dineway 0.1.49 → 0.2.1

package/dist/media/image-endpoint.mjs

@@ -0,0 +1,111 @@
+import { t as INTERNAL_MEDIA_PREFIX } from "../normalize-Cyt7JdF7.mjs";
+
+//#region src/media/image-endpoint.ts
+/**
+* Portable helpers shared by image-endpoint modules.
+*
+* Dineway wraps Astro's image endpoint so source bytes for Dineway media can be
+* read directly from the storage adapter instead of fetched over HTTP.
+*/
+const ALLOWED_TRANSFORM_FORMATS = [
+	"webp",
+	"avif",
+	"jpeg",
+	"png"
+];
+const DEFAULT_TRANSFORM_FORMAT = "webp";
+const MAX_TRANSFORM_DIMENSION = 4e3;
+const IMMUTABLE_IMAGE_CACHE = "public, max-age=31536000, immutable";
+const SAFE_INLINE_IMAGE_TYPES = new Set([
+	"image/jpeg",
+	"image/png",
+	"image/gif",
+	"image/webp",
+	"image/avif",
+	"image/x-icon"
+]);
+function originalMediaHeaders(contentType) {
+	return {
+		"Content-Type": contentType,
+		"Cache-Control": IMMUTABLE_IMAGE_CACHE,
+		"X-Content-Type-Options": "nosniff",
+		"Content-Security-Policy": "sandbox; default-src 'none'; img-src 'self'; style-src 'unsafe-inline'",
+		"Content-Disposition": SAFE_INLINE_IMAGE_TYPES.has(contentType) ? "inline" : "attachment"
+	};
+}
+const SAFE_STORAGE_KEY_SEGMENT = /^[A-Za-z0-9._-]+$/;
+const DECIMAL_DIGITS = /^\d+$/;
+function isSafeTransformKey(key) {
+	const segments = key.split("/");
+	return segments.length > 0 && segments.every((segment) => segment !== "" && segment !== "." && segment !== ".." && SAFE_STORAGE_KEY_SEGMENT.test(segment));
+}
+function matchInternalMediaKey(href) {
+	if (!href) return null;
+	let pathname;
+	try {
+		pathname = new URL(href, "http://localhost").pathname;
+	} catch {
+		return null;
+	}
+	if (!pathname.startsWith(INTERNAL_MEDIA_PREFIX)) return null;
+	const key = pathname.slice(INTERNAL_MEDIA_PREFIX.length);
+	if (!key || !isSafeTransformKey(key)) return null;
+	return key;
+}
+function isTransformFormat(value) {
+	return ALLOWED_TRANSFORM_FORMATS.includes(value);
+}
+function parseTransformParams(params) {
+	const width = parseDimension(params.get("w"));
+	if (width === null) return {
+		ok: false,
+		message: "Invalid 'w' (width)"
+	};
+	if (width === void 0) return {
+		ok: false,
+		message: "Missing 'w' (width)"
+	};
+	const height = parseDimension(params.get("h"));
+	if (height === null) return {
+		ok: false,
+		message: "Invalid 'h' (height)"
+	};
+	const formatRaw = params.get("f");
+	let format = DEFAULT_TRANSFORM_FORMAT;
+	if (formatRaw !== null) {
+		if (!isTransformFormat(formatRaw)) return {
+			ok: false,
+			message: `Unsupported 'f' (format): ${formatRaw}`
+		};
+		format = formatRaw;
+	}
+	const qualityRaw = params.get("q");
+	let quality;
+	if (qualityRaw !== null) {
+		const parsedQuality = Number(qualityRaw);
+		if (!Number.isInteger(parsedQuality) || parsedQuality < 1 || parsedQuality > 100) return {
+			ok: false,
+			message: "Invalid 'q' (quality), expected 1-100"
+		};
+		quality = parsedQuality;
+	}
+	return {
+		ok: true,
+		options: {
+			width,
+			height,
+			format,
+			quality
+		}
+	};
+}
+function parseDimension(raw) {
+	if (raw === null) return void 0;
+	if (!DECIMAL_DIGITS.test(raw)) return null;
+	const parsed = Number(raw);
+	if (parsed < 1 || parsed > MAX_TRANSFORM_DIMENSION) return null;
+	return parsed;
+}
+
+//#endregion
+export { ALLOWED_TRANSFORM_FORMATS, DEFAULT_TRANSFORM_FORMAT, IMMUTABLE_IMAGE_CACHE, MAX_TRANSFORM_DIMENSION, isSafeTransformKey, isTransformFormat, matchInternalMediaKey, originalMediaHeaders, parseTransformParams };

