dineway 0.1.8 → 0.1.11

package/dist/astro/routes/api/auth/signup/verify.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/auth/signup/verify.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/auth/signup/verify.mjs

@@ -0,0 +1,32 @@
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DEGjx2Xw.mjs";
+import { createKyselyAdapter } from "@dineway-ai/auth/adapters/kysely";
+import { SignupError, roleFromLevel, validateSignupToken } from "@dineway-ai/auth";
+
+//#region src/astro/routes/api/auth/signup/verify.ts
+const prerender = false;
+const GET = async ({ url, locals }) => {
+	const { dineway } = locals;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const token = url.searchParams.get("token");
+	if (!token) return apiError("MISSING_PARAM", "Token is required", 400);
+	try {
+		const result = await validateSignupToken(createKyselyAdapter(dineway.db), token);
+		return apiSuccess({
+			success: true,
+			email: result.email,
+			role: result.role,
+			roleName: roleFromLevel(result.role)
+		});
+	} catch (error) {
+		if (error instanceof SignupError) return apiError(error.code.toUpperCase(), error.message, {
+			invalid_token: 404,
+			token_expired: 410,
+			user_exists: 409,
+			domain_not_allowed: 403
+		}[error.code] ?? 400);
+		return handleError(error, "Failed to validate signup token", "SIGNUP_VERIFY_ERROR");
+	}
+};
+
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/comments/_collection_/_contentId_/index.d.mts

@@ -0,0 +1,14 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/comments/[collection]/[contentId]/index.d.ts
+declare const prerender = false;
+/**
+ * List approved comments for a content item (public, no auth required)
+ */
+declare const GET: APIRoute;
+/**
+ * Submit a comment (public, gated by anti-spam checks)
+ */
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };

package/dist/astro/routes/api/comments/_collection_/_contentId_/index.mjs

@@ -0,0 +1,193 @@
+import { t as validateIdentifier } from "../../../../../../validate-VPnKoIzW.mjs";
+import "../../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../../types-Bs6lTBBW.mjs";
+import { t as CommentRepository } from "../../../../../../comment-DFO-gWDH.mjs";
+import "../../../../../../options-z8VVg1Ll.mjs";
+import "../../../../../../context-types-C-LwdAxx.mjs";
+import { a as unwrapResult, i as requireDb, n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DEGjx2Xw.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-BeQXIt1U.mjs";
+import { _t as createCommentBody } from "../../../../../../redirects-CqaxraTO.mjs";
+import "../../../../../../import-DD3f2jkc.mjs";
+import "../../../../../../api/schemas/index.mjs";
+import { t as extractRequestMeta } from "../../../../../../request-meta-Bd0mQfiS.mjs";
+import { i as resolveSecretsCached } from "../../../../../../secrets-dI8zzTV7.mjs";
+import { c as hashIp, s as handleCommentList, t as checkRateLimit } from "../../../../../../comments-Gy3zLBaP.mjs";
+import { t as getSiteBaseUrl } from "../../../../../../site-url-CYIcO0Tj.mjs";
+import { i as sendCommentNotification, t as createComment } from "../../../../../../service-CSfcQguB.mjs";
+
+//#region src/astro/routes/api/comments/[collection]/[contentId]/index.ts
+const prerender = false;
+/**
+* List approved comments for a content item (public, no auth required)
+*/
+const GET = async ({ params, url, locals }) => {
+	const { dineway } = locals;
+	const { collection, contentId } = params;
+	if (!collection || !contentId) return apiError("VALIDATION_ERROR", "Collection and content ID required", 400);
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	try {
+		const limit = Math.min(Number(url.searchParams.get("limit") || 50), 100);
+		const cursor = url.searchParams.get("cursor") ?? void 0;
+		const threaded = url.searchParams.get("threaded") === "true";
+		const collectionRow = await dineway.db.selectFrom("_dineway_collections").select(["comments_enabled"]).where("slug", "=", collection).executeTakeFirst();
