dineway 0.1.8 → 0.1.11

package/dist/{index-yvc6E_17.d.mts → runtime-C4-7y7xK.d.mts}

@@ -1,18 +1,210 @@
-import { _ as MediaValue, m as MediaProviderDescriptor } from "./placeholder--wOi4TbO.mjs";
-import { t as Database } from "./types-DOrVigru.mjs";
-import { a as ContentSeoInput, c as FindManyOptions, l as FindManyResult, o as CreateContentInput, r as ContentItem, t as BylineSummary, u as UpdateContentInput } from "./types-BzcUjoqg.mjs";
-import { A as PageMetadataContribution, B as PluginDefinition, D as PageFragmentContribution, H as PluginManifest, J as RequestMeta, O as PageFragmentEvent, W as PluginStorageConfig, X as ResolvedPlugin, a as CommentAfterModerateEvent, g as EmailMessage, h as CronEvent, j as PageMetadataEvent, r as CommentAfterCreateEvent, s as CommentBeforeCreateEvent, tt as StandardPluginDefinition, w as MediaItem$1 } from "./types-Cj0KMIZV.mjs";
-import { a as Collection, b as UpdateFieldInput, c as CollectionWithFields, d as CreateFieldInput, i as SiteSettings, p as Field, r as SiteSettingKey, u as CreateCollectionInput, y as UpdateCollectionInput } from "./types-BuMDPy5C.mjs";
-import { d as Storage } from "./types-CWbdtiux.mjs";
-import { t as DatabaseDescriptor } from "./adapters-C2ypTrZZ.mjs";
+import { a as ContentSeoInput, c as FindManyOptions, l as FindManyResult, o as CreateContentInput, r as ContentItem, t as BylineSummary, u as UpdateContentInput } from "./types-Djdp0cZO.mjs";
+import { t as Database } from "./types-Du8jreyC.mjs";
+import { A as PageMetadataContribution, B as PluginDefinition, D as PageFragmentContribution, H as PluginManifest, J as RequestMeta, O as PageFragmentEvent, W as PluginStorageConfig, X as ResolvedPlugin, a as CommentAfterModerateEvent, g as EmailMessage, h as CronEvent, j as PageMetadataEvent, r as CommentAfterCreateEvent, s as CommentBeforeCreateEvent, tt as StandardPluginDefinition, w as MediaItem$1 } from "./types-DgfUZqcd.mjs";
+import { a as Collection, b as UpdateFieldInput, c as CollectionWithFields, d as CreateFieldInput, i as SiteSettings, p as Field, r as SiteSettingKey, u as CreateCollectionInput, y as UpdateCollectionInput } from "./types-IPACEM14.mjs";
+import { r as AuthProviderDescriptor, t as AuthDescriptor } from "./types-D4XVOt01.mjs";
+import { t as DatabaseDescriptor } from "./adapters-BLDldpJg.mjs";
+import { _ as MediaValue, m as MediaProviderDescriptor } from "./placeholder-CHkLckzK.mjs";
+import { S as ContentBylineInput } from "./index-CkljPf5F.mjs";
+import { d as Storage } from "./types-B9qVtiHb.mjs";
 import { Kysely } from "kysely";
 import { z } from "astro/zod";
 import { z as z$1 } from "zod";
-import { PortableTextBlock } from "@dineway-ai/gutenberg-to-portable-text";
-import { Readable } from "node:stream";
 import { MiddlewareHandler } from "astro";
 import { LiveLoader } from "astro/loaders";
 
+//#region src/api/types.d.ts
+/**
+ * List response with cursor pagination
+ */
+interface ListResponse<T> {
+  items: T[];
+  nextCursor?: string;
+}
+/**
+ * Content API responses
+ */
+interface ContentListResponse extends ListResponse<ContentItem> {}
+interface ContentResponse {
+  item: ContentItem;
+  /** Opaque revision token for optimistic concurrency */
+  _rev?: string;
+}
+/**
+ * Manifest API response
+ */
+interface ManifestResponse {
+  version: string;
+  commit?: string;
+  hash: string;
+  features?: {
+    siteContextWorkflows: boolean;
+  };
+  collections: Record<string, {
+    label: string;
+    labelSingular: string;
+    supports: string[];
+    fields: Record<string, FieldDescriptor>;
+  }>;
+  plugins: Record<string, {
+    adminPages?: Array<{
+      path: string;
+      component: string;
+    }>;
+    widgets?: string[];
+  }>;
+}
+interface FieldDescriptor {
+  kind: string;
+  label?: string;
+  required?: boolean;
+  options?: Array<{
+    value: string;
+    label: string;
+  }> | Record<string, unknown>;
+}
+/**
+ * Discriminated union for handler results.
+ *
+ * Handlers return `ApiResult<T>` -- either `{ success: true, data: T }` or
+ * `{ success: false, error: { code, message } }`. The `success` literal
+ * enables TypeScript narrowing on `.data`.
+ *
+ * The generic `E` parameter defaults to `ErrorCode` but can be narrowed to
+ * `OAuthErrorCode` for OAuth token-endpoint handlers.
+ *
+ * Use `unwrapResult()` from `error.ts` to convert to an HTTP Response.
+ */
+type ApiResult<T, E extends string = string> = {
+  success: true;
+  data: T;
+} | {
+  success: false;
+  error: {
+    code: E;
+    message: string;
+    details?: Record<string, unknown>;
+  };
+};
+/**
+ * API request context
+ */
+interface ApiContext {
+  userId?: string;
+  userRole?: string;
+}
+//#endregion
+//#region src/api/error.d.ts
+/**
+ * Create a standardized error response.
+ *
+ * Always returns `{ error: { code, message, details? } }` with correct Content-Type.
+ * Use this for all error responses in API routes.
+ */
+declare function apiError(code: string, message: string, status: number, details?: Record<string, unknown>): Response;
+/**
+ * Create a standardized success response.
+ *
+ * Always returns `{ data: T }` with correct status code.
+ * Use this for all success responses in API routes.
+ */
+declare function apiSuccess<T>(data: T, status?: number): Response;
+/**
+ * Handle an unknown error in a catch block.
+ *
+ * - Logs the full error server-side
+ * - Returns a generic message to the client (never leaks error.message)
+ * - Use `fallbackMessage` for the public-facing message
+ * - Use `fallbackCode` for the error code
+ */
+declare function handleError(error: unknown, fallbackMessage: string, fallbackCode: string): Response;
+//#endregion
+//#region src/api/parse.d.ts
+/**
+ * Result of parsing: either the validated data or an error Response.
+ * Routes should check `if (result instanceof Response) return result;`
+ */
+type ParseResult<T> = T | Response;
+/**
+ * Parse and validate a JSON request body against a Zod schema.
+ *
+ * Returns the validated data on success, or a 400 Response on failure.
+ * Replaces all `(await request.json()) as T` casts.
+ */
+declare function parseBody<T extends z$1.ZodType>(request: Request, schema: T): Promise<ParseResult<z$1.infer<T>>>;
+/**
+ * Parse and validate URL search params against a Zod schema.
+ *
+ * Converts searchParams to a plain object before validation.
+ * Zod coercion handles string -> number/boolean conversion.
+ * Replaces manual `url.searchParams.get()` + `parseInt()` patterns.
+ */
+declare function parseQuery<T extends z$1.ZodType>(url: URL, schema: T): ParseResult<z$1.infer<T>>;
+/**
+ * Type guard to check if a ParseResult is an error Response.
+ * Usage: `if (isParseError(result)) return result;`
+ */
+declare function isParseError<T>(result: ParseResult<T>): result is Response;
+//#endregion
+//#region src/database/repositories/options.d.ts
+/**
+ * Options repository for key-value settings storage
+ *
+ * Used for site settings, plugin configuration, and other arbitrary key-value data.
+ * Values are stored as JSON for flexibility.
+ */
+declare class OptionsRepository {
+  private db;
+  constructor(db: Kysely<Database>);
+  /**
+   * Get an option value
+   */
+  get<T = unknown>(name: string): Promise<T | null>;
+  /**
+   * Get an option value with a default
+   */
+  getOrDefault<T>(name: string, defaultValue: T): Promise<T>;
+  /**
+   * Set an option value (creates or updates)
+   */
+  set<T = unknown>(name: string, value: T): Promise<void>;
+  /**
+   * Set an option value only if no row with that name exists.