package/dist/media/index.d.mts

@@ -1,5 +1,30 @@
-import { _ as MediaValue, a as ComponentEmbed, b as mediaItemToValue, c as EmbedResult, d as MediaListResult, f as MediaProvider, g as MediaUploadInput, h as MediaProviderItem, i as AudioEmbed, l as ImageEmbed, m as MediaProviderDescriptor, n as generatePlaceholder, o as CreateMediaProviderFn, p as MediaProviderCapabilities, r as normalizeMediaValue, s as EmbedOptions, t as PlaceholderData, u as MediaListOptions, v as ThumbnailOptions, y as VideoEmbed } from "../placeholder-CXfoCtCd.mjs";
+import { _ as MediaValue, a as ComponentEmbed, b as mediaItemToValue, c as EmbedResult, d as MediaListResult, f as MediaProvider, g as MediaUploadInput, h as MediaProviderItem, i as AudioEmbed, l as ImageEmbed, m as MediaProviderDescriptor, n as generatePlaceholder, o as CreateMediaProviderFn, p as MediaProviderCapabilities, r as normalizeMediaValue, s as EmbedOptions, t as PlaceholderData, u as MediaListOptions, v as ThumbnailOptions, y as VideoEmbed } from "../placeholder-DkWkXfDI.mjs";
 
+//#region src/media/enrich.d.ts
+/**
+ * Image Metadata Enrichment
+ *
+ * Derives dimensions and LQIP placeholders from image bytes. Server-side media
+ * creation paths share this helper so direct uploads, signed upload confirms,
+ * imports, and plugin uploads store consistent image metadata.
+ */
+interface EnrichedImageMetadata {
+  width?: number;
+  height?: number;
+  blurhash?: string;
+  dominantColor?: string;
+}
+declare function enrichImageMetadata(bytes: Uint8Array, contentType: string, opts?: {
+  knownDimensions?: {
+    width: number;
+    height: number;
+  };
+  placeholder?: {
+    bytes: Uint8Array;
+    contentType: string;
+  };
+}): Promise<EnrichedImageMetadata>;
+//#endregion
 //#region src/media/local.d.ts
 interface LocalMediaConfig {
   /** Whether the local provider is enabled (default true) */
@@ -22,4 +47,4 @@ interface LocalMediaConfig {
  */
 declare function localMedia(config?: LocalMediaConfig): MediaProviderDescriptor;
 //#endregion
-export { type AudioEmbed, type ComponentEmbed, type CreateMediaProviderFn, type EmbedOptions, type EmbedResult, type ImageEmbed, type LocalMediaConfig, type MediaListOptions, type MediaListResult, type MediaProvider, type MediaProviderCapabilities, type MediaProviderDescriptor, type MediaProviderItem, type MediaUploadInput, type MediaValue, type PlaceholderData, type ThumbnailOptions, type VideoEmbed, generatePlaceholder, localMedia, mediaItemToValue, normalizeMediaValue };
+export { type AudioEmbed, type ComponentEmbed, type CreateMediaProviderFn, type EmbedOptions, type EmbedResult, type EnrichedImageMetadata, type ImageEmbed, type LocalMediaConfig, type MediaListOptions, type MediaListResult, type MediaProvider, type MediaProviderCapabilities, type MediaProviderDescriptor, type MediaProviderItem, type MediaUploadInput, type MediaValue, type PlaceholderData, type ThumbnailOptions, type VideoEmbed, enrichImageMetadata, generatePlaceholder, localMedia, mediaItemToValue, normalizeMediaValue };

package/dist/media/index.mjs

@@ -1,5 +1,5 @@
-import { n as normalizeMediaValue } from "../normalize-ByemhhfW.mjs";
-import { t as generatePlaceholder } from "../placeholder-d54Qr_7n.mjs";
+import { n as normalizeMediaValue } from "../normalize-Cyt7JdF7.mjs";
+import { n as generatePlaceholder, t as enrichImageMetadata } from "../enrich-Ck9tfMqe.mjs";
 