+		if (!collectionRow) return apiError("NOT_FOUND", `Collection '${collection}' not found`, 404);
+		if (!collectionRow.comments_enabled) return apiError("COMMENTS_DISABLED", "Comments are not enabled for this collection", 403);
+		return unwrapResult(await handleCommentList(dineway.db, collection, contentId, {
+			limit,
+			cursor,
+			threaded
+		}));
+	} catch (error) {
+		return handleError(error, "Failed to list comments", "COMMENT_LIST_ERROR");
+	}
+};
+/**
+* Submit a comment (public, gated by anti-spam checks)
+*/
+const POST = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const { collection, contentId } = params;
+	if (!collection || !contentId) return apiError("VALIDATION_ERROR", "Collection and content ID required", 400);
+	const dbErr = requireDb(dineway?.db);
+	if (dbErr) return dbErr;
+	try {
+		const body = await parseBody(request, createCommentBody);
+		if (isParseError(body)) return body;
+		const collectionRow = await dineway.db.selectFrom("_dineway_collections").select([
+			"comments_enabled",
+			"comments_moderation",
+			"comments_closed_after_days",
+			"comments_auto_approve_users"
+		]).where("slug", "=", collection).executeTakeFirst();
+		if (!collectionRow) return apiError("NOT_FOUND", `Collection '${collection}' not found`, 404);
+		if (!collectionRow.comments_enabled) return apiError("COMMENTS_DISABLED", "Comments are not enabled for this collection", 403);
+		validateIdentifier(collection, "collection");
+		const contentRow = await dineway.db.selectFrom(`ec_${collection}`).select([
+			"id",
+			"slug",
+			"author_id",
+			"published_at"
+		]).where("id", "=", contentId).where("status", "=", "published").where("deleted_at", "is", null).executeTakeFirst();
+		if (!contentRow) return apiError("NOT_FOUND", "Content not found", 404);
+		if (collectionRow.comments_closed_after_days > 0) {
+			const publishedAt = contentRow.published_at;
+			if (publishedAt) {
+				const closedDate = new Date(publishedAt);
+				closedDate.setDate(closedDate.getDate() + collectionRow.comments_closed_after_days);
+				if (/* @__PURE__ */ new Date() > closedDate) return apiError("COMMENTS_CLOSED", "Comments are closed for this content", 403);
+			}
+		}
+		if (body.website_url) return apiSuccess({
+			status: "pending",
+			message: "Comment submitted for review"
+		});
+		const meta = extractRequestMeta(request, dineway.config);
+		const { ipSalt } = await resolveSecretsCached(dineway.db);
+		let ipHash;
+		if (meta.ip) ipHash = await hashIp(meta.ip, ipSalt);
+		else ipHash = "unknown";
+		const unknownBucketLimit = ipHash === "unknown" ? 20 : void 0;
+		if (await checkRateLimit(dineway.db, ipHash, unknownBucketLimit)) return apiError("RATE_LIMITED", "Too many comments. Please try again later.", 429);
+		const collectionSettings = {
+			commentsEnabled: collectionRow.comments_enabled === 1,
+			commentsModeration: collectionRow.comments_moderation,
+			commentsClosedAfterDays: collectionRow.comments_closed_after_days,
+			commentsAutoApproveUsers: collectionRow.comments_auto_approve_users === 1
+		};
+		let authorName = body.authorName;
+		let authorEmail = body.authorEmail;
+		let authorUserId = null;
+		if (user) {
+			authorName = user.name || authorName;
+			authorEmail = user.email;
+			authorUserId = user.id;
+		}
+		let resolvedParentId = body.parentId ?? null;
+		if (body.parentId) {
+			const parent = await new CommentRepository(dineway.db).findById(body.parentId);
+			if (!parent) return apiError("VALIDATION_ERROR", "Parent comment not found", 400);
+			if (parent.collection !== collection || parent.contentId !== contentId) return apiError("VALIDATION_ERROR", "Parent comment belongs to different content", 400);
+			resolvedParentId = parent.parentId ?? parent.id;
+		}
+		const hookRunner = {
+			async runBeforeCreate(event) {
+				return dineway.hooks.runCommentBeforeCreate(event);
+			},
+			async runModerate(event) {
+				const result = await dineway.hooks.invokeExclusiveHook("comment:moderate", event);