+   *
+   * Returns true when the row was inserted, false when a row already existed,
+   * regardless of its value.
+   */
+  setIfAbsent<T = unknown>(name: string, value: T): Promise<boolean>;
+  /**
+   * Delete an option
+   */
+  delete(name: string): Promise<boolean>;
+  /**
+   * Check if an option exists
+   */
+  exists(name: string): Promise<boolean>;
+  /**
+   * Get multiple options at once
+   */
+  getMany<T = unknown>(names: string[]): Promise<Map<string, T>>;
+  /**
+   * Set multiple options at once
+   */
+  setMany<T = unknown>(options: Record<string, T>): Promise<void>;
+  /**
+   * Get all options (use sparingly)
+   */
+  getAll(): Promise<Map<string, unknown>>;
+  /**
+   * Get all options matching a prefix
+   */
+  getByPrefix<T = unknown>(prefix: string): Promise<Map<string, T>>;
+  /**
+   * Delete all options matching a prefix
+   */
+  deleteByPrefix(prefix: string): Promise<number>;
+}
+//#endregion
 //#region src/database/connection.d.ts
 interface DatabaseConfig {
   url: string;
@@ -158,8 +350,11 @@ declare class ContentRepository {
    * Syncs the draft revision's data into the content table columns so the
    * content table always reflects the published version.
    * If no draft revision exists, creates one from current data and publishes it.
+   *
+   * `publishedAt` overrides the publication timestamp. If omitted, an existing
+   * `published_at` is preserved and first publish falls back to the current time.
    */
-  publish(type: string, id: string): Promise<ContentItem>;
+  publish(type: string, id: string, publishedAt?: string): Promise<ContentItem>;
   /**
    * Stage an existing revision as the draft for a content item.
    *
@@ -348,12 +543,6 @@ interface PublicComment {
   replies?: PublicComment[];
 }
 //#endregion
-//#region src/database/repositories/byline.d.ts
-interface ContentBylineInput {
-  bylineId: string;
-  roleLabel?: string | null;
-}
-//#endregion
 //#region src/fields/types.d.ts
 /**
  * SQLite column types that map from field types
@@ -389,7 +578,7 @@ interface FieldUIHints {
 /**
  * Portable Text block structure
  */
-interface PortableTextBlock$2 {
+interface PortableTextBlock$1 {
   _type: string;
   _key: string;
   [key: string]: unknown;
@@ -436,88 +625,7 @@ declare function reference(collection: string, options?: {
  */
 declare function portableText(options?: {
   required?: boolean;
-}): FieldDefinition<PortableTextBlock$2[] | undefined>;
-//#endregion
-//#region src/api/types.d.ts
-/**
- * List response with cursor pagination
- */
-interface ListResponse<T> {
-  items: T[];
-  nextCursor?: string;
-}
-/**
- * Content API responses
- */
-interface ContentListResponse extends ListResponse<ContentItem> {}
-interface ContentResponse {
-  item: ContentItem;
-  /** Opaque revision token for optimistic concurrency */
-  _rev?: string;
-}
-/**
- * Manifest API response
- */
-interface ManifestResponse {
-  version: string;
-  commit?: string;
-  hash: string;
-  features?: {
-    siteContextWorkflows: boolean;
-  };
-  collections: Record<string, {
-    label: string;
-    labelSingular: string;
-    supports: string[];
-    fields: Record<string, FieldDescriptor>;
-  }>;
-  plugins: Record<string, {
-    adminPages?: Array<{
-      path: string;
-      component: string;
-    }>;
-    widgets?: string[];
-  }>;
-}
-interface FieldDescriptor {
-  kind: string;
-  label?: string;
-  required?: boolean;
-  options?: Array<{
-    value: string;
-    label: string;
-  }>;
-}
-/**
- * Discriminated union for handler results.
- *
- * Handlers return `ApiResult<T>` -- either `{ success: true, data: T }` or
- * `{ success: false, error: { code, message } }`. The `success` literal
- * enables TypeScript narrowing on `.data`.
- *
- * The generic `E` parameter defaults to `ErrorCode` but can be narrowed to
- * `OAuthErrorCode` for OAuth token-endpoint handlers.
- *
- * Use `unwrapResult()` from `error.ts` to convert to an HTTP Response.
- */
-type ApiResult<T, E extends string = string> = {
-  success: true;
-  data: T;
-} | {
-  success: false;
-  error: {
-    code: E;
-    message: string;
-    details?: Record<string, unknown>;
-  };
-};
-/**
- * API request context
- */
-interface ApiContext {
-  userId?: string;
-  userRole?: string;
-}
+}): FieldDefinition<PortableTextBlock$1[] | undefined>;
 //#endregion
 //#region src/api/handlers/content.d.ts
 /**
@@ -589,6 +697,7 @@ declare function handleContentUpdate(db: Kysely<Database>, collection: string, i
   bylines?: ContentBylineInput[];
   _rev?: string;
   seo?: ContentSeoInput;
+  publishedAt?: string | null;
 }): Promise<ApiResult<ContentResponse>>;
 /**
  * Duplicate content item.
@@ -649,7 +758,9 @@ declare function handleContentUnschedule(db: Kysely<Database>, collection: strin
  * (syncDataColumns, slug sync, status/revision update) that must
  * be atomic to prevent FTS shadow table corruption on crash.
  */
-declare function handleContentPublish(db: Kysely<Database>, collection: string, id: string): Promise<ApiResult<ContentResponse>>;
+declare function handleContentPublish(db: Kysely<Database>, collection: string, id: string, options?: {
+  publishedAt?: string;
+}): Promise<ApiResult<ContentResponse>>;
 /**
  * Unpublish content (revert to draft).
  *
@@ -813,6 +924,10 @@ declare class SchemaRegistry {
    * List all collections
    */
   listCollections(): Promise<Collection[]>;
+  /**
+   * List all collections with their fields using bounded query shapes.
+   */
+  listCollectionsWithFields(): Promise<CollectionWithFields[]>;
   /**
    * Get a collection by slug
    */
@@ -982,7 +1097,7 @@ interface Section {
   title: string;
   description?: string;
   keywords: string[];
-  content: PortableTextBlock$2[];
+  content: PortableTextBlock$1[];
   previewUrl?: string;
   source: SectionSource;
   themeId?: string;
@@ -997,7 +1112,7 @@ interface CreateSectionInput {
   title: string;
   description?: string;
   keywords?: string[];
-  content: PortableTextBlock$2[];
+  content: PortableTextBlock$1[];
   previewMediaId?: string;
   source?: SectionSource;
   themeId?: string;
@@ -1010,7 +1125,7 @@ interface UpdateSectionInput {
   title?: string;
   description?: string;
   keywords?: string[];
-  content?: PortableTextBlock$2[];
+  content?: PortableTextBlock$1[];
   previewMediaId?: string | null;
 }
 /**
@@ -1292,7 +1407,7 @@ interface PortableTextUnknownBlock {
 /**
  * Any Portable Text block
  */
-type PortableTextBlock$1 = PortableTextTextBlock | PortableTextImageBlock | PortableTextCodeBlock | PortableTextUnknownBlock;
+type PortableTextBlock = PortableTextTextBlock | PortableTextImageBlock | PortableTextCodeBlock | PortableTextUnknownBlock;
 /**
  * ProseMirror JSON types (simplified for TipTap)
  */
@@ -1316,13 +1431,13 @@ interface ProseMirrorDocument {
 /**
  * Convert ProseMirror document to Portable Text
  */
-declare function prosemirrorToPortableText(doc: ProseMirrorDocument): PortableTextBlock$1[];
+declare function prosemirrorToPortableText(doc: ProseMirrorDocument): PortableTextBlock[];
 //#endregion
 //#region src/content/converters/portable-text-to-prosemirror.d.ts
 /**
  * Convert Portable Text to ProseMirror document
  */
-declare function portableTextToProsemirror(blocks: PortableTextBlock$1[]): ProseMirrorDocument;
+declare function portableTextToProsemirror(blocks: PortableTextBlock[]): ProseMirrorDocument;
 //#endregion
 //#region src/utils/hash.d.ts
 /**
@@ -1341,12 +1456,6 @@ declare function hashString(content: string): Promise<string>;
  */
 declare function computeContentHash(content: Uint8Array | ArrayBuffer): Promise<string>;
 //#endregion
-//#region src/utils/slugify.d.ts
-/**
- * Decode a URI-encoded slug route parameter before database lookup.
