mjs";
+import "../zod-generator-B7TMjyFJ.mjs";
+import "../schema-DXdYj4R3.mjs";
+import "../seo-qa7Dn0jK.mjs";
+import "../bylines-CMQNCNFh.mjs";
+import "../byline-fields-D-N5qVIG.mjs";
+import "../sections-PVVXHGfp.mjs";
+import "../settings-i4VPP8bT.mjs";
+import "../resolve-Cb6Dbz-C.mjs";
+import "../taxonomies-DRiixp_E.mjs";
+import "../taxonomies-9s-v03H-.mjs";
+import { r as normalizeManifestRoute } from "../manifest-schema-BxVPYMJR.mjs";
+import "../parse-CbymENaR.mjs";
+import "../redirects-CA-xylPG.mjs";
+import "../byline-fields-DOJO16Gm.mjs";
+import "../status-DANd8ERo.mjs";
+import { t as getTrustedProxyHeaders } from "../trusted-proxy-DTXQ2IMv.mjs";
+import "../rate-limit-ZLdyWoZF.mjs";
+import { a as invalidateUrlPatternCache } from "../query-CfRCdaL3.mjs";
+import "../preview-vSVg6fwG.mjs";
+import "../parser-C1nYd-81.mjs";
+import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-CUypToDJ.mjs";
+import "../ssrf-DWe8jwAp.mjs";
+import { n as CronExecutor } from "../cron-cKcNTix_.mjs";
+import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-ChgKFO8-.mjs";
+import { o as validateEncryptionKeyAtStartup } from "../secrets-CDZo2k8L.mjs";
+import "../api-tokens-2r7OWi_I.mjs";
+import { n as createActivePluginMcpRegistry } from "../mcp-reviewed-executor-TwVbMzG6.mjs";
+import "../activity-events-y6eT8UW6.mjs";
+import "../import-Bh9biJfx.mjs";
+import "../utils-CMDhr5Xd.mjs";
+import "../tokens-1RK1n6ED.mjs";
+import "../comment-reaction-DfFao1ST.mjs";
+import "../menus-xvsnVZXw.mjs";
+import "../bylines-y4LO-dTj.mjs";
+import "../widgets-f0ibZUIq.mjs";
+import "../apply-bZswmZPm.mjs";
+import "../load-DmYeniXl.mjs";
+import "../search-DSaLgEFI.mjs";
 import "../index.mjs";
-import { t as getAuthMode } from "../mode-CpyEz8pe.mjs";
-import { i as experimentalSiteContextWorkflowsEnabled } from "../experimental-workflows-Dh4DUoD_.mjs";
-import { t as cleanupExpiredChallenges } from "../challenge-store-CRSz-Xim.mjs";
-import { a as validateEncryptionKeyAtStartup } from "../secrets-062Izo8i.mjs";
+import { t as getAuthMode } from "../mode-C4CIyjtR.mjs";
+import { i as experimentalSiteContextWorkflowsEnabled } from "../experimental-workflows-BMsUnIAw.mjs";
+import { t as cleanupExpiredChallenges } from "../challenge-store-Bjlepa2E.mjs";
+import { t as resolveSessionUser } from "../session-user-CAKImna3.mjs";
 import { Kysely, sql } from "kysely";
 import { defineMiddleware } from "astro:middleware";
 import virtualConfig from "virtual:dineway/config";
@@ -387,47 +400,6 @@ async function publishDueContent(db, options = {}) {
 	return published;
 }
 
-//#endregion
-//#region src/utils/init-lock.ts
-const DEFAULT_DEADLINE_MS = 15e3;
-const DEFAULT_POLL_MS = 50;
-const MAX_WAIT_HEADROOM_MS = 15e3;
-function sleep(ms) {
-	return new Promise((resolve) => setTimeout(resolve, ms));
-}
-function createInitLock() {
-	return {
-		ownerStartedAt: null,
-		generation: 0
-	};
-}
-async function initWithLock(lock, getCached, init, options) {
-	const deadlineMs = options?.deadlineMs ?? DEFAULT_DEADLINE_MS;
-	const pollMs = options?.pollMs ?? DEFAULT_POLL_MS;
-	const maxWaitMs = options?.maxWaitMs ?? deadlineMs + MAX_WAIT_HEADROOM_MS;
-	const waitStart = Date.now();
-	for (;;) {
-		const cached = getCached();
-		if (cached !== null && cached !== void 0) return cached;
-		const ownerStartedAt = lock.ownerStartedAt;
-		if (ownerStartedAt === null || Date.now() - ownerStartedAt > deadlineMs) {
-			lock.generation += 1;
-			const claim = lock.generation;
-			lock.ownerStartedAt = Date.now();
-			try {