+				if (!result) return {
+					status: "pending",
+					reason: "No moderator configured"
+				};
+				if (result.error) {
+					console.error(`[comments] Moderation error (${result.pluginId}):`, result.error.message);
+					return {
+						status: "pending",
+						reason: "Moderation error"
+					};
+				}
+				return result.result;
+			},
+			fireAfterCreate(event) {
+				dineway.hooks.runCommentAfterCreate(event).catch((err) => console.error("[comments] afterCreate error:", err instanceof Error ? err.message : err));
+			},
+			fireAfterModerate(event) {
+				dineway.hooks.runCommentAfterModerate(event).catch((err) => console.error("[comments] afterModerate error:", err instanceof Error ? err.message : err));
+			}
+		};
+		const typedContent = contentRow;
+		let contentAuthor;
+		if (typedContent.author_id) {
+			const authorRow = await dineway.db.selectFrom("users").select([
+				"id",
+				"name",
+				"email",
+				"email_verified"
+			]).where("id", "=", typedContent.author_id).executeTakeFirst();
+			if (authorRow && authorRow.email_verified) contentAuthor = {
+				id: authorRow.id,
+				name: authorRow.name,
+				email: authorRow.email
+			};
+		}
+		const result = await createComment(dineway.db, {
+			collection,
+			contentId,
+			parentId: resolvedParentId,
+			authorName,
+			authorEmail,
+			authorUserId,
+			body: body.body,
+			ipHash,
+			userAgent: meta.userAgent
+		}, collectionSettings, hookRunner, {
+			id: typedContent.id,
+			collection,
+			slug: typedContent.slug,
+			author: contentAuthor
+		});
+		if (!result) return apiError("COMMENT_REJECTED", "Comment was rejected", 403);
+		if (result.comment.status === "approved" && dineway.email && contentAuthor) try {
+			const adminBaseUrl = await getSiteBaseUrl(dineway.db, request);
+			await sendCommentNotification({
+				email: dineway.email,
+				comment: result.comment,
+				contentAuthor,
+				adminBaseUrl
+			});
+		} catch (err) {
+			console.error("[comments] notification error:", err instanceof Error ? err.message : err);
+		}
+		return apiSuccess({
+			id: result.comment.id,
+			status: result.comment.status,
+			message: result.comment.status === "approved" ? "Comment published" : "Comment submitted for review"
+		}, 201);
+	} catch (error) {
+		return handleError(error, "Failed to submit comment", "COMMENT_CREATE_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/compare.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/content/[collection]/[id]/compare.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/compare.mjs

@@ -0,0 +1,17 @@
+import { a as unwrapResult, t as apiError } from "../../../../../../error-DEGjx2Xw.mjs";
+import { n as requirePerm } from "../../../../../../authorize-BBj8C6Y8.mjs";
+
+//#region src/astro/routes/api/content/[collection]/[id]/compare.ts
+const prerender = false;
+const GET = async ({ params, locals }) => {
+	const { dineway, user } = locals;
+	const denied = requirePerm(user, "content:read_drafts");
+	if (denied) return denied;
+	const collection = params.collection;
+	const id = params.id;
+	if (!dineway?.handleContentCompare) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	return unwrapResult(await dineway.handleContentCompare(collection, id));
+};
+
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/discard-draft.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/content/[collection]/[id]/discard-draft.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/discard-draft.mjs

@@ -0,0 +1,36 @@
+import "../../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../../site-activity-B8FjLIVh.mjs";
+import { a as unwrapResult, o as mapErrorStatus, t as apiError } from "../../../../../../error-DEGjx2Xw.mjs";
+import { t as requireOwnerPerm } from "../../../../../../authorize-BBj8C6Y8.mjs";
+import { a as extractActivityItemId, n as contentApiRouteSource, o as logContentActivity } from "../../../../../../activity-events-BsMaXdJa.mjs";
+