- */
-declare function decodeSlug(raw: string | undefined): string | undefined;
-//#endregion
 //#region src/utils/url.d.ts
 /**
  * URL scheme validation utilities
@@ -1913,146 +2022,9 @@ declare function getDb(): Promise<Kysely<Database>>;
  */
 declare function dinewayLoader(): LiveLoader<EntryData, EntryFilter, CollectionFilter>;
 //#endregion
-//#region src/cli/wxr/parser.d.ts
-/**
- * Parsed WordPress export data
- */
-interface WxrData {
-  /** Site metadata */
-  site: WxrSite;
-  /** Posts (including custom post types) */
-  posts: WxrPost[];
-  /** Media attachments */
-  attachments: WxrAttachment[];
-  /** Categories */
-  categories: WxrCategory[];
-  /** Tags */
-  tags: WxrTag[];
-  /** Authors */
-  authors: WxrAuthor[];
-  /** All taxonomy terms (including custom taxonomies and nav_menu) */
-  terms: WxrTerm[];
-  /** Parsed navigation menus */
-  navMenus: WxrNavMenu[];
-}
-interface WxrSite {
-  title?: string;
-  link?: string;
-  description?: string;
-  language?: string;
-  baseSiteUrl?: string;
-  baseBlogUrl?: string;
-}
-interface WxrPost {
-  id?: number;
-  title?: string;
-  link?: string;
-  pubDate?: string;
-  creator?: string;
-  guid?: string;
-  description?: string;
-  content?: string;
-  excerpt?: string;
-  postDate?: string;
-  postDateGmt?: string;
-  postModified?: string;
-  postModifiedGmt?: string;
-  commentStatus?: string;
-  pingStatus?: string;
-  status?: string;
-  postType?: string;
-  postName?: string;
-  postPassword?: string;
-  isSticky?: boolean;
-  /** Parent post ID for hierarchical content (pages) */
-  postParent?: number;
-  /** Menu order for sorting */
-  menuOrder?: number;
-  categories: string[];
-  tags: string[];
-  /** Custom taxonomy assignments beyond categories/tags */
-  customTaxonomies?: Map<string, string[]>;
-  meta: Map<string, string>;
-}
-interface WxrAttachment {
-  id?: number;
-  title?: string;
-  url?: string;
-  postDate?: string;
-  meta: Map<string, string>;
-}
-interface WxrCategory {
-  id?: number;
-  nicename?: string;
-  name?: string;
-  parent?: string;
-  description?: string;
-}
-interface WxrTag {
-  id?: number;
-  slug?: string;
-  name?: string;
-  description?: string;
-}
-/**
- * Generic taxonomy term (categories, tags, nav_menu, custom taxonomies)
- */
-interface WxrTerm {
-  id: number;
-  taxonomy: string;
-  slug: string;
-  name: string;
-  parent?: string;
-  description?: string;
-}
-/**
- * Navigation menu structure
- */
-interface WxrNavMenu {
-  id: number;
-  name: string;
-  label: string;
-  items: WxrNavMenuItem[];
-}
-/**
- * Navigation menu item
- */
-interface WxrNavMenuItem {
-  id: number;
-  menuId: number;
-  parentId?: number;
-  sortOrder: number;
-  type: "custom" | "post_type" | "taxonomy";
-  objectType?: string;
-  objectId?: number;
-  url?: string;
-  title: string;
-  target?: string;
-  classes?: string;
-}
-interface WxrAuthor {
-  id?: number;
-  login?: string;
-  email?: string;
-  displayName?: string;
-  firstName?: string;
-  lastName?: string;
-}
-/**
- * Parse a WordPress WXR export file
- */
-declare function parseWxr(stream: Readable): Promise<WxrData>;
+//#region src/plugins/define-plugin.d.ts
 /**
- * Parse a WordPress WXR export from a string
- *
- * Uses the non-streaming SAX parser API for compatibility with
- * environments that don't expose Node.js streams.
- */
-declare function parseWxrString(xml: string): Promise<WxrData>;
-//#endregion
-//#region src/plugins/define-plugin.d.ts
-/**
- * Define a Dineway plugin.
+ * Define a Dineway plugin.
  *
  * **Standard format** -- the canonical format for plugins that work in both
  * trusted and sandboxed modes. No id/version -- those come from the descriptor.
@@ -2087,7 +2059,7 @@ declare function parseWxrString(xml: string): Promise<WxrData>;
  * export default definePlugin({
  *   id: "my-plugin",
  *   version: "1.0.0",
- *   capabilities: ["read:content"],
+ *   capabilities: ["content:read"],
  *   hooks: {
  *     "content:beforeSave": async (event, ctx) => {
  *       ctx.log.info("Saving content", { collection: event.collection });
@@ -2107,984 +2079,470 @@ declare function parseWxrString(xml: string): Promise<WxrData>;
 declare function definePlugin<TStorage extends PluginStorageConfig>(definition: PluginDefinition<TStorage>): ResolvedPlugin<TStorage>;
 declare function definePlugin(definition: StandardPluginDefinition): StandardPluginDefinition;
 //#endregion
-//#region src/auth/types.d.ts
+//#region src/plugins/manifest-schema.d.ts
 /**
- * Auth Provider Types
+ * Zod schema matching the PluginManifest interface from types.ts.
  *
- * Defines the interfaces for pluggable authentication providers.
- * External auth adapters implement these interfaces.
+ * Every JSON.parse of a manifest.json should validate through this.
  */
+declare const pluginManifestSchema: z$1.ZodObject<{
+  id: z$1.ZodString;
+  version: z$1.ZodString;
+  capabilities: z$1.ZodArray<z$1.ZodEnum<{
+    "network:request": "network:request";
+    "network:request:unrestricted": "network:request:unrestricted";
+    "content:read": "content:read";
+    "content:write": "content:write";
+    "media:read": "media:read";
+    "media:write": "media:write";
+    "users:read": "users:read";
+    "email:send": "email:send";
+    "hooks.email-transport:register": "hooks.email-transport:register";
+    "hooks.email-events:register": "hooks.email-events:register";
+    "hooks.page-fragments:register": "hooks.page-fragments:register";
+  }>>;
+  allowedHosts: z$1.ZodArray<z$1.ZodString>;
+  storage: z$1.ZodRecord<z$1.ZodString, z$1.ZodObject<{
+    indexes: z$1.ZodArray<z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodString>]>>;
+    uniqueIndexes: z$1.ZodOptional<z$1.ZodArray<z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodString>]>>>;
+  }, z$1.core.$strip>>;
+  hooks: z$1.ZodArray<z$1.ZodUnion<readonly [z$1.ZodEnum<{
+    "plugin:install": "plugin:install";
+    "plugin:activate": "plugin:activate";
+    "plugin:deactivate": "plugin:deactivate";
+    "plugin:uninstall": "plugin:uninstall";
+    "content:beforeSave": "content:beforeSave";
+    "content:afterSave": "content:afterSave";
+    "content:beforeDelete": "content:beforeDelete";
+    "content:afterDelete": "content:afterDelete";
+    "content:afterPublish": "content:afterPublish";
+    "content:afterUnpublish": "content:afterUnpublish";
+    "media:beforeUpload": "media:beforeUpload";
+    "media:afterUpload": "media:afterUpload";
+    cron: "cron";
+    "email:beforeSend": "email:beforeSend";
+    "email:deliver": "email:deliver";
+    "email:afterSend": "email:afterSend";
+    "comment:beforeCreate": "comment:beforeCreate";
+    "comment:moderate": "comment:moderate";
+    "comment:afterCreate": "comment:afterCreate";
+    "comment:afterModerate": "comment:afterModerate";
+    "page:metadata": "page:metadata";
+    "page:fragments": "page:fragments";
+  }>, z$1.ZodObject<{
+    name: z$1.ZodEnum<{
+      "plugin:install": "plugin:install";
+      "plugin:activate": "plugin:activate";
+      "plugin:deactivate": "plugin:deactivate";
+      "plugin:uninstall": "plugin:uninstall";
+      "content:beforeSave": "content:beforeSave";
+      "content:afterSave": "content:afterSave";
+      "content:beforeDelete": "content:beforeDelete";
+      "content:afterDelete": "content:afterDelete";
+      "content:afterPublish": "content:afterPublish";
+      "content:afterUnpublish": "content:afterUnpublish";
+      "media:beforeUpload": "media:beforeUpload";
+      "media:afterUpload": "media:afterUpload";
+      cron: "cron";
+      "email:beforeSend": "email:beforeSend";