-				const isCurrentClaim = () => lock.generation === claim;
-				const initPromise = Promise.resolve().then(() => init(isCurrentClaim));
-				options?.anchor?.(initPromise.then(() => void 0, () => void 0));
-				return await initPromise;
-			} finally {
-				if (lock.generation === claim) lock.ownerStartedAt = null;
-			}
-		}
-		if (Date.now() - waitStart > maxWaitMs) throw new Error(`initWithLock: timed out after ${maxWaitMs}ms waiting for initialization`);
-		await sleep(pollMs);
-	}
-}
-
 //#endregion
 //#region src/dineway-runtime.ts
 const LEADING_SLASH_PATTERN = /^\//;
@@ -553,7 +525,6 @@ var DinewayRuntime = class DinewayRuntime {
 	configuredPlugins;
 	sandboxedPlugins;
 	sandboxedPluginEntries;
-	schemaRegistry;
 	_hooks;
 	config;
 	mediaProviders;
@@ -576,10 +547,8 @@ var DinewayRuntime = class DinewayRuntime {
 	runtimeDeps;
 	/** Mutable ref for the cron invokeCronHook closure to read the current pipeline */
 	pipelineRef;
-	/** Tracks whether FTS health has already been checked for this runtime instance. */
-	_searchHealthChecked = false;
-	/** Shared in-flight FTS health verification promise. */
-	_searchHealthPromise = null;
+	/** Process-lifetime FTS health check cache that never stores an in-flight promise. */
+	_searchHealthCache = createProcessCache();
 	/**
 	* Get the database instance for the current request.
 	*
@@ -599,7 +568,6 @@ var DinewayRuntime = class DinewayRuntime {
 		this.configuredPlugins = configuredPlugins;
 		this.sandboxedPlugins = sandboxedPlugins;
 		this.sandboxedPluginEntries = sandboxedPluginEntries;
-		this.schemaRegistry = new SchemaRegistry(db);
 		this._hooks = hooks;
 		this.enabledPlugins = enabledPlugins;
 		this.pluginStates = pluginStates;
@@ -620,6 +588,32 @@ var DinewayRuntime = class DinewayRuntime {
 	getSandboxRunner() {
 		return sandboxRunner;
 	}
+	get schemaRegistry() {
+		return new SchemaRegistry(this.db);
+	}
+	/**
+	* Resolve native MCP contributions from the current active plugin set.
+	* The registry is derived per request so activate/deactivate changes cannot
+	* leave a stateless MCP server with a stale contribution snapshot.
+	*/
+	getPluginMcpRegistry() {
+		return createActivePluginMcpRegistry(this.configuredPlugins, this.enabledPlugins);
+	}
+	/**
+	* Resolve the outbound HTTP capability for an active native plugin.
+	* MCP handlers use this instead of reaching for global fetch, so the same
+	* capability and SSRF rules apply to routes, hooks, and MCP contributions.
+	*/
+	getPluginHttpAccess(pluginId) {
+		if (!this.enabledPlugins.has(pluginId)) return void 0;
+		const plugin = this.configuredPlugins.find((candidate) => candidate.id === pluginId);
+		if (!plugin) return void 0;
+		return new PluginContextFactory({
+			...this.pipelineFactoryOptions,
+			emailPipeline: this.email ?? void 0,
+			cronReschedule: this.cronScheduler ? () => this.cronScheduler?.reschedule() : void 0
+		}).createContext(plugin).http;
+	}
 	/**
 	* Publish any content whose scheduled time has passed.
 	* Routes through the runtime wrapper so after-publish hooks still fire.
@@ -679,26 +673,29 @@ var DinewayRuntime = class DinewayRuntime {
 	*
 	* Search health is deferred off the runtime cold-start path so ordinary
 	* page loads do not pay the index verification cost. Concurrent callers
-	* share a single in-flight check, and once it has completed the result is
-	* treated as healthy for the lifetime of this runtime instance.
+	* coalesce without sharing an in-flight promise, and once it has completed
+	* the result is treated as healthy for the lifetime of this runtime instance.