+//#region src/astro/routes/api/content/[collection]/[id]/discard-draft.ts
+const prerender = false;
+const POST = async ({ params, locals, cache }) => {
+	const { dineway, user } = locals;
+	const collection = params.collection;
+	const id = params.id;
+	if (!dineway?.handleContentDiscardDraft || !dineway?.handleContentGet) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const existing = await dineway.handleContentGet(collection, id);
+	if (!existing.success) return apiError(existing.error?.code ?? "UNKNOWN_ERROR", existing.error?.message ?? "Unknown error", mapErrorStatus(existing.error?.code));
+	const existingData = existing.data && typeof existing.data === "object" ? existing.data : void 0;
+	const existingItem = existingData?.item && typeof existingData.item === "object" ? existingData.item : existingData;
+	const denied = requireOwnerPerm(user, typeof existingItem?.authorId === "string" ? existingItem.authorId : "", "content:edit_own", "content:edit_any");
+	if (denied) return denied;
+	const resolvedId = typeof existingItem?.id === "string" ? existingItem.id : id;
+	const result = await dineway.handleContentDiscardDraft(collection, resolvedId);
+	if (!result.success) return unwrapResult(result);
+	if (cache.enabled) await cache.invalidate({ tags: [collection, resolvedId] });
+	await logContentActivity(dineway.db, locals, {
+		action: "draft_discarded",
+		collection,
+		entryId: extractActivityItemId(result.data, resolvedId),
+		...contentApiRouteSource("draft_discarded"),
+		summary: `Discarded draft for content in ${collection}`
+	});
+	return unwrapResult(result);
+};
+
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/duplicate.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/content/[collection]/[id]/duplicate.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/duplicate.mjs

@@ -0,0 +1,39 @@
+import "../../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../../site-activity-B8FjLIVh.mjs";
+import { a as unwrapResult, o as mapErrorStatus, t as apiError } from "../../../../../../error-DEGjx2Xw.mjs";
+import { n as requirePerm, t as requireOwnerPerm } from "../../../../../../authorize-BBj8C6Y8.mjs";
+import { a as extractActivityItemId, n as contentApiRouteSource, o as logContentActivity } from "../../../../../../activity-events-BsMaXdJa.mjs";
+
+//#region src/astro/routes/api/content/[collection]/[id]/duplicate.ts
+const prerender = false;
+const POST = async ({ params, locals, cache }) => {
+	const { dineway, user } = locals;
+	const collection = params.collection;
+	const id = params.id;
+	const denied = requirePerm(user, "content:create");
+	if (denied) return denied;
+	if (!dineway?.handleContentDuplicate || !dineway?.handleContentGet) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const existing = await dineway.handleContentGet(collection, id);
+	if (!existing.success) return apiError(existing.error?.code ?? "UNKNOWN_ERROR", existing.error?.message ?? "Unknown error", mapErrorStatus(existing.error?.code));
+	const existingData = existing.data && typeof existing.data === "object" ? existing.data : void 0;
+	const existingItem = existingData?.item && typeof existingData.item === "object" ? existingData.item : existingData;
+	const readDenied = requireOwnerPerm(user, typeof existingItem?.authorId === "string" ? existingItem.authorId : "", "content:edit_own", "content:edit_any");
+	if (readDenied) return readDenied;
+	const resolvedId = typeof existingItem?.id === "string" ? existingItem.id : id;
+	const result = await dineway.handleContentDuplicate(collection, resolvedId, user?.id);
+	if (!result.success) return unwrapResult(result);
+	if (cache.enabled) await cache.invalidate({ tags: [collection] });
+	await logContentActivity(dineway.db, locals, {
+		action: "duplicated",
+		collection,
+		entryId: extractActivityItemId(result.data),
+		...contentApiRouteSource("duplicated"),
+		summary: `Duplicated content in ${collection}`,
+		detail: { sourceEntryId: resolvedId }
+	});
+	return unwrapResult(result, 201);
+};