+      "email:deliver": "email:deliver";
+      "email:afterSend": "email:afterSend";
+      "comment:beforeCreate": "comment:beforeCreate";
+      "comment:moderate": "comment:moderate";
+      "comment:afterCreate": "comment:afterCreate";
+      "comment:afterModerate": "comment:afterModerate";
+      "page:metadata": "page:metadata";
+      "page:fragments": "page:fragments";
+    }>;
+    exclusive: z$1.ZodOptional<z$1.ZodBoolean>;
+    priority: z$1.ZodOptional<z$1.ZodNumber>;
+    timeout: z$1.ZodOptional<z$1.ZodNumber>;
+  }, z$1.core.$strip>]>>;
+  routes: z$1.ZodArray<z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodObject<{
+    name: z$1.ZodString;
+    public: z$1.ZodOptional<z$1.ZodBoolean>;
+  }, z$1.core.$strip>]>>;
+  admin: z$1.ZodObject<{
+    entry: z$1.ZodOptional<z$1.ZodString>;
+    settingsSchema: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
+      type: z$1.ZodLiteral<"string">;
+      default: z$1.ZodOptional<z$1.ZodString>;
+      multiline: z$1.ZodOptional<z$1.ZodBoolean>;
+      label: z$1.ZodString;
+      description: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>, z$1.ZodObject<{
+      type: z$1.ZodLiteral<"number">;
+      default: z$1.ZodOptional<z$1.ZodNumber>;
+      min: z$1.ZodOptional<z$1.ZodNumber>;
+      max: z$1.ZodOptional<z$1.ZodNumber>;
+      label: z$1.ZodString;
+      description: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>, z$1.ZodObject<{
+      type: z$1.ZodLiteral<"boolean">;
+      default: z$1.ZodOptional<z$1.ZodBoolean>;
+      label: z$1.ZodString;
+      description: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>, z$1.ZodObject<{
+      type: z$1.ZodLiteral<"select">;
+      options: z$1.ZodArray<z$1.ZodObject<{
+        value: z$1.ZodString;
+        label: z$1.ZodString;
+      }, z$1.core.$strip>>;
+      default: z$1.ZodOptional<z$1.ZodString>;
+      label: z$1.ZodString;
+      description: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>, z$1.ZodObject<{
+      type: z$1.ZodLiteral<"secret">;
+      label: z$1.ZodString;
+      description: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>, z$1.ZodObject<{
+      type: z$1.ZodLiteral<"url">;
+      default: z$1.ZodOptional<z$1.ZodString>;
+      placeholder: z$1.ZodOptional<z$1.ZodString>;
+      label: z$1.ZodString;
+      description: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>, z$1.ZodObject<{
+      type: z$1.ZodLiteral<"email">;
+      default: z$1.ZodOptional<z$1.ZodString>;
+      placeholder: z$1.ZodOptional<z$1.ZodString>;
+      label: z$1.ZodString;
+      description: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>], "type">>>;
+    pages: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
+      path: z$1.ZodString;
+      label: z$1.ZodString;
+      icon: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>>>;
+    widgets: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
+      id: z$1.ZodString;
+      size: z$1.ZodOptional<z$1.ZodEnum<{
+        full: "full";
+        half: "half";
+        third: "third";
+      }>>;
+      title: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>>>;
+    fieldWidgets: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
+      name: z$1.ZodString;
+      label: z$1.ZodString;
+      fieldTypes: z$1.ZodArray<z$1.ZodEnum<{
+        string: "string";
+        number: "number";
+        boolean: "boolean";
+        file: "file";
+        slug: "slug";
+        image: "image";
+        datetime: "datetime";
+        text: "text";
+        integer: "integer";
+        select: "select";
+        multiSelect: "multiSelect";
+        portableText: "portableText";
+        reference: "reference";
+        json: "json";
+        repeater: "repeater";
+      }>>;
+      elements: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
+        type: z$1.ZodString;
+        action_id: z$1.ZodString;
+        label: z$1.ZodOptional<z$1.ZodString>;
+      }, z$1.core.$loose>>>;
+    }, z$1.core.$strip>>>;
+  }, z$1.core.$strip>;
+}, z$1.core.$strip>;
+type ValidatedPluginManifest = z$1.infer<typeof pluginManifestSchema>;
+//#endregion
+//#region src/plugins/hooks.d.ts
+type HookNameV2 = "plugin:install" | "plugin:activate" | "plugin:deactivate" | "plugin:uninstall" | "content:beforeSave" | "content:afterSave" | "content:beforeDelete" | "content:afterDelete" | "content:afterPublish" | "content:afterUnpublish" | "media:beforeUpload" | "media:afterUpload" | "cron" | "email:beforeSend" | "email:deliver" | "email:afterSend" | "comment:beforeCreate" | "comment:moderate" | "comment:afterCreate" | "comment:afterModerate" | "page:metadata" | "page:fragments";
 /**
- * Result of authenticating a request via an external auth provider
+ * Hook execution result
  */
-interface AuthResult {
-  /** User's email address */
-  email: string;
-  /** User's display name */
-  name: string;
-  /** Resolved role level (e.g., 50 for Admin, 30 for Editor) */
-  role: number;
-  /** Provider-specific subject ID */
-  subject?: string;
-  /** Additional provider-specific data */
-  metadata?: Record<string, unknown>;
+interface HookResult<T> {
+  success: boolean;
+  value?: T;
+  error?: Error;
+  pluginId: string;
+  duration: number;
 }
 /**
- * Auth descriptor - returned by auth adapter functions (e.g., access())
- *
- * Similar to DatabaseDescriptor and StorageDescriptor, this allows
- * auth providers to be configured at build time and loaded at runtime.
+ * Hook pipeline for executing hooks in order
  */
-interface AuthDescriptor {
+declare class HookPipeline {
+  private hooks;
+  private pluginMap;
+  private contextFactory;
+  /** Stored so setContextFactory can merge incrementally. */
+  private contextFactoryOptions;
+  /** Hook names where at least one handler declared exclusive: true */
+  private exclusiveHookNames;
   /**
-   * Auth provider type identifier
-   * @example "header-auth", "okta", "auth0"
+   * Selected provider plugin ID for each exclusive hook.
+   * Set by the PluginManager after resolution.
    */
-  type: string;
+  private exclusiveSelections;
+  constructor(plugins: ResolvedPlugin[], factoryOptions?: PluginContextFactoryOptions);
   /**
-   * Module specifier to import at runtime
-   * The module must export an `authenticate` function.
-   * @example "@acme/dineway-header-auth"
+   * Set or update the context factory options.
+   *
+   * When called on a pipeline that already has a factory, the new options
+   * are merged on top of the existing ones so that callers don't need to
+   * repeat every field (e.g. adding `cronReschedule` without losing
+   * `storage` / `getUploadUrl`).
    */
-  entrypoint: string;
+  setContextFactory(options: Partial<PluginContextFactoryOptions>): void;
   /**
-   * Provider-specific configuration (JSON-serializable)
+   * Get context for a plugin
    */
-  config: unknown;
-}
-/**
- * Auth provider module interface
- *
- * Modules specified by AuthDescriptor.entrypoint must export
- * an `authenticate` function matching this signature.
- */
-interface AuthProviderModule {
+  private getContext;
   /**
-   * Authenticate a request using the provider
+   * Get typed hooks for a specific hook name.
+   * The internal map stores ResolvedHook<unknown>, but we know each name
+   * maps to a specific handler type via HookHandlerMap.
    *
-   * @param request - The incoming HTTP request
-   * @param config - Provider-specific configuration from AuthDescriptor
-   * @returns Authentication result if valid, throws if invalid
+   * Exclusive hooks that have a selected provider are filtered out — they
+   * should only run via invokeExclusiveHook(), not in the regular pipeline.