 	*/
 	async ensureSearchHealthy() {
-		if (this._searchHealthChecked) return;
-		if (this._searchHealthPromise) return this._searchHealthPromise;
-		if (!isSqlite(this.db)) {
-			this._searchHealthChecked = true;
-			return;
-		}
-		this._searchHealthPromise = (async () => {
+		const requestDb = getRequestContextDatabase();
+		const db = requestDb ?? this._db;
+		if (!isSqlite(db)) return;
+		const verify = async () => {
 			try {
-				const repaired = await new FTSManager(this.db).verifyAndRepairAll();
+				const repaired = await new FTSManager(db).verifyAndRepairAll();
 				if (repaired > 0) console.log(`Repaired ${repaired} corrupted FTS index(es)`);
-			} catch {} finally {
-				this._searchHealthChecked = true;
-				this._searchHealthPromise = null;
-			}
-		})();
-		return this._searchHealthPromise;
+			} catch {}
+		};
+		if (requestDb) {
+			await verify();
+			return;
+		}
+		try {
+			await processCachedAsync(this._searchHealthCache, verify, {
+				anchor: (promise) => after(() => promise),
+				ownerTimeoutMs: 3e4
+			});
+		} catch {}
 	}
 	/**
 	* Update in-memory plugin status and rebuild the hook pipeline.
@@ -731,10 +728,7 @@ var DinewayRuntime = class DinewayRuntime {
 	async rebuildHookPipeline() {
 		const newPipeline = createHookPipeline(this.allPipelinePlugins.filter((p) => this.enabledPlugins.has(p.id)), this.pipelineFactoryOptions);
 		await DinewayRuntime.resolveExclusiveHooks(newPipeline, this.db, this.runtimeDeps);
-		if (this.email) newPipeline.setContextFactory({
-			db: this.db,
-			emailPipeline: this.email
-		});
+		if (this.email) newPipeline.setContextFactory({ emailPipeline: this.email });
 		if (this.cronScheduler) {
 			const scheduler = this.cronScheduler;
 			newPipeline.setContextFactory({ cronReschedule: () => scheduler.reschedule() });
@@ -816,7 +810,10 @@ var DinewayRuntime = class DinewayRuntime {
 					const routeMetaMap = /* @__PURE__ */ new Map();
 					for (const entry of bundle.manifest.routes) {
 						const normalized = normalizeManifestRoute(entry);
-						routeMetaMap.set(normalized.name, { public: normalized.public === true });
+						routeMetaMap.set(normalized.name, {
+							public: normalized.public === true,
+							body: "json"
+						});
 					}
 					sandboxedRouteMetaCache.set(pluginId, routeMetaMap);
 				} else sandboxedRouteMetaCache.delete(pluginId);
@@ -843,6 +840,7 @@ var DinewayRuntime = class DinewayRuntime {
 			}
 		};
 		const db = await phase("rt.db", "DB init + migrations", () => DinewayRuntime.getDatabase(deps));
+		const resolveDb = () => getRequestContextDatabase() ?? db;
 		await phase("rt.secrets", "Validate encryption key", () => validateEncryptionKeyAtStartup());
 		const storage = DinewayRuntime.getStorage(deps);
 		let pluginStates = /* @__PURE__ */ new Map();
@@ -906,6 +904,7 @@ var DinewayRuntime = class DinewayRuntime {
 		const trustedProxyHeaders = getTrustedProxyHeaders(deps.config);
 		const pipelineFactoryOptions = {
 			db,
+			getDb: resolveDb,
 			storage: storage ?? void 0,
 			siteInfo,
 			trustedProxyHeaders
@@ -924,6 +923,7 @@ var DinewayRuntime = class DinewayRuntime {
 		const mediaProviderEntries = deps.mediaProviderEntries ?? [];
 		const providerContext = {
 			db,
+			getDb: resolveDb,
 			storage
 		};
 		for (const entry of mediaProviderEntries) try {
@@ -940,15 +940,12 @@ var DinewayRuntime = class DinewayRuntime {
 			const result = await pipelineRef.current.invokeCronHook(pluginId, event);
 			if (!result.success && result.error) throw result.error;
 		};
-		pipeline.setContextFactory({
-			db,
-			emailPipeline
-		});
+		pipeline.setContextFactory({ emailPipeline });
 		let cronExecutor = null;
 		const runtimeRef = { current: null };
 		await phase("rt.cron", "Cron init (recovery deferred post-response)", async () => {
 			try {
-				cronExecutor = new CronExecutor(db, invokeCronHook);
+				cronExecutor = new CronExecutor(resolveDb, invokeCronHook);
 				const executorForRecovery = cronExecutor;
 				after(async () => {
 					try {
@@ -979,6 +976,18 @@ var DinewayRuntime = class DinewayRuntime {
 				console.warn("[cron] Failed to initialize cron system:", error);
 			}
 		});
+		await phase("rt.pluginLifecycle", "Configured plugin first-start lifecycle", async () => {