 //#region src/media/types.ts
 /**
@@ -13,6 +13,8 @@ function mediaItemToValue(providerId, item) {
 		mimeType: item.mimeType,
 		width: item.width,
 		height: item.height,
+		blurhash: item.blurhash,
+		dominantColor: item.dominantColor,
 		alt: item.alt,
 		meta: item.meta
 	};
@@ -52,4 +54,4 @@ function localMedia(config = {}) {
 }
 
 //#endregion
-export { generatePlaceholder, localMedia, mediaItemToValue, normalizeMediaValue };
+export { enrichImageMetadata, generatePlaceholder, localMedia, mediaItemToValue, normalizeMediaValue };

package/dist/media/local-runtime.d.mts

@@ -1,14 +1,13 @@
-import "../runtime-C4-2lSFg.mjs";
-import { t as Database } from "../types-CuJOqHfM.mjs";
-import "../types-DSPGWjxO.mjs";
-import "../types-Dryvv7LH.mjs";
-import { h as MediaProviderItem, o as CreateMediaProviderFn } from "../placeholder-CXfoCtCd.mjs";
-import "../runner-09sTqtv0.mjs";
-import "../index-CZiWCQDp.mjs";
-import { d as Storage } from "../types-DZpT-PnG.mjs";
-import "../byline-fields-uJlygdzM.mjs";
-import "../types-GaCtZ1k9.mjs";
-import "../validate-DzjCdy6v.mjs";
+import "../types-DwoUifGE.mjs";
+import { t as Database } from "../types-DuQn1G7-.mjs";
+import { h as MediaProviderItem, o as CreateMediaProviderFn } from "../placeholder-DkWkXfDI.mjs";
+import "../runner-D6hzs8L9.mjs";
+import "../index-DcnOCD1e.mjs";
+import "../types-g0zMtraY.mjs";
+import { d as Storage } from "../types-wFu80FrO.mjs";
+import "../validate-CbVFoJgc.mjs";
+import "../byline-fields-Ckeqd1OY.mjs";
+import "../types-Cw0PeCT_.mjs";
 import "../index.mjs";
 import { Kysely } from "kysely";
 
@@ -16,6 +15,11 @@ import { Kysely } from "kysely";
 interface LocalMediaRuntimeConfig {
   enabled?: boolean;
   db?: Kysely<Database>;
+  /**
+   * Resolver for the current database connection. Runtime code injects this
+   * so media provider operations honor request-scoped database overrides.
+   */
+  getDb?: () => Kysely<Database>;
   storage?: Storage;
 }
 /**

package/dist/media/local-runtime.mjs

@@ -1,6 +1,6 @@
 import "../base64-F8-DUraK.mjs";
-import "../types-CSgR9nQB.mjs";
-import { t as MediaRepository } from "../media-CbKyYukG.mjs";
+import "../types-ChxYDRvx.mjs";
+import { t as MediaRepository } from "../media-CVMOoywq.mjs";
 