    */
-  authenticate(request: Request, config: unknown): Promise<AuthResult>;
-}
-/**
- * Configuration options common to external auth providers
- */
-interface ExternalAuthConfig {
+  private getTypedHooks;
   /**
-   * Automatically create Dineway users on first login
-   * @default true
+   * Register all hooks from plugins.
+   *
+   * Registers each hook name individually to preserve type safety. The
+   * internal map stores ResolvedHook<unknown> since it's keyed by string,
+   * but getTypedHooks() restores the correct handler type on retrieval.
    */
-  autoProvision?: boolean;
+  private registerPlugins;
   /**
-   * Role level for users not matching any group in roleMapping
-   * @default 30 (Editor)
+   * Maps hook names to the capability required to register them.
+   *
+   * Hooks not listed here have no capability requirement (e.g. lifecycle
+   * hooks, cron). Any plugin declaring a listed hook without the required
+   * capability will have that hook silently skipped at registration time.
    */
-  defaultRole?: number;
+  private static readonly HOOK_REQUIRED_CAPABILITY;
   /**
-   * Update user's role on each login based on current IdP groups
-   * When false, role is only set on first provisioning
-   * @default false
+   * Register a single plugin's hook by name
    */
-  syncRoles?: boolean;
+  private registerPluginHook;
   /**
-   * Map IdP group names to Dineway role levels
-   * First match wins if user is in multiple groups
-   *
-   * @example
-   * ```ts
-   * roleMapping: {
-   *   "Admins": 50,        // Admin
-   *   "Developers": 40,    // Developer
-   *   "Content Team": 30,  // Editor
-   * }
-   * ```
+   * Register a single hook
    */
-  roleMapping?: Record<string, number>;
-}
-//#endregion
-//#region src/astro/storage/types.d.ts
-/**
- * Serializable storage configuration descriptor
- */
-interface StorageDescriptor {
-  /** Module path exporting createStorage function */
-  entrypoint: string;
-  /** Serializable config passed to createStorage at runtime */
-  config: unknown;
-}
-/**
- * S3-compatible storage configuration
- */
-interface S3StorageConfig {
-  /** S3 endpoint URL */
-  endpoint: string;
-  /** Bucket name */
-  bucket: string;
+  private registerHook;
   /**
-   * Access key ID.
-   * May be resolved from `S3_ACCESS_KEY_ID` at runtime on Node.
-   * Must be provided together with `secretAccessKey`, or both omitted.
+   * Sort hooks by priority and dependencies
    */
-  accessKeyId?: string;
+  private sortHooks;
   /**
-   * Secret access key.
-   * May be resolved from `S3_SECRET_ACCESS_KEY` at runtime on Node.
-   * Must be provided together with `accessKeyId`, or both omitted.
+   * Execute a hook with timeout
    */
-  secretAccessKey?: string;
-  /** Optional region (defaults to "auto") */
-  region?: string;
-  /** Optional public URL prefix for CDN */
-  publicUrl?: string;
-}
-/**
- * Local filesystem storage configuration
- */
-interface LocalStorageConfig {
-  /** Directory path for storing files */
-  directory: string;
-  /** Base URL for serving files */
-  baseUrl: string;
-}
-//#endregion
-//#region src/astro/integration/runtime.d.ts
-/**
- * Admin page definition (copied from plugins/types to avoid circular deps)
- */
-interface PluginAdminPage {
-  path: string;
-  label: string;
-  icon?: string;
-}
-/**
- * Dashboard widget definition (copied from plugins/types to avoid circular deps)
- */
-interface PluginDashboardWidget {
-  id: string;
-  size?: "full" | "half" | "third";
-  title?: string;
-}
-/**
- * Plugin descriptor - returned by plugin factory functions
- *
- * Contains all static metadata needed for manifest and admin UI,
- * plus the entrypoint for runtime instantiation.
- *
- * @example
- * ```ts
- * export function myPlugin(options?: MyPluginOptions): PluginDescriptor {
- *   return {
- *     id: "my-plugin",
- *     version: "1.0.0",
- *     entrypoint: "@my-org/dineway-plugin-foo",
- *     options: options ?? {},
- *     adminEntry: "@my-org/dineway-plugin-foo/admin",
- *     adminPages: [{ path: "/settings", label: "Settings" }],
- *   };
- * }
- * ```
- */
-/**
- * Storage collection declaration for sandboxed plugins
- */
-interface StorageCollectionDeclaration {
-  indexes?: string[];
-  uniqueIndexes?: string[];
-}
-interface PluginDescriptor<TOptions = Record<string, unknown>> {
-  /** Unique plugin identifier */
-  id: string;
-  /** Plugin version (semver) */
-  version: string;
-  /** Module specifier to import (e.g., "@dineway-ai/plugin-api-test") */
-  entrypoint: string;
+  private executeWithTimeout;
   /**
-   * Options to pass to createPlugin(). Native format only.
-   * Standard-format plugins configure themselves via KV settings
-   * and Block Kit admin pages -- not constructor options.
+   * Run plugin:install hooks
    */
-  options?: TOptions;
+  runPluginInstall(pluginId: string): Promise<HookResult<void>[]>;
   /**
-   * Plugin format. Determines how the entrypoint is loaded:
-   * - `"standard"` -- exports `definePlugin({ hooks, routes })` as default.
-   *   Wrapped with `adaptSandboxEntry` for in-process execution. Can run in both
-   *   `plugins: []` (in-process) and `sandboxed: []` (isolate).
-   * - `"native"` -- exports `createPlugin(options)` returning a `ResolvedPlugin`.
-   *   Can only run in `plugins: []`. Cannot be sandboxed or published to marketplace.
-   *
-   * Defaults to `"native"` when unset.
-   *
+   * Run plugin:activate hooks
    */
-  format?: "standard" | "native";
-  /** Admin UI module specifier (e.g., "@dineway-ai/plugin-audit-log/admin") */
-  adminEntry?: string;
-  /** Module specifier for site-side Astro rendering components (must export `blockComponents`) */
-  componentsEntry?: string;
-  /** Admin pages for navigation */
-  adminPages?: PluginAdminPage[];
-  /** Dashboard widgets */
-  adminWidgets?: PluginDashboardWidget[];
+  runPluginActivate(pluginId: string): Promise<HookResult<void>[]>;
   /**
-   * Capabilities the plugin requests.
-   * For standard-format plugins, capabilities are enforced in both trusted and
-   * sandboxed modes via the PluginContextFactory.
+   * Run plugin:deactivate hooks
    */
-  capabilities?: string[];
+  runPluginDeactivate(pluginId: string): Promise<HookResult<void>[]>;
   /**
-   * Allowed hosts for network:fetch capability
-   * Supports wildcards like "*.example.com"
+   * Run plugin:uninstall hooks
    */
-  allowedHosts?: string[];
+  runPluginUninstall(pluginId: string, deleteData: boolean): Promise<HookResult<void>[]>;
+  private runLifecycleHook;
   /**
-   * Storage collections the plugin declares
-   * Sandboxed plugins can only access declared collections.
+   * Run content:beforeSave hooks
+   * Returns modified content from the pipeline
    */
-  storage?: Record<string, StorageCollectionDeclaration>;
-}
-/**
- * Sandboxed plugin descriptor - same format as PluginDescriptor
- *
- * These run in isolated environments provided by the configured sandbox runner.
- * The `entrypoint` is resolved to a file and bundled at build time.
- */
-type SandboxedPluginDescriptor<TOptions = Record<string, unknown>> = PluginDescriptor<TOptions>;
-interface DinewayFontsConfig {
+  runContentBeforeSave(content: Record<string, unknown>, collection: string, isNew: boolean): Promise<{
+    content: Record<string, unknown>;
+    results: HookResult<Record<string, unknown>>[];
+  }>;
   /**
-   * Additional Noto Sans or compatible script families to include in the admin UI.
-   *
-   * Use script names like "arabic", "farsi", "japanese", or "chinese-simplified".