+			const stateRepository = new PluginStateRepository(db);
+			for (const plugin of deps.plugins) {
+				if (pluginStates.has(plugin.id)) continue;
+				const installFailure = (await pipeline.runPluginInstall(plugin.id)).find((result) => !result.success);
+				if (installFailure) throw new Error(`Plugin install failed for "${plugin.id}": ${installFailure.error?.message ?? "Unknown error"}`);
+				const activateFailure = (await pipeline.runPluginActivate(plugin.id)).find((result) => !result.success);
+				if (activateFailure) throw new Error(`Plugin activation failed for "${plugin.id}": ${activateFailure.error?.message ?? "Unknown error"}`);
+				await stateRepository.enable(plugin.id, plugin.version);
+				pluginStates.set(plugin.id, "active");
+			}
+		});
 		const runtime = new DinewayRuntime(db, storage, deps.plugins, sandboxedPlugins, deps.sandboxedPluginEntries, pipeline, enabledPlugins, pluginStates, deps.config, mediaProviders, mediaProviderEntries, cronExecutor, cronScheduler, emailPipeline, allPipelinePlugins, pipelineFactoryOptions, deps, pipelineRef);
 		runtimeRef.current = runtime;
 		return runtime;
@@ -1030,9 +1039,9 @@ var DinewayRuntime = class DinewayRuntime {
 					}
 				})();
 				if (collectionCount.count === 0 && !setupDone) {
-					const { applySeed } = await import("../apply-CX3no7XE.mjs").then((n) => n.n);
-					const { loadSeed } = await import("../load-xE01Jm0V.mjs").then((n) => n.r);
-					const { validateSeed } = await import("../validate-7SYRbz2f.mjs").then((n) => n.n);
+					const { applySeed } = await import("../apply-bZswmZPm.mjs").then((n) => n.n);
+					const { loadSeed } = await import("../load-DmYeniXl.mjs").then((n) => n.r);
+					const { validateSeed } = await import("../validate-DNs0pTSc.mjs").then((n) => n.n);
 					const seed = await loadSeed();
 					if (validateSeed(seed).valid) {
 						await applySeed(db, seed, { onConflict: "skip" });
@@ -1130,7 +1139,10 @@ var DinewayRuntime = class DinewayRuntime {
 						const routeMeta = /* @__PURE__ */ new Map();
 						for (const entry of bundle.manifest.routes) {
 							const normalized = normalizeManifestRoute(entry);
-							routeMeta.set(normalized.name, { public: normalized.public === true });
+							routeMeta.set(normalized.name, {
+								public: normalized.public === true,
+								body: "json"
+							});
 						}
 						sandboxedRouteMetaCache.set(plugin.pluginId, routeMeta);
 					}
@@ -1238,7 +1250,9 @@ var DinewayRuntime = class DinewayRuntime {
 				sandboxed: true,
 				adminMode: hasAdminPages || hasWidgets ? "blocks" : "none",
 				adminPages: entry.adminPages ?? [],
-				dashboardWidgets: entry.adminWidgets ?? []
+				dashboardWidgets: entry.adminWidgets ?? [],
+				portableTextBlocks: entry.portableTextBlocks,
+				fieldWidgets: entry.fieldWidgets
 			};
 		}
 		for (const [pluginId, meta] of marketplaceManifestCache) {
@@ -1318,11 +1332,13 @@ var DinewayRuntime = class DinewayRuntime {
 			authorId: body.authorId,
 			bylines: body.bylines
 		});
-		if (result.success && result.data) this.runAfterSaveHooks(contentItemToRecord(result.data.item), collection, true);
+		if (result.success && result.data) {
+			await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
+			this.runAfterSaveHooks(contentItemToRecord(result.data.item), collection, true);
+		}
 		return result;
 	}
 	async handleContentUpdate(collection, id, body) {
-		const { ContentRepository } = await import("../content-QaryevFO.mjs").then((n) => n.n);
 		const repo = new ContentRepository(this.db);
 		const resolvedItem = await repo.findByIdOrSlug(collection, id, body.locale);
 		const resolvedId = resolvedItem?.id ?? id;
@@ -1393,7 +1409,21 @@ var DinewayRuntime = class DinewayRuntime {
 			authorId: bodyWithoutRev.authorId,
 			bylines: bodyWithoutRev.bylines
 		});
-		if (result.success && result.data) this.runAfterSaveHooks(contentItemToRecord(result.data.item), collection, false);
+		if (result.success && result.data) {
+			const contentIdsToRefresh = [resolvedId];
+			if (!usesDraftRevisions && processedData) try {
+				contentIdsToRefresh.push(...await findNonTranslatableSiblingContentIds(this.db, collection, resolvedId, result.data.item.translationGroup, processedData));