+
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/permanent.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/content/[collection]/[id]/permanent.d.ts
+declare const prerender = false;
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/permanent.mjs

@@ -0,0 +1,31 @@
+import "../../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../../site-activity-B8FjLIVh.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../error-DEGjx2Xw.mjs";
+import { n as requirePerm } from "../../../../../../authorize-BBj8C6Y8.mjs";
+import { n as contentApiRouteSource, o as logContentActivity } from "../../../../../../activity-events-BsMaXdJa.mjs";
+
+//#region src/astro/routes/api/content/[collection]/[id]/permanent.ts
+const prerender = false;
+const DELETE = async ({ params, locals, cache }) => {
+	const { dineway, user } = locals;
+	const collection = params.collection;
+	const id = params.id;
+	const denied = requirePerm(user, "import:execute");
+	if (denied) return denied;
+	if (!dineway?.handleContentPermanentDelete) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const result = await dineway.handleContentPermanentDelete(collection, id);
+	if (!result.success) return unwrapResult(result);
+	if (cache.enabled) await cache.invalidate({ tags: [collection, id] });
+	await logContentActivity(dineway.db, locals, {
+		action: "permanently_deleted",
+		collection,
+		entryId: id,
+		...contentApiRouteSource("permanently_deleted"),
+		summary: `Permanently deleted content in ${collection}`
+	});
+	return unwrapResult(result);
+};
+
+//#endregion
+export { DELETE, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/preview-url.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/content/[collection]/[id]/preview-url.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/preview-url.mjs

@@ -0,0 +1,78 @@
+import "../../../../../../connection-BCNICDWN.mjs";
+import "../../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../../options-z8VVg1Ll.mjs";
+import { n as getI18nConfig } from "../../../../../../config-CAMFxGaV.mjs";
+import "../../../../../../context-types-C-LwdAxx.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DEGjx2Xw.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../../parse-BeQXIt1U.mjs";
+import { tn as contentPreviewUrlBody } from "../../../../../../redirects-CqaxraTO.mjs";
+import "../../../../../../import-DD3f2jkc.mjs";
+import "../../../../../../api/schemas/index.mjs";
+import { i as getPreviewUrl } from "../../../../../../preview-C_4DyVox.mjs";
+import "../../../../../../tokens-DLTo4dO2.mjs";
+import { i as resolveSecretsCached } from "../../../../../../secrets-dI8zzTV7.mjs";
+import { n as requirePerm } from "../../../../../../authorize-BBj8C6Y8.mjs";
+
+//#region src/astro/routes/api/content/[collection]/[id]/preview-url.ts
+const prerender = false;
+const DURATION_PATTERN = /^(\d+)([smhdw])$/;
+const POST = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const denied = requirePerm(user, "content:read_drafts");
+	if (denied) return denied;
+	const collection = params.collection;
+	const id = params.id;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const { previewSecret } = await resolveSecretsCached(dineway.db);
+	let entryLocale = null;
+	if (dineway?.handleContentGet) {
+		const result = await dineway.handleContentGet(collection, id);
+		if (!result.success) return unwrapResult(result);
+		entryLocale = result.data?.item?.locale ?? null;
+	}
+	const body = await parseOptionalBody(request, contentPreviewUrlBody, {});
+	if (isParseError(body)) return body;
+	const expiresIn = body.expiresIn || "1h";
+	const defaultPathPattern = import.meta.env.DINEWAY_PREVIEW_PATH_PATTERN || import.meta.env.PREVIEW_PATH_PATTERN || "/{collection}/{id}";
+	const pathPattern = body.pathPattern || defaultPathPattern;
+	const i18n = getI18nConfig();
+	let localeSegment = "";
+	if (entryLocale && i18n) localeSegment = entryLocale === i18n.defaultLocale && !i18n.prefixDefaultLocale ? "" : entryLocale;