+   * Run content:afterSave hooks
    */
-  scripts?: string[];
-}
-interface DinewayConfig {
+  runContentAfterSave(content: Record<string, unknown>, collection: string, isNew: boolean): Promise<HookResult<void>[]>;
   /**
-   * Database configuration
-   *
-   * Use one of the adapter functions:
-   * - `libsql({ url: process.env.DINEWAY_DATABASE_URL || "file:./data.db" })` - Default Node/libSQL path
-   * - `sqlite({ url: "file:./data.db" })` - Local SQLite only
-   * - `postgres({ connectionString: process.env.DATABASE_URL! })` - PostgreSQL deployments
-   *
-   * @example
-   * ```ts
-   * import { libsql } from "dineway/db";
-   *
-   * dineway({
-   *   database: libsql({ url: process.env.DINEWAY_DATABASE_URL || "file:./data.db" }),
-   * })
-   * ```
+   * Run content:beforeDelete hooks
+   * Returns whether deletion is allowed
    */
-  database?: DatabaseDescriptor;
+  runContentBeforeDelete(id: string, collection: string): Promise<{
+    allowed: boolean;
+    results: HookResult<boolean>[];
+  }>;
   /**
-   * Storage configuration (for media)
+   * Run content:afterDelete hooks
    */
-  storage?: StorageDescriptor;
+  runContentAfterDelete(id: string, collection: string, permanent: boolean): Promise<HookResult<void>[]>;
   /**
-   * Trusted plugins to load (run in main isolate)
-   *
-   * @example
-   * ```ts
-   * import { auditLogPlugin } from "@dineway-ai/plugin-audit-log";
-   * import { webhookNotifierPlugin } from "@dineway-ai/plugin-webhook-notifier";
+   * Run content:afterPublish hooks (fire-and-forget).
+   */
+  runContentAfterPublish(content: Record<string, unknown>, collection: string): Promise<HookResult<void>[]>;
+  /**
+   * Run content:afterUnpublish hooks (fire-and-forget).
+   */
+  runContentAfterUnpublish(content: Record<string, unknown>, collection: string): Promise<HookResult<void>[]>;
+  /**
+   * Run media:beforeUpload hooks
+   */
+  runMediaBeforeUpload(file: {
+    name: string;
+    type: string;
+    size: number;
+  }): Promise<{
+    file: {
+      name: string;
+      type: string;
+      size: number;
+    };
+    results: HookResult<{
+      name: string;
+      type: string;
+      size: number;
+    }>[];
+  }>;
+  /**
+   * Run media:afterUpload hooks
+   */
+  runMediaAfterUpload(media: {
+    id: string;
+    filename: string;
+    mimeType: string;
+    size: number | null;
+    url: string;
+    createdAt: string;
+  }): Promise<HookResult<void>[]>;
+  /**
+   * Invoke the cron hook for a specific plugin.
    *
-   * dineway({
-   *   plugins: [
-   *     auditLogPlugin(),
-   *     webhookNotifierPlugin({ url: "https://example.com/webhook" }),
-   *   ],
-   * })
-   * ```
+   * Unlike other hooks which broadcast to all plugins, the cron hook is
+   * dispatched only to the target plugin — the one that owns the task.
    */
-  plugins?: PluginDescriptor[];
+  invokeCronHook(pluginId: string, event: CronEvent): Promise<HookResult<void>>;
   /**
-   * Sandboxed plugins to load (run behind the configured `SandboxRunner`)
+   * Run email:beforeSend hooks (middleware pipeline).
    *
-   * Uses the same format as `plugins`; the configured sandbox runner decides
-   * how isolation is enforced for the current runtime.
+   * Each handler receives the message and returns a modified message or
+   * `false` to cancel delivery. The pipeline chains message transformations —
+   * each handler receives the output of the previous one.
+   */
+  runEmailBeforeSend(message: EmailMessage, source: string): Promise<{
+    message: EmailMessage | false;
+    results: HookResult<EmailMessage | false>[];
+  }>;
+  /**
+   * Run email:afterSend hooks (fire-and-forget).
    *
-   * @example
-   * ```ts
-   * import { untrustedPlugin } from "some-third-party-plugin";
+   * Errors are logged but don't propagate — they don't affect the caller.
+   */
+  runEmailAfterSend(message: EmailMessage, source: string): Promise<HookResult<void>[]>;
+  /**
+   * Run comment:beforeCreate hooks (middleware pipeline).
    *
-   * dineway({
-   *   plugins: [trustedPlugin()],     // runs in host
-   *   sandboxed: [untrustedPlugin()], // runs in the default Node sandbox
-   * })
-   * ```
+   * Each handler receives the event and returns a modified event or
+   * `false` to reject the comment. The pipeline chains transformations —
+   * each handler receives the output of the previous one.
    */
-  sandboxed?: SandboxedPluginDescriptor[];
+  runCommentBeforeCreate(event: CommentBeforeCreateEvent): Promise<CommentBeforeCreateEvent | false>;
   /**
-   * Optional module that exports a custom sandbox runner factory.
-   * When omitted, Dineway uses its built-in Node sandbox runner.
+   * Run comment:afterCreate hooks (fire-and-forget).
    *
-   * @example
-   * ```ts
-   * import { createNodeSandboxRunner } from "dineway";
-   *
-   * export const createSandboxRunner = createNodeSandboxRunner;
-   * ```
-   *
-   * @example
-   * ```ts
-   * dineway({
-   *   sandboxRunner: "./src/sandbox-runner.ts",
-   * })
-   * ```
+   * Errors are logged but don't propagate — they don't affect the caller.
    */
-  sandboxRunner?: string;
+  runCommentAfterCreate(event: CommentAfterCreateEvent): Promise<void>;
   /**
-   * Authentication configuration
-   *
-   * Use an auth descriptor or an adapter function from a provider package.
-   *
-   * When an external auth provider is configured, passkey auth is disabled.
+   * Run comment:afterModerate hooks (fire-and-forget).
    *
-   * @example
-   * ```ts
-   * dineway({
-   *   auth: {
-   *     type: "header-auth",
-   *     entrypoint: "./src/header-auth.ts",
-   *     config: {
-   *       userHeader: "x-forwarded-user-email",
-   *       roleHeader: "x-forwarded-user-role",
-   *     },
-   *   },
-   * })
-   * ```
+   * Errors are logged but don't propagate — they don't affect the caller.
    */
-  auth?: AuthDescriptor;
+  runCommentAfterModerate(event: CommentAfterModerateEvent): Promise<void>;
   /**
-   * MCP (Model Context Protocol) server endpoint.
-   *
-   * Exposes an MCP Streamable HTTP server at `/_dineway/api/mcp`
-   * that allows AI agents and tools to interact with the CMS using
-   * the standardized MCP protocol.
-   *
-   * Enabled by default. The endpoint requires bearer token auth, so
-   * it has no practical effect unless the user creates an API token
-   * or configures an OAuth client. Set to `false` to disable.
-   *
-   * @default true
-   *
-   * @example
-   * ```ts
-   * dineway({
-   *   mcp: false,
-   * })
-   * ```
+   * Run page:metadata hooks. Each handler returns contributions that are
+   * merged by the metadata collector. Errors are logged but don't propagate.
    */
-  mcp?: boolean;
+  runPageMetadata(event: PageMetadataEvent): Promise<Array<{
+    pluginId: string;
+    contributions: PageMetadataContribution[];
+  }>>;
   /**
-   * Plugin marketplace URL
-   *
-   * When set, enables the marketplace features: browse, install, update,
-   * and uninstall plugins from a remote marketplace.
-   *
-   * Must be an HTTPS URL in production, or localhost/127.0.0.1 in dev.
-   * Marketplace plugins run in the built-in Node sandbox runner unless
-   * `sandboxRunner` is set to override it.
-   *
-   * @example
-   * ```ts
-   * dineway({
-   *   marketplace: "https://marketplace.example.com",
-   * })
-   * ```
+   * Run page:fragments hooks. Only trusted plugins should be registered
+   * for this hook. Errors are logged but don't propagate.
    */
-  marketplace?: string;
+  runPageFragments(event: PageFragmentEvent): Promise<Array<{
+    pluginId: string;
+    contributions: PageFragmentContribution[];
+  }>>;
   /**
-   * Maximum allowed media file upload size in bytes.
-   *
-   * Applies to both direct multipart uploads and signed-URL uploads.
-   * When omitted, Dineway defaults to 52_428_800 (50 MB).
-   *
-   * @example
-   * ```ts
-   * dineway({ maxUploadSize: 100 * 1024 * 1024 }) // 100 MB
-   * ```
+   * Check if any hooks are registered for a given name
    */
-  maxUploadSize?: number;
+  hasHooks(name: HookNameV2): boolean;
   /**
-   * Admin UI branding.