+			} catch (error) {
+				console.error(`[media-usage] Failed to discover synced i18n siblings for ${collection}/${resolvedId}:`, error);
+				try {
+					await markContentMediaUsageCollectionStale(this.db, collection, "CONTENT_USAGE_REFRESH_ERROR");
+				} catch (staleError) {
+					console.error(`[media-usage] Failed to mark ${collection} stale:`, staleError);
+				}
+			}
+			await this.refreshContentUsageAfterSuccessfulWrite(collection, contentIdsToRefresh);
+			this.runAfterSaveHooks(contentItemToRecord(result.data.item), collection, false);
+		}
 		return result;
 	}
 	async handleContentDelete(collection, id) {
@@ -1414,48 +1444,81 @@ var DinewayRuntime = class DinewayRuntime {
 				message: "Delete blocked by sandboxed plugin hook"
 			}
 		};
+		const contentId = await this.resolveContentId(collection, id, false);
 		const result = await handleContentDelete(this.db, collection, id);
-		if (result.success) this.runAfterDeleteHooks(id, collection, false);
+		if (result.success) {
+			if (contentId) await this.refreshContentUsageAfterSuccessfulWrite(collection, [contentId]);
+			this.runAfterDeleteHooks(id, collection, false);
+		}
 		return result;
 	}
 	async handleContentListTrashed(collection, params = {}) {
 		return handleContentListTrashed(this.db, collection, params);
 	}
 	async handleContentRestore(collection, id) {
-		return handleContentRestore(this.db, collection, id);
+		const result = await handleContentRestore(this.db, collection, id);
+		if (result.success) {
+			await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
+			this.runAfterRestoreHooks(contentItemToRecord(result.data.item), collection);
+		}
+		return result;
 	}
 	async handleContentPermanentDelete(collection, id) {
+		const contentId = await this.resolveContentId(collection, id, true);
 		const result = await handleContentPermanentDelete(this.db, collection, id);
-		if (result.success) this.runAfterDeleteHooks(id, collection, true);
+		if (result.success) {
+			if (contentId) await this.deleteContentUsageAfterSuccessfulPermanentDelete(collection, contentId);
+			this.runAfterDeleteHooks(id, collection, true);
+		}
 		return result;
 	}
 	async handleContentCountTrashed(collection) {
 		return handleContentCountTrashed(this.db, collection);
 	}
 	async handleContentDuplicate(collection, id, authorId) {
-		return handleContentDuplicate(this.db, collection, id, authorId);
+		const result = await handleContentDuplicate(this.db, collection, id, authorId);
+		if (result.success && result.data) await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
+		return result;
 	}
 	async handleContentPublish(collection, id, options = {}) {
 		const result = await handleContentPublish(this.db, collection, id, options);
-		if (result.success && result.data) this.runAfterPublishHooks(contentItemToRecord(result.data.item), collection);
+		if (result.success && result.data) {
+			await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
+			this.runAfterPublishHooks(contentItemToRecord(result.data.item), collection);
+		}
 		return result;
 	}
 	async handleContentUnpublish(collection, id) {
 		const result = await handleContentUnpublish(this.db, collection, id);
-		if (result.success && result.data) this.runAfterUnpublishHooks(contentItemToRecord(result.data.item), collection);
+		if (result.success && result.data) {
+			await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
+			this.runAfterUnpublishHooks(contentItemToRecord(result.data.item), collection);
+		}
 		return result;
 	}
 	async handleContentSchedule(collection, id, scheduledAt) {
-		return handleContentSchedule(this.db, collection, id, scheduledAt);
+		const result = await handleContentSchedule(this.db, collection, id, scheduledAt);
+		if (result.success && result.data) {
+			await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
+			this.runAfterScheduleHooks(contentItemToRecord(result.data.item), collection);
+		}
+		return result;
 	}
 	async handleContentUnschedule(collection, id) {
-		return handleContentUnschedule(this.db, collection, id);
+		const result = await handleContentUnschedule(this.db, collection, id);
+		if (result.success && result.data) {
+			await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