 //#region src/media/local-runtime.ts
 /**
@@ -9,10 +9,11 @@ import { t as MediaRepository } from "../media-CbKyYukG.mjs";
 const createMediaProvider = (config) => {
 	const { db, storage } = config;
 	if (!db) throw new Error("Local media provider requires database connection");
-	const repo = new MediaRepository(db);
+	const resolveDb = config.getDb ?? (() => db);
+	const repo = () => new MediaRepository(resolveDb());
 	return {
 		async list(options) {
-			const result = await repo.findMany({
+			const result = await repo().findMany({
 				cursor: options.cursor,
 				limit: options.limit,
 				mimeType: options.mimeType
@@ -38,7 +39,7 @@ const createMediaProvider = (config) => {
 			};
 		},
 		async get(id) {
-			const item = await repo.findById(id);
+			const item = await repo().findById(id);
 			if (!item) return null;
 			return {
 				id: item.id,
@@ -62,12 +63,13 @@ const createMediaProvider = (config) => {
 			throw new Error("Local upload should use /_dineway/api/media endpoint");
 		},
 		async delete(id) {
-			const item = await repo.findById(id);
+			const repoInstance = repo();
+			const item = await repoInstance.findById(id);
 			if (!item) return;
 			if (storage) try {
 				await storage.delete(item.storageKey);
 			} catch {}
-			await repo.delete(id);
+			await repoInstance.delete(id);
 		},
 		getEmbed(value, _options) {
 			const src = `/_dineway/api/media/file/${typeof value.meta?.storageKey === "string" ? value.meta.storageKey : value.id}`;

package/dist/{media-CbKyYukG.mjs → media-CVMOoywq.mjs}

@@ -1,4 +1,4 @@
-import { i as encodeCursor, r as decodeCursor } from "./types-CSgR9nQB.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-ChxYDRvx.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 
@@ -65,6 +65,8 @@ var MediaRepository = class {
 		if (metadata?.width !== void 0) updates.width = metadata.width;
 		if (metadata?.height !== void 0) updates.height = metadata.height;
 		if (metadata?.size !== void 0) updates.size = metadata.size;
+		if (metadata?.blurhash !== void 0) updates.blurhash = metadata.blurhash;
+		if (metadata?.dominantColor !== void 0) updates.dominant_color = metadata.dominantColor;
 		await this.db.updateTable("media").set(updates).where("id", "=", id).execute();
 		return this.findById(id);
 	}

package/dist/{media-allowlist-BYxJIcTO.mjs → media-allowlist-zDNJmXCo.mjs}

@@ -1,4 +1,4 @@
-import { r as parseAllowedMimeTypes } from "./mime-CbKsKDCB.mjs";
+import { r as parseAllowedMimeTypes } from "./mime-C0vOHFm7.mjs";
 
 //#region src/api/handlers/media-allowlist.ts
 /**

package/dist/media-url-BdoLPvg8.mjs

@@ -0,0 +1,20 @@
+//#region src/seo/media-url.ts
+/**
+* Resolve a stored SEO image reference to a URL.
+*
+* SEO image values can be stored as:
+* - absolute URLs, which are returned unchanged;
+* - root-relative media paths, which are prefixed with the site URL;
+* - bare media IDs, which are expanded to the Dineway media API path.
+*/
+const TRAILING_SLASH_RE = /\/$/;
+const ABSOLUTE_URL_RE = /^https?:\/\//i;
+function buildSeoImageUrl(imageRef, siteUrl) {
+	if (ABSOLUTE_URL_RE.test(imageRef)) return imageRef;
+	if (imageRef.startsWith("/")) return siteUrl ? `${siteUrl.replace(TRAILING_SLASH_RE, "")}${imageRef}` : imageRef;
+	const mediaPath = `/_dineway/api/media/file/${imageRef}`;
+	return siteUrl ? `${siteUrl.replace(TRAILING_SLASH_RE, "")}${mediaPath}` : mediaPath;
+}
+
+//#endregion
+export { buildSeoImageUrl as t };

package/dist/{menus-C7F0sCrC.mjs → menus-CCG2z5um.mjs}

@@ -1,11 +1,33 @@
 import { t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
-import { r as getDb } from "./loader--GOYux8M.mjs";
-import { t as CommentRepository } from "./comment-Beue8-15.mjs";
-import { r as requestCached } from "./request-cache-ho99schz.mjs";
-import { i as resolveLocaleChain, r as resolveLocale } from "./resolve-DTuDyYKs.mjs";
-import { n as sanitizeHref } from "./url-w7Mp5qAD.mjs";
+import { r as getDb } from "./loader-aWkkc1_o.mjs";
+import { n as cachedQuery, t as CacheNamespace } from "./object-cache-D51qOseS.mjs";
+import { t as CommentRepository } from "./comment-DFALgsJD.mjs";
+import { r as requestCached } from "./request-cache-CBFjCwSt.mjs";
+import { i as resolveLocaleChain, r as resolveLocale } from "./resolve-DE71WcL9.mjs";
+import { n as sanitizeHref } from "./url-EMAguGVk.mjs";
+import { t as CommentReactionRepository } from "./comment-reaction-C37bf99u.mjs";
 import { sql } from "kysely";
 