-   *
-   * Use this to customize the logo, name, and favicon shown in the
-   * Dineway admin panel without changing public site identity settings.
-   *
-   * @example
-   * ```ts
-   * dineway({
-   *   admin: {
-   *     logo: "/images/agency-logo.svg",
-   *     siteName: "Agency Console",
-   *     favicon: "/agency-favicon.ico",
-   *   },
-   * })
-   * ```
+   * Get hook count for debugging
    */
-  admin?: {
-    /** URL or path to a custom logo image for the admin UI. */logo?: string; /** Custom name displayed in the admin sidebar and browser tab. */
-    siteName?: string; /** URL or path to a custom favicon for the admin panel. */
-    favicon?: string;
-  };
+  getHookCount(name: HookNameV2): number;
   /**
-   * Admin UI font configuration.
-   *
-   * By default, Dineway uses the Astro Font API to load Noto Sans at
-   * build time and self-host the generated font files. Set to false to
-   * disable Dineway-managed fonts and use system fonts.
-   *
-   * @example
-   * ```ts
-   * dineway({
-   *   fonts: {
-   *     scripts: ["arabic", "farsi", "japanese"],
-   *   },
-   * })
-   * ```
+   * Get all registered hook names
    */
-  fonts?: false | DinewayFontsConfig;
+  getRegisteredHooks(): HookNameV2[];
   /**
-   * Public browser-facing origin for the site.
-   *
-   * Use when `Astro.url` / `request.url` do not match what users open — common with a
-   * **TLS-terminating reverse proxy**: the app often sees `http://` on the internal hop
-   * while the browser uses `https://`, which breaks WebAuthn, CSRF, OAuth, and redirect URLs.
-   *
-   * Set to the full origin users type in the address bar (no path), e.g.
-   * `https://mysite.example.com`. When not set, falls back to environment variables
-   * `DINEWAY_SITE_URL` > `SITE_URL`, then to the request URL's origin.
-   *
-   * Replaces `passkeyPublicOrigin` (which only fixed passkeys).
+   * Returns hook names where at least one handler declared exclusive: true
    */
-  siteUrl?: string;
+  getRegisteredExclusiveHooks(): string[];
   /**
-   * Reverse-proxy headers that Dineway may trust for client IP resolution.
-   *
-   * Defaults to no trusted headers. Set this only when Dineway is deployed
-   * behind a reverse proxy you control and that proxy strips or overwrites
-   * incoming client-supplied copies of these headers.
-   *
-   * When omitted, Dineway falls back to `DINEWAY_TRUSTED_PROXY_HEADERS`.
-   *
-   * @example
-   * ```ts
-   * dineway({
-   *   trustedProxyHeaders: ["x-real-ip", "x-forwarded-for"],
-   * })
-   * ```
+   * Check if a hook is exclusive
    */
-  trustedProxyHeaders?: string[];
+  isExclusiveHook(name: string): boolean;
   /**
-   * Enable playground mode for ephemeral "try Dineway" sites.
-   *
-   * When set, the integration injects a playground middleware (order: "pre")
-   * that runs BEFORE the normal Dineway middleware chain. It creates an
-   * isolated session database per visitor, runs migrations, applies the
-   * seed, creates an anonymous admin user, and stashes the request-scoped
-   * database on locals so the runtime and request-context middleware can
-   * pick it up.
-   *
-   * Setup and auth middleware are skipped because the playground middleware
-   * handles bootstrap and user injection.
-   *
-   * For the first portable release, playground sidecars are explicitly
-   * single-instance only.
-   *
-   * @example
-   * ```ts
-   * import { fileURLToPath } from "node:url";
-   * import { libsql } from "dineway/db";
-   *
-   * dineway({
-   *   database: libsql({ url: process.env.DINEWAY_DATABASE_URL || "file:./playground.db" }),
-   *   playground: {
-   *     middlewareEntrypoint: fileURLToPath(
-   *       new URL("./src/playground-middleware.ts", import.meta.url)
-   *     ),
-   *   },
-   * })
-   * ```
+   * Set the selected provider for an exclusive hook.
+   * Called by PluginManager after resolution.
    */
-  playground?: {
-    /** Module path for the playground middleware. */middlewareEntrypoint: string;
-  };
+  setExclusiveSelection(hookName: string, pluginId: string): void;
   /**
-   * Media providers for browsing and uploading media
-   *
-   * The local media provider (using storage adapter) is available by default.
-   * Additional providers can be added for external services like Unsplash,
-   * Cloudinary, Mux, and other provider packages.
+   * Clear the selected provider for an exclusive hook.
+   */
+  clearExclusiveSelection(hookName: string): void;
+  /**
+   * Get the selected provider for an exclusive hook (if any).
+   */
+  getExclusiveSelection(hookName: string): string | undefined;
+  /**
+   * Get all plugins that registered a handler for a given exclusive hook.
+   */
+  getExclusiveHookProviders(hookName: string): Array<{
+    pluginId: string;
+  }>;
+  /**
+   * Get all plugins that registered a non-exclusive handler for a given hook,
+   * preserving priority order. This partitions with getExclusiveHookProviders().
+   */
+  getHookProviders(hookName: string): Array<{
+    pluginId: string;
+  }>;
+  /**
+   * Invoke an exclusive hook — dispatch only to the selected provider.
+   * Returns null if no provider is selected or if the selected hook
+   * is not found in the pipeline.
    *
-   * @example
-   * ```ts
-   * import { unsplash } from "@dineway-ai/provider-unsplash";
+   * This is a generic dispatch used by the email pipeline and other
+   * exclusive hook consumers. The handler type is unknown — callers
+   * must know the expected signature.
    *
-   * dineway({
-   *   mediaProviders: [
-   *     unsplash({ accessKey: "..." }),
-   *   ],
-   * })
-   * ```
+   * Errors are isolated: a failing handler returns an error result
+   * instead of propagating the exception to the caller.
    */
-  mediaProviders?: MediaProviderDescriptor[];
+  invokeExclusiveHook(hookName: string, event: unknown): Promise<{
+    result: unknown;
+    pluginId: string;
+    error?: Error;
+    duration: number;
+  } | null>;
 }
 /**
- * Get stored config from global
- * This is set by the virtual module at build time
+ * Create a hook pipeline from plugins
  */
-declare function getStoredConfig(): DinewayConfig | null;
-declare global {
-  var __dinewayConfig: DinewayConfig | undefined;
-}
-//#endregion
-//#region src/plugins/manifest-schema.d.ts
-/**
- * Zod schema matching the PluginManifest interface from types.ts.
- *
- * Every JSON.parse of a manifest.json should validate through this.