+			this.runAfterUnscheduleHooks(contentItemToRecord(result.data.item), collection);
+		}
+		return result;
 	}
 	async handleContentCountScheduled(collection) {
 		return handleContentCountScheduled(this.db, collection);
 	}
 	async handleContentDiscardDraft(collection, id) {
-		return handleContentDiscardDraft(this.db, collection, id);
+		const result = await handleContentDiscardDraft(this.db, collection, id);
+		if (result.success && result.data) await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
+		return result;
 	}
 	async handleContentCompare(collection, id) {
 		return handleContentCompare(this.db, collection, id);
@@ -1463,6 +1526,25 @@ var DinewayRuntime = class DinewayRuntime {
 	async handleContentTranslations(collection, id) {
 		return handleContentTranslations(this.db, collection, id);
 	}
+	async refreshContentUsageAfterSuccessfulWrite(collection, contentIds) {
+		for (const contentId of new Set(contentIds)) try {
+			await refreshContentMediaUsageAfterWrite(this.db, collection, contentId);
+		} catch (error) {
+			console.error(`[media-usage] Failed after content write ${collection}/${contentId}:`, error);
+		}
+	}
+	async deleteContentUsageAfterSuccessfulPermanentDelete(collection, contentId) {
+		try {
+			const result = await deleteContentMediaUsage(this.db, collection, contentId);
+			if (!result.success) console.error(`[media-usage] Usage delete for ${collection}/${contentId} finished with ${result.errorCode}`);
+		} catch (error) {
+			console.error(`[media-usage] Failed after permanent content delete ${collection}/${contentId}:`, error);
+		}
+	}
+	async resolveContentId(collection, id, includeTrashed) {
+		const repo = new ContentRepository(this.db);
+		return (includeTrashed ? await repo.findByIdOrSlugIncludingTrashed(collection, id) : await repo.findByIdOrSlug(collection, id))?.id ?? null;
+	}
 	async handleMediaList(params) {
 		return handleMediaList(this.db, params);
 	}
@@ -1526,7 +1608,12 @@ var DinewayRuntime = class DinewayRuntime {
 		if (trustedPlugin) {
 			const route = trustedPlugin.routes[routeKey];
 			if (!route) return null;
-			return { public: route.public === true };
+			return {
+				public: route.public === true,
+				body: route.body ?? "json",
+				...route.body === "raw" ? { maxBodyBytes: route.maxBodyBytes ?? DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES } : {},
+				authorization: route.authorization
+			};
 		}
 		const meta = sandboxedRouteMetaCache.get(pluginId);
 		if (meta) {
@@ -1535,14 +1622,23 @@ var DinewayRuntime = class DinewayRuntime {
 		}
 		if (routeKey === "admin") {
 			const manifestMeta = marketplaceManifestCache.get(pluginId);
-			if (manifestMeta?.admin?.pages?.length || manifestMeta?.admin?.widgets?.length) return { public: false };
+			if (manifestMeta?.admin?.pages?.length || manifestMeta?.admin?.widgets?.length) return {
+				public: false,
+				body: "json"
+			};
 			const entry = this.sandboxedPluginEntries.find((e) => e.id === pluginId);
-			if (entry?.adminPages?.length || entry?.adminWidgets?.length) return { public: false };
+			if (entry?.adminPages?.length || entry?.adminWidgets?.length) return {
+				public: false,
+				body: "json"
+			};
 		}
-		if (this.findSandboxedPlugin(pluginId)) return { public: false };
+		if (this.findSandboxedPlugin(pluginId)) return {
+			public: false,
+			body: "json"
+		};
 		return null;
 	}
-	async handlePluginApiRoute(pluginId, _method, path, request) {
+	async handlePluginApiRoute(pluginId, _method, path, request, invocation) {
 		if (!this.isPluginEnabled(pluginId)) return {
 			success: false,
 			error: {
@@ -1555,22 +1651,41 @@ var DinewayRuntime = class DinewayRuntime {
 			const routeRegistry = new PluginRouteRegistry({
 				...this.pipelineFactoryOptions,
 				db: this.db,
+				storage: this.storage ?? void 0,
 				emailPipeline: this.email ?? void 0,
 				trustedProxyHeaders: getTrustedProxyHeaders(this.config)
 			});
 			routeRegistry.register(trustedPlugin);
 			const routeKey = path.replace(LEADING_SLASH_PATTERN, "");
+			const trustedRoute = trustedPlugin.routes[routeKey];
+			if ((trustedRoute?.body ?? "json") === "raw") {