+//#region src/comments/ranking.ts
+const DEFAULT_Z = 1.96;
+const NEGATIVE_REACTIONS = new Set(["dislike", "down"]);
+function wilsonLowerBound(up, down, z = DEFAULT_Z) {
+	const n = up + down;
+	if (n <= 0) return 0;
+	const phat = up / n;
+	const z2 = z * z;
+	const denom = 1 + z2 / n;
+	return (phat + z2 / (2 * n) - z * Math.sqrt((phat * (1 - phat) + z2 / (4 * n)) / n)) / denom;
+}
+function reactionScore(counts) {
+	let up = 0;
+	let down = 0;
+	for (const [reaction, count] of Object.entries(counts)) if (NEGATIVE_REACTIONS.has(reaction)) down += count;
+	else up += count;
+	return wilsonLowerBound(up, down);
+}
+
+//#endregion
 //#region src/comments/query.ts
 /**
 * Get approved comments for a content item.
@@ -22,7 +44,15 @@ import { sql } from "kysely";
 * ```
 */
 async function getComments(options) {
-	return getCommentsWithDb(await getDb(), options);
+	const sort = options.sort ?? "oldest";
+	const withReactions = options.reactions || sort === "best";
+	return cachedQuery({
+		namespace: CacheNamespace.COMMENTS,
+		key: `comments:${options.collection}:${options.contentId}:${options.threaded ? "t" : "f"}:${withReactions ? "r" : "n"}:${sort}`,
+		load: async () => {
+			return getCommentsWithDb(await getDb(), options);
+		}
+	});
 }
 /**
 * Get approved comments with an explicit db handle.
@@ -37,15 +67,42 @@ async function getCommentsWithDb(db, options) {
 		status: "approved",
 		limit: 500
 	});
-	if (options.threaded) return {
-		items: CommentRepository.assembleThreads(result.items).map((c) => CommentRepository.toPublicComment(c)),
-		total
-	};
+	const items = options.threaded ? CommentRepository.assembleThreads(result.items).map((c) => CommentRepository.toPublicComment(c)) : result.items.map((c) => CommentRepository.toPublicComment(c));
+	if (options.reactions || options.sort === "best") {
+		await attachReactions(db, items);
+		if (options.sort === "best") sortByBest(items);
+	}
 	return {
-		items: result.items.map((c) => CommentRepository.toPublicComment(c)),
+		items,
 		total
 	};
 }
+async function attachReactions(db, items) {
+	const ids = [];
+	for (const comment of items) {
+		ids.push(comment.id);
+		for (const reply of comment.replies ?? []) ids.push(reply.id);
+	}
+	if (ids.length === 0) return;
+	const counts = await new CommentReactionRepository(db).countsForComments(ids);
+	const assign = (comment) => {
+		const reactions = counts.get(comment.id);
+		if (reactions) comment.reactions = reactions;
+	};
+	for (const comment of items) {
+		assign(comment);
+		for (const reply of comment.replies ?? []) assign(reply);
+	}
+}
+function sortByBest(items) {
+	items.sort((a, b) => {
+		const scoreDelta = reactionScore(b.reactions ?? {}) - reactionScore(a.reactions ?? {});
+		if (scoreDelta !== 0) return scoreDelta;
+		if (a.createdAt < b.createdAt) return -1;
+		if (a.createdAt > b.createdAt) return 1;
+		return 0;
+	});
+}
 /**
 * Get the count of approved comments for a content item.
 *
@@ -75,9 +132,13 @@ async function getCommentCountWithDb(db, collection, contentId) {
 */
 function getMenu(name, options = {}) {
 	const locale = resolveLocale(options.locale);
-	return requestCached(`menu:${name}:${locale ?? "*"}`, async () => {
-		return getMenuWithDb(name, await getDb(), { locale });
-	});
+	return requestCached(`menu:${name}:${locale ?? "*"}`, () => cachedQuery({
+		namespace: CacheNamespace.MENUS,
+		key: `${name}:${locale ?? "*"}`,
+		load: async () => {
+			return getMenuWithDb(name, await getDb(), { locale });