+	else if (entryLocale) localeSegment = entryLocale;
+	const expiresInSeconds = typeof expiresIn === "number" ? expiresIn : parseExpiresIn(expiresIn);
+	const expiresAt = Math.floor(Date.now() / 1e3) + expiresInSeconds;
+	try {
+		return apiSuccess({
+			url: await getPreviewUrl({
+				collection,
+				id,
+				secret: previewSecret,
+				expiresIn,
+				pathPattern,
+				locale: localeSegment
+			}),
+			expiresAt
+		});
+	} catch (error) {
+		return handleError(error, "Failed to generate preview URL", "TOKEN_ERROR");
+	}
+};
+/**
+* Parse duration string to seconds
+*/
+function parseExpiresIn(duration) {
+	const match = duration.match(DURATION_PATTERN);
+	if (!match) return 3600;
+	const value = parseInt(match[1], 10);
+	switch (match[2]) {
+		case "s": return value;
+		case "m": return value * 60;
+		case "h": return value * 60 * 60;
+		case "d": return value * 60 * 60 * 24;
+		case "w": return value * 60 * 60 * 24 * 7;
+		default: return 3600;
+	}
+}
+
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/publish.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/content/[collection]/[id]/publish.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/publish.mjs

@@ -0,0 +1,92 @@
+import "../../../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../../../content-CyLkb-qH.mjs";
+import "../../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../../media-_7Fxdu45.mjs";
+import "../../../../../../options-z8VVg1Ll.mjs";
+import "../../../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../../../entity-aliases-C0v-yNET.mjs";
+import "../../../../../../briefing-BrXCuMEE.mjs";
+import "../../../../../../context-types-C-LwdAxx.mjs";
+import "../../../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../../../registry-C-_hxLqa.mjs";
+import "../../../../../../loader-PZnPxFLc.mjs";
+import "../../../../../../settings-4XnpVMOS.mjs";
+import "../../../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../../../schema-BNpI53of.mjs";
+import "../../../../../../zod-generator-DBVP8D0P.mjs";
+import { a as unwrapResult, o as mapErrorStatus, t as apiError } from "../../../../../../error-DEGjx2Xw.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../../parse-BeQXIt1U.mjs";
+import { nn as contentPublishBody } from "../../../../../../redirects-CqaxraTO.mjs";
+import "../../../../../../import-DD3f2jkc.mjs";
+import "../../../../../../api/schemas/index.mjs";
+import "../../../../../../utils-D2in-zwy.mjs";
+import "../../../../../../search-DM6CVti3.mjs";
+import { t as requireOwnerPerm } from "../../../../../../authorize-BBj8C6Y8.mjs";
+import { _ as RiskPolicyEvaluator } from "../../../../../../site-context-Bpu_Paur.mjs";
+import { T as resolveActorIdentity, a as extractActivityItemId, n as contentApiRouteSource, o as logContentActivity } from "../../../../../../activity-events-BsMaXdJa.mjs";
+import { hasPermission } from "@dineway-ai/auth";
+
+//#region src/astro/routes/api/content/[collection]/[id]/publish.ts
+/**
+* Publish content - promotes draft to live
+*
+* POST /_dineway/api/content/{collection}/{id}/publish
+*/
+const prerender = false;
+const POST = async ({ params, request, locals, cache }) => {
+	const { dineway, user } = locals;
+	const collection = params.collection;
+	const id = params.id;
+	if (!dineway?.handleContentPublish || !dineway?.handleContentGet) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const existing = await dineway.handleContentGet(collection, id);
+	if (!existing.success) return apiError(existing.error?.code ?? "UNKNOWN_ERROR", existing.error?.message ?? "Unknown error", mapErrorStatus(existing.error?.code));
+	const existingData = existing.data && typeof existing.data === "object" ? existing.data : void 0;
+	const existingItem = existingData?.item && typeof existingData.item === "object" ? existingData.item : existingData;
+	const denied = requireOwnerPerm(user, typeof existingItem?.authorId === "string" ? existingItem.authorId : "", "content:publish_own", "content:publish_any");