+				const bodyResult = await readBoundedPluginRouteBody(request, trustedRoute?.maxBodyBytes ?? DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES);
+				if (!bodyResult.ok) return {
+					success: false,
+					error: {
+						code: "PAYLOAD_TOO_LARGE",
+						message: `Plugin route request body exceeds ${bodyResult.limit} bytes`
+					},
+					status: 413
+				};
+				return routeRegistry.invoke(pluginId, routeKey, {
+					request,
+					rawBody: bodyResult.bytes,
+					actor: invocation?.actor
+				});
+			}
 			let body = void 0;
 			try {
 				body = await request.json();
 			} catch {}
 			return routeRegistry.invoke(pluginId, routeKey, {
 				request,
-				body
+				body,
+				actor: invocation?.actor
 			});
 		}
 		const sandboxedPlugin = this.findSandboxedPlugin(pluginId);
-		if (sandboxedPlugin) return this.handleSandboxedRoute(sandboxedPlugin, path, request);
+		if (sandboxedPlugin) return this.handleSandboxedRoute(sandboxedPlugin, path, request, invocation?.actor);
 		return {
 			success: false,
 			error: {
@@ -1685,11 +1800,42 @@ var DinewayRuntime = class DinewayRuntime {
 		}
 	}
 	runAfterPublishHooks(content, collection) {
+		this.runDeferredContentHook("content:afterPublish", content, collection);
+	}
+	runAfterUnpublishHooks(content, collection) {
+		this.runDeferredContentHook("content:afterUnpublish", content, collection);
+	}
+	runAfterRestoreHooks(content, collection) {
+		this.runDeferredContentHook("content:afterRestore", content, collection);
+	}
+	runAfterScheduleHooks(content, collection) {
+		this.runDeferredContentHook("content:afterSchedule", content, collection);
+	}
+	runAfterUnscheduleHooks(content, collection) {
+		this.runDeferredContentHook("content:afterUnschedule", content, collection);
+	}
+	runDeferredContentHook(name, content, collection) {
 		after(async () => {
-			if (this.hooks.hasHooks("content:afterPublish")) try {
-				await this.hooks.runContentAfterPublish(content, collection);
+			if (this.hooks.hasHooks(name)) try {
+				switch (name) {
+					case "content:afterPublish":
+						await this.hooks.runContentAfterPublish(content, collection);
+						break;
+					case "content:afterUnpublish":
+						await this.hooks.runContentAfterUnpublish(content, collection);
+						break;
+					case "content:afterRestore":
+						await this.hooks.runContentAfterRestore(content, collection);
+						break;
+					case "content:afterSchedule":
+						await this.hooks.runContentAfterSchedule(content, collection);
+						break;
+					case "content:afterUnschedule":
+						await this.hooks.runContentAfterUnschedule(content, collection);
+						break;
+				}
 			} catch (err) {
-				console.error("Dineway afterPublish hook error:", err);
+				console.error(`Dineway ${name} hook error:`, err);
 			}
 			const tasks = [];
 			for (const [pluginKey, plugin] of this.sandboxedPlugins) {
@@ -1697,30 +1843,19 @@ var DinewayRuntime = class DinewayRuntime {
 				if (!pluginId || !this.isPluginEnabled(pluginId)) continue;
 				tasks.push((async () => {
 					try {
-						await plugin.invokeHook("content:afterPublish", {
+						await plugin.invokeHook(name, {
 							content,
 							collection
 						});
 					} catch (err) {
-						console.error(`Dineway: Sandboxed plugin ${pluginId} afterPublish error:`, err);
+						console.error(`Dineway: Sandboxed plugin ${pluginId} ${name} error:`, err);
 					}
 				})());
 			}
 			await Promise.allSettled(tasks);
 		});
 	}
-	runAfterUnpublishHooks(content, collection) {
-		if (this.hooks.hasHooks("content:afterUnpublish")) this.hooks.runContentAfterUnpublish(content, collection).catch((err) => console.error("Dineway afterUnpublish hook error:", err));
-		for (const [pluginKey, plugin] of this.sandboxedPlugins) {
-			const [pluginId] = pluginKey.split(":");
-			if (!pluginId || !this.isPluginEnabled(pluginId)) continue;
-			plugin.invokeHook("content:afterUnpublish", {
-				content,
-				collection
-			}).catch((err) => console.error(`Dineway: Sandboxed plugin ${pluginId} afterUnpublish error:`, err));
-		}
-	}
-	async handleSandboxedRoute(plugin, path, request) {
+	async handleSandboxedRoute(plugin, path, request, actor) {
 		const routeName = path.replace(LEADING_SLASH_PATTERN, "");
 		let body = void 0;
 		try {
@@ -1735,7 +1870,8 @@ var DinewayRuntime = class DinewayRuntime {