+		}
+	}));
 }
 /**
 * Get menu by name with resolved URLs (with explicit db).
@@ -182,7 +243,11 @@ async function resolveMenuItem(item, db, urlPatterns, locale) {
 				if (url === null) return null;
 				break;
 			case "collection":
-				url = `/${item.reference_collection}/`;
+				if (!item.reference_collection) return null;
+				if (item.reference_id) {
+					url = await resolveContentUrl(item.reference_collection, item.reference_id, db, urlPatterns, locale);
+					if (url === null) return null;
+				} else url = `/${item.reference_collection}/`;
 				break;
 			default: if (item.reference_collection && item.reference_id) {
 				url = await resolveContentUrl(item.reference_collection, item.reference_id, db, urlPatterns, locale);

package/dist/{menus-BZbXf-ej.mjs → menus-CmyIkRG5.mjs}

@@ -1,6 +1,7 @@
-import { a as __exportAll } from "./runner-DzIpHGND.mjs";
+import { a as __exportAll } from "./runner-BgmttQmD.mjs";
 import { n as getI18nConfig } from "./config-CVssduLe.mjs";
-import { t as withTransaction } from "./transaction-CFLhEOuH.mjs";
+import { c as invalidateMenuObjectCache } from "./object-cache-D51qOseS.mjs";
+import { t as withTransaction } from "./transaction-0LEAAy8R.mjs";
 import { ulid } from "ulidx";
 
 //#region src/database/repositories/menu.ts
@@ -175,6 +176,7 @@ var MenuRepository = class {
 				}
 			}
 		});
+		invalidateMenuObjectCache();
 		const created = await this.findById(id);
 		if (!created) throw new Error("Failed to create menu");
 		return created;
@@ -183,7 +185,10 @@ var MenuRepository = class {
 		if (!await this.findById(id)) return null;
 		const values = {};
 		if (input.label !== void 0) values.label = input.label;
-		if (Object.keys(values).length > 0) await this.db.updateTable("_dineway_menus").set(values).where("id", "=", id).execute();
+		if (Object.keys(values).length > 0) {
+			await this.db.updateTable("_dineway_menus").set(values).where("id", "=", id).execute();
+			invalidateMenuObjectCache();
+		}
 		return await this.findById(id);
 	}
 	/**
@@ -198,6 +203,7 @@ var MenuRepository = class {
 			await trx.deleteFrom("_dineway_menu_items").where("menu_id", "=", id).execute();
 			await trx.deleteFrom("_dineway_menus").where("id", "=", id).execute();
 		});
+		invalidateMenuObjectCache();
 		return true;
 	}
 	/**
@@ -250,6 +256,7 @@ var MenuRepository = class {
 			locale,
 			translation_group: id
 		}).execute();
+		invalidateMenuObjectCache();
 		return rowToMenuItem(await this.db.selectFrom("_dineway_menu_items").selectAll().where("id", "=", id).executeTakeFirstOrThrow());
 	}
 	/**
@@ -267,12 +274,17 @@ var MenuRepository = class {
 		if (input.cssClasses !== void 0) values.css_classes = input.cssClasses;
 		if (input.parentId !== void 0) values.parent_id = input.parentId;
 		if (input.sortOrder !== void 0) values.sort_order = input.sortOrder;
-		if (Object.keys(values).length > 0) await this.db.updateTable("_dineway_menu_items").set(values).where("id", "=", itemId).execute();
+		if (Object.keys(values).length > 0) {
+			await this.db.updateTable("_dineway_menu_items").set(values).where("id", "=", itemId).execute();
+			invalidateMenuObjectCache();
+		}
 		return rowToMenuItem(await this.db.selectFrom("_dineway_menu_items").selectAll().where("id", "=", itemId).executeTakeFirstOrThrow());
 	}
 	/** Delete an item scoped to its menu. Returns false if nothing was deleted. */
 	async deleteItem(menuId, itemId) {