+	if (denied) return denied;
+	const resolvedId = typeof existingItem?.id === "string" ? existingItem.id : id;
+	const body = await parseOptionalBody(request, contentPublishBody, {});
+	if (isParseError(body)) return body;
+	const { publishedAt } = body;
+	if (publishedAt !== void 0 && !hasPermission(user, "content:publish_any")) return apiError("FORBIDDEN", "Setting publishedAt requires content:publish_any permission", 403);
+	const actor = resolveActorIdentity({
+		user: user ? { id: user.id } : null,
+		tokenScopes: locals.tokenScopes,
+		authToken: locals.authToken
+	});
+	const evaluator = new RiskPolicyEvaluator({
+		db: dineway.db,
+		handlers: dineway
+	});
+	const reviewRequestId = body.reviewRequestId ?? body.review_request_id;
+	const decision = await evaluator.evaluateContentPublishReview({
+		actor,
+		collection,
+		id: resolvedId,
+		reviewRequestId
+	});
+	if (!decision.allowed) return apiError("REVIEW_REQUEST_REQUIRED", decision.message, 409, {
+		reason: decision.reason,
+		target: decision.target ?? null
+	});
+	const result = await dineway.handleContentPublish(collection, resolvedId, { publishedAt });
+	if (!result.success) return unwrapResult(result);
+	if (cache.enabled) await cache.invalidate({ tags: [collection, resolvedId] });
+	await logContentActivity(dineway.db, locals, {
+		action: "published",
+		collection,
+		entryId: extractActivityItemId(result.data, resolvedId),
+		...contentApiRouteSource("published"),
+		summary: `Published content in ${collection}`,
+		detail: {
+			reviewRequestId: decision.required ? decision.reviewRequest.id : null,
+			publishedAt: publishedAt ?? null
+		}
+	});
+	return unwrapResult(result);
+};
+
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/restore.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/content/[collection]/[id]/restore.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/content/_collection_/_id_/restore.mjs

@@ -0,0 +1,36 @@
+import "../../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../../site-activity-B8FjLIVh.mjs";
+import { a as unwrapResult, o as mapErrorStatus, t as apiError } from "../../../../../../error-DEGjx2Xw.mjs";
+import { t as requireOwnerPerm } from "../../../../../../authorize-BBj8C6Y8.mjs";
+import { n as contentApiRouteSource, o as logContentActivity } from "../../../../../../activity-events-BsMaXdJa.mjs";
+
+//#region src/astro/routes/api/content/[collection]/[id]/restore.ts
+const prerender = false;
+const POST = async ({ params, locals, cache }) => {
+	const { dineway, user } = locals;
+	const collection = params.collection;
+	const id = params.id;
+	if (!dineway?.handleContentRestore || !dineway?.handleContentGetIncludingTrashed) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const existing = await dineway.handleContentGetIncludingTrashed(collection, id);
+	if (!existing.success) return apiError(existing.error?.code ?? "UNKNOWN_ERROR", existing.error?.message ?? "Unknown error", mapErrorStatus(existing.error?.code));
+	const existingData = existing.data && typeof existing.data === "object" ? existing.data : void 0;
+	const existingItem = existingData?.item && typeof existingData.item === "object" ? existingData.item : existingData;
+	const denied = requireOwnerPerm(user, typeof existingItem?.authorId === "string" ? existingItem.authorId : "", "content:edit_own", "content:edit_any");
+	if (denied) return denied;
+	const resolvedId = typeof existingItem?.id === "string" ? existingItem.id : id;
+	const result = await dineway.handleContentRestore(collection, resolvedId);
+	if (!result.success) return unwrapResult(result);
+	if (cache.enabled) await cache.invalidate({ tags: [collection, resolvedId] });
+	await logContentActivity(dineway.db, locals, {
+		action: "restored",
+		collection,
+		entryId: resolvedId,
+		...contentApiRouteSource("restored"),
+		summary: `Restored content in ${collection}`
+	});
+	return unwrapResult(result);
+};
+
+//#endregion
+export { POST, prerender };