 					url: request.url,
 					method: request.method,
 					headers,
-					meta
+					meta,
+					actor: actor ?? null
 				})
 			};
 		} catch (error) {
@@ -1982,9 +2118,9 @@ function setBaselineSecurityHeaders(response, pathname, serverTimings) {
 	const res = new Response(response.body, response);
 	const astroCookies = Reflect.get(response, ASTRO_COOKIES_SYMBOL);
 	if (astroCookies !== void 0) Reflect.set(res, ASTRO_COOKIES_SYMBOL, astroCookies);
-	res.headers.set("X-Content-Type-Options", "nosniff");
-	res.headers.set("Referrer-Policy", "strict-origin-when-cross-origin");
-	res.headers.set("Permissions-Policy", "camera=(), microphone=(), geolocation=(), payment=()");
+	if (!res.headers.has("X-Content-Type-Options")) res.headers.set("X-Content-Type-Options", "nosniff");
+	if (!res.headers.has("Referrer-Policy")) res.headers.set("Referrer-Policy", "strict-origin-when-cross-origin");
+	if (!res.headers.has("Permissions-Policy")) res.headers.set("Permissions-Policy", "camera=(), microphone=(), geolocation=(), payment=()");
 	const shouldSetFrameOptions = !import.meta.env.DEV || pathname.startsWith("/_dineway");
 	if (!res.headers.has("Content-Security-Policy") && shouldSetFrameOptions) res.headers.set("X-Frame-Options", "SAMEORIGIN");
 	if (serverTimings && serverTimings.length > 0) res.headers.set("Server-Timing", formatServerTimingHeader(serverTimings));
@@ -2059,11 +2195,11 @@ const onRequest = defineMiddleware(async (context, next) => {
 		const requestDb = locals.__dinewayRequestDb;
 		if (!isDinewayRoute && !isPublicRuntimeRoute && !hasEditCookie && !hasPreviewToken) {
 			const hasSessionCookie = cookies.get("astro-session") !== void 0;
-			if (!(context.isPrerendered || !hasSessionCookie ? null : await context.session?.get("user")) && !requestDb) {
-				if (!isSetupVerified()) {
+			if (!(context.isPrerendered || !hasSessionCookie ? null : await resolveSessionUser(context.session)) && !requestDb) {
+				if (!isSetupVerified() && !context.isPrerendered) {
 					const setupStart = startServerTiming(serverTimings);
 					try {
-						const { getDb } = await import("../loader-tg63WSY2.mjs").then((n) => n.i);
+						const { getDb } = await import("../loader-CjWqjweO.mjs").then((n) => n.i);
 						await (await getDb()).selectFrom("_dineway_migrations").selectAll().limit(1).execute();
 						markSetupVerified();
 					} catch (error) {
@@ -2117,6 +2253,7 @@ const onRequest = defineMiddleware(async (context, next) => {
 				locals.dineway = {
 					handleContentList: runtime.handleContentList.bind(runtime),
 					handleContentGet: runtime.handleContentGet.bind(runtime),
+					handleContentAuthors: runtime.handleContentAuthors.bind(runtime),
 					handleContentCreate: runtime.handleContentCreate.bind(runtime),
 					handleContentUpdate: runtime.handleContentUpdate.bind(runtime),
 					handleContentDelete: runtime.handleContentDelete.bind(runtime),
@@ -2145,6 +2282,7 @@ const onRequest = defineMiddleware(async (context, next) => {
 					handlePluginApiRoute: runtime.handlePluginApiRoute.bind(runtime),
 					handlePublicPluginApiRoute: createPublicPluginApiRouteHandler(runtime),
 					getPluginRouteMeta: runtime.getPluginRouteMeta.bind(runtime),
+					getPluginHttpAccess: runtime.getPluginHttpAccess.bind(runtime),
 					getMediaProvider: runtime.getMediaProvider.bind(runtime),
 					getMediaProviderList: runtime.getMediaProviderList.bind(runtime),
 					collectPageMetadata: runtime.collectPageMetadata.bind(runtime),
@@ -2156,6 +2294,7 @@ const onRequest = defineMiddleware(async (context, next) => {
 					hooks: runtime.hooks,
 					email: runtime.email,
 					configuredPlugins: runtime.configuredPlugins,
+					sandboxedPluginEntries: runtime.sandboxedPluginEntries,
 					config,
 					getManifest: runtime.getManifest.bind(runtime),
 					invalidateManifest: runtime.invalidateManifest.bind(runtime),
@@ -2179,10 +2318,12 @@ const onRequest = defineMiddleware(async (context, next) => {
 			return runWithContext(parentContext ? {
 				...parentContext,
 				editMode,
-				db: requestDb
+				db: requestDb,
+				dbIsIsolated: true
 			} : {
 				editMode,
-				db: requestDb
+				db: requestDb,
+				dbIsIsolated: true
 			}, doInit);
 		}
 		return doInit();