-		return (await this.db.deleteFrom("_dineway_menu_items").where("id", "=", itemId).where("menu_id", "=", menuId).execute())[0]?.numDeletedRows !== 0n;
+		const deleted = (await this.db.deleteFrom("_dineway_menu_items").where("id", "=", itemId).where("menu_id", "=", menuId).execute())[0]?.numDeletedRows !== 0n;
+		if (deleted) invalidateMenuObjectCache();
+		return deleted;
 	}
 	/**
 	* Atomic replace: delete every existing item and re-insert in order.
@@ -310,6 +322,7 @@ var MenuRepository = class {
 			}
 			await trx.updateTable("_dineway_menus").set({ updated_at: (/* @__PURE__ */ new Date()).toISOString() }).where("id", "=", menuId).execute();
 		});
+		invalidateMenuObjectCache();
 		return { itemCount: items.length };
 	}
 	/**
@@ -317,6 +330,7 @@ var MenuRepository = class {
 	* malicious payload cannot move foreign items into this menu's siblings.
 	*/
 	async reorderItems(menuId, items) {
+		invalidateMenuObjectCache();
 		return withTransaction(this.db, async (trx) => {
 			for (const item of items) await trx.updateTable("_dineway_menu_items").set({
 				parent_id: item.parentId,

package/dist/{normalize-ByemhhfW.mjs → normalize-Cyt7JdF7.mjs}

@@ -25,7 +25,8 @@ async function normalizeMediaValue(value, getProvider) {
 	const needsDimensions = result.width == null || result.height == null;
 	const needsStorageKey = provider === "local" && !result.meta?.storageKey;
 	const needsFileInfo = !result.mimeType || !result.filename;
-	if (!(needsDimensions || needsStorageKey || needsFileInfo) || !id) return result;
+	const needsLqip = (result.mimeType ?? "").startsWith("image/") && (result.blurhash == null || result.dominantColor == null);
+	if (!(needsDimensions || needsStorageKey || needsFileInfo || needsLqip) || !id) return result;
 	const mediaProvider = getProvider(provider);
 	if (!mediaProvider?.get) return result;
 	let providerItem;
@@ -80,6 +81,8 @@ async function resolveInternalUrl(url, getProvider) {
 		mimeType: item.mimeType,
 		width: item.width,
 		height: item.height,
+		blurhash: item.blurhash,
+		dominantColor: item.dominantColor,
 		alt: item.alt,
 		meta: item.meta
 	};
@@ -92,6 +95,8 @@ function mergeProviderData(existing, item) {
 	const result = { ...existing };
 	if (result.width == null && item.width != null) result.width = item.width;
 	if (result.height == null && item.height != null) result.height = item.height;
+	if (result.blurhash == null && item.blurhash != null) result.blurhash = item.blurhash;
+	if (result.dominantColor == null && item.dominantColor != null) result.dominantColor = item.dominantColor;
 	if (!result.filename && item.filename) result.filename = item.filename;
 	if (!result.mimeType && item.mimeType) result.mimeType = item.mimeType;
 	if (!result.alt && item.alt) result.alt = item.alt;
@@ -117,6 +122,8 @@ function recordToMediaValue(obj) {
 	if (typeof obj.mimeType === "string") result.mimeType = obj.mimeType;
 	if (typeof obj.width === "number") result.width = obj.width;
 	if (typeof obj.height === "number") result.height = obj.height;
+	if (typeof obj.blurhash === "string") result.blurhash = obj.blurhash;
+	if (typeof obj.dominantColor === "string") result.dominantColor = obj.dominantColor;
 	if (typeof obj.alt === "string") result.alt = obj.alt;
 	if (isRecord(obj.meta)) result.meta = obj.meta;
 	return result;

package/dist/{oauth-authorization-DF-LCsIA.mjs → oauth-authorization-B9H7X85L.mjs}

@@ -1,8 +1,8 @@
-import { t as withTransaction } from "./transaction-CFLhEOuH.mjs";
-import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-CSMffP6q.mjs";
-import { a as hashApiToken, n as TOKEN_PREFIXES, r as generatePrefixedToken, t as ALL_VALID_SCOPES } from "./api-tokens-CYUoFGo7.mjs";
-import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "./oauth-clients-Du-V0fEm.mjs";
-import { t as lookupUserRoleAndStatus } from "./oauth-user-lookup-BFjWF8wK.mjs";
+import { t as withTransaction } from "./transaction-0LEAAy8R.mjs";
+import { a as hashApiToken, n as TOKEN_PREFIXES, r as generatePrefixedToken, t as ALL_VALID_SCOPES } from "./api-tokens-Ypaly90d.mjs";
+import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-GVhUgzEs.mjs";
+import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "./oauth-clients-Dwl32-Uj.mjs";
+import { t as lookupUserRoleAndStatus } from "./oauth-user-lookup-CMehAaKs.mjs";
 import { clampScopes, computeS256Challenge, secureCompare } from "@dineway-ai/auth";
 import { generateCodeVerifier } from "arctic";
 

package/dist/{oauth-clients-Du-V0fEm.mjs → oauth-clients-Dwl32-Uj.mjs}

@@ -1,5 +1,5 @@
-import { o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-CSMffP6q.mjs";
-import { s as validateScopes } from "./api-tokens-CYUoFGo7.mjs";
+import { s as validateScopes } from "./api-tokens-Ypaly90d.mjs";
+import { o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-GVhUgzEs.mjs";
 
 //#region src/api/oauth/redirect-uri.ts
 /**

package/dist/object-cache/memory.d.mts

@@ -0,0 +1,14 @@
+import { t as CreateObjectCacheBackendFn } from "../types-BLQCz46p.mjs";
+
+//#region src/object-cache/memory.d.ts
+/**
+ * Create the in-isolate memory backend.
+ *
+ * Config keys (all optional):
+ * - `maxEntries` — soft cap on stored keys; oldest insertions are evicted
+ *   first when exceeded (FIFO, cheap and good enough for a backstop). Default
+ *   1000.
+ */
+declare const createObjectCache: CreateObjectCacheBackendFn;
+//#endregion
+export { createObjectCache };

package/dist/object-cache/memory.mjs

@@ -0,0 +1,55 @@
+//#region src/object-cache/memory.ts
+const STORE_KEY = Symbol.for("dineway:object-cache:memory");
+const g = globalThis;
+function getStore(maxEntries) {
+	const existing = g[STORE_KEY];
+	if (existing) return existing;
+	const store = {
+		map: /* @__PURE__ */ new Map(),
+		maxEntries
+	};
+	g[STORE_KEY] = store;
+	return store;
+}
+/**
+* Create the in-isolate memory backend.
+*
+* Config keys (all optional):
+* - `maxEntries` — soft cap on stored keys; oldest insertions are evicted
+*   first when exceeded (FIFO, cheap and good enough for a backstop). Default
+*   1000.
+*/
+const createObjectCache = (config) => {
+	const store = getStore(typeof config.maxEntries === "number" ? config.maxEntries : 1e3);
+	return {
+		get(key) {
+			const entry = store.map.get(key);
+			if (!entry) return Promise.resolve(null);
+			if (entry.expiresAt !== null && entry.expiresAt <= Date.now()) {
+				store.map.delete(key);
+				return Promise.resolve(null);
+			}
+			return Promise.resolve(entry.value);
+		},
+		set(key, value, ttlSeconds) {
+			store.map.delete(key);
+			store.map.set(key, {
+				value,
+				expiresAt: ttlSeconds && ttlSeconds > 0 ? Date.now() + ttlSeconds * 1e3 : null
+			});
+			while (store.map.size > store.maxEntries) {
+				const oldest = store.map.keys().next().value;
+				if (oldest === void 0) break;
+				store.map.delete(oldest);
+			}
+			return Promise.resolve();
+		},
+		delete(key) {
+			store.map.delete(key);
+			return Promise.resolve();
+		}
+	};
+};
+
+//#endregion
+export { createObjectCache };