- */
-declare const pluginManifestSchema: z$1.ZodObject<{
-  id: z$1.ZodString;
-  version: z$1.ZodString;
-  capabilities: z$1.ZodArray<z$1.ZodEnum<{
-    "network:fetch": "network:fetch";
-    "network:fetch:any": "network:fetch:any";
-    "read:content": "read:content";
-    "write:content": "write:content";
-    "read:media": "read:media";
-    "write:media": "write:media";
-    "read:users": "read:users";
-    "email:send": "email:send";
-    "email:provide": "email:provide";
-    "email:intercept": "email:intercept";
-    "page:inject": "page:inject";
-  }>>;
-  allowedHosts: z$1.ZodArray<z$1.ZodString>;
-  storage: z$1.ZodRecord<z$1.ZodString, z$1.ZodObject<{
-    indexes: z$1.ZodArray<z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodString>]>>;
-    uniqueIndexes: z$1.ZodOptional<z$1.ZodArray<z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodString>]>>>;
-  }, z$1.core.$strip>>;
-  hooks: z$1.ZodArray<z$1.ZodUnion<readonly [z$1.ZodEnum<{
-    "plugin:install": "plugin:install";
-    "plugin:activate": "plugin:activate";
-    "plugin:deactivate": "plugin:deactivate";
-    "plugin:uninstall": "plugin:uninstall";
-    "content:beforeSave": "content:beforeSave";
-    "content:afterSave": "content:afterSave";
-    "content:beforeDelete": "content:beforeDelete";
-    "content:afterDelete": "content:afterDelete";
-    "content:afterPublish": "content:afterPublish";
-    "content:afterUnpublish": "content:afterUnpublish";
-    "media:beforeUpload": "media:beforeUpload";
-    "media:afterUpload": "media:afterUpload";
-    cron: "cron";
-    "email:beforeSend": "email:beforeSend";
-    "email:deliver": "email:deliver";
-    "email:afterSend": "email:afterSend";
-    "comment:beforeCreate": "comment:beforeCreate";
-    "comment:moderate": "comment:moderate";
-    "comment:afterCreate": "comment:afterCreate";
-    "comment:afterModerate": "comment:afterModerate";
-    "page:metadata": "page:metadata";
-    "page:fragments": "page:fragments";
-  }>, z$1.ZodObject<{
-    name: z$1.ZodEnum<{
-      "plugin:install": "plugin:install";
-      "plugin:activate": "plugin:activate";
-      "plugin:deactivate": "plugin:deactivate";
-      "plugin:uninstall": "plugin:uninstall";
-      "content:beforeSave": "content:beforeSave";
-      "content:afterSave": "content:afterSave";
-      "content:beforeDelete": "content:beforeDelete";
-      "content:afterDelete": "content:afterDelete";
-      "content:afterPublish": "content:afterPublish";
-      "content:afterUnpublish": "content:afterUnpublish";
-      "media:beforeUpload": "media:beforeUpload";
-      "media:afterUpload": "media:afterUpload";
-      cron: "cron";
-      "email:beforeSend": "email:beforeSend";
-      "email:deliver": "email:deliver";
-      "email:afterSend": "email:afterSend";
-      "comment:beforeCreate": "comment:beforeCreate";
-      "comment:moderate": "comment:moderate";
-      "comment:afterCreate": "comment:afterCreate";
-      "comment:afterModerate": "comment:afterModerate";
-      "page:metadata": "page:metadata";
-      "page:fragments": "page:fragments";
-    }>;
-    exclusive: z$1.ZodOptional<z$1.ZodBoolean>;
-    priority: z$1.ZodOptional<z$1.ZodNumber>;
-    timeout: z$1.ZodOptional<z$1.ZodNumber>;
-  }, z$1.core.$strip>]>>;
-  routes: z$1.ZodArray<z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodObject<{
-    name: z$1.ZodString;
-    public: z$1.ZodOptional<z$1.ZodBoolean>;
-  }, z$1.core.$strip>]>>;
-  admin: z$1.ZodObject<{
-    entry: z$1.ZodOptional<z$1.ZodString>;
-    settingsSchema: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
-      type: z$1.ZodLiteral<"string">;
-      default: z$1.ZodOptional<z$1.ZodString>;
-      multiline: z$1.ZodOptional<z$1.ZodBoolean>;
-      label: z$1.ZodString;
-      description: z$1.ZodOptional<z$1.ZodString>;
-    }, z$1.core.$strip>, z$1.ZodObject<{
-      type: z$1.ZodLiteral<"number">;
-      default: z$1.ZodOptional<z$1.ZodNumber>;
-      min: z$1.ZodOptional<z$1.ZodNumber>;
-      max: z$1.ZodOptional<z$1.ZodNumber>;
-      label: z$1.ZodString;
-      description: z$1.ZodOptional<z$1.ZodString>;
-    }, z$1.core.$strip>, z$1.ZodObject<{
-      type: z$1.ZodLiteral<"boolean">;
-      default: z$1.ZodOptional<z$1.ZodBoolean>;
-      label: z$1.ZodString;
-      description: z$1.ZodOptional<z$1.ZodString>;
-    }, z$1.core.$strip>, z$1.ZodObject<{
-      type: z$1.ZodLiteral<"select">;
-      options: z$1.ZodArray<z$1.ZodObject<{
-        value: z$1.ZodString;
-        label: z$1.ZodString;
-      }, z$1.core.$strip>>;
-      default: z$1.ZodOptional<z$1.ZodString>;
-      label: z$1.ZodString;
-      description: z$1.ZodOptional<z$1.ZodString>;
-    }, z$1.core.$strip>, z$1.ZodObject<{
-      type: z$1.ZodLiteral<"secret">;
-      label: z$1.ZodString;
-      description: z$1.ZodOptional<z$1.ZodString>;
-    }, z$1.core.$strip>], "type">>>;
-    pages: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-      path: z$1.ZodString;
-      label: z$1.ZodString;
-      icon: z$1.ZodOptional<z$1.ZodString>;
-    }, z$1.core.$strip>>>;
-    widgets: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-      id: z$1.ZodString;
-      size: z$1.ZodOptional<z$1.ZodEnum<{
-        full: "full";
-        half: "half";
-        third: "third";
-      }>>;
-      title: z$1.ZodOptional<z$1.ZodString>;
-    }, z$1.core.$strip>>>;
-    fieldWidgets: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-      name: z$1.ZodString;
-      label: z$1.ZodString;
-      fieldTypes: z$1.ZodArray<z$1.ZodEnum<{
-        string: "string";
-        number: "number";
-        boolean: "boolean";
-        text: "text";
-        integer: "integer";
-        datetime: "datetime";
-        select: "select";
-        multiSelect: "multiSelect";
-        portableText: "portableText";
-        image: "image";
-        file: "file";
-        reference: "reference";
-        json: "json";
-        slug: "slug";
-        repeater: "repeater";
-      }>>;
-      elements: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        type: z$1.ZodString;
-        action_id: z$1.ZodString;
-        label: z$1.ZodOptional<z$1.ZodString>;
-      }, z$1.core.$loose>>>;
-    }, z$1.core.$strip>>>;
-  }, z$1.core.$strip>;
-}, z$1.core.$strip>;
-type ValidatedPluginManifest = z$1.infer<typeof pluginManifestSchema>;
-//#endregion
-//#region src/plugins/hooks.d.ts
-type HookNameV2 = "plugin:install" | "plugin:activate" | "plugin:deactivate" | "plugin:uninstall" | "content:beforeSave" | "content:afterSave" | "content:beforeDelete" | "content:afterDelete" | "content:afterPublish" | "content:afterUnpublish" | "media:beforeUpload" | "media:afterUpload" | "cron" | "email:beforeSend" | "email:deliver" | "email:afterSend" | "comment:beforeCreate" | "comment:moderate" | "comment:afterCreate" | "comment:afterModerate" | "page:metadata" | "page:fragments";
-/**
- * Hook execution result
- */
-interface HookResult<T> {
-  success: boolean;
-  value?: T;
-  error?: Error;
-  pluginId: string;
-  duration: number;
-}
-/**
- * Hook pipeline for executing hooks in order
- */
-declare class HookPipeline {
-  private hooks;
-  private pluginMap;
-  private contextFactory;
-  /** Stored so setContextFactory can merge incrementally. */
-  private contextFactoryOptions;
-  /** Hook names where at least one handler declared exclusive: true */
-  private exclusiveHookNames;
-  /**
-   * Selected provider plugin ID for each exclusive hook.
-   * Set by the PluginManager after resolution.
-   */
-  private exclusiveSelections;
-  constructor(plugins: ResolvedPlugin[], factoryOptions?: PluginContextFactoryOptions);
-  /**
-   * Set or update the context factory options.
-   *
-   * When called on a pipeline that already has a factory, the new options
-   * are merged on top of the existing ones so that callers don't need to
-   * repeat every field (e.g. adding `cronReschedule` without losing
-   * `storage` / `getUploadUrl`).
-   */
-  setContextFactory(options: Partial<PluginContextFactoryOptions>): void;
-  /**
-   * Get context for a plugin
-   */
-  private getContext;
-  /**
-   * Get typed hooks for a specific hook name.
-   * The internal map stores ResolvedHook<unknown>, but we know each name
-   * maps to a specific handler type via HookHandlerMap.
-   *
-   * Exclusive hooks that have a selected provider are filtered out — they
-   * should only run via invokeExclusiveHook(), not in the regular pipeline.
-   */
-  private getTypedHooks;
-  /**
-   * Register all hooks from plugins.
-   *
-   * Registers each hook name individually to preserve type safety. The
-   * internal map stores ResolvedHook<unknown> since it's keyed by string,
-   * but getTypedHooks() restores the correct handler type on retrieval.
-   */
-  private registerPlugins;
-  /**
-   * Maps hook names to the capability required to register them.
-   *
-   * Hooks not listed here have no capability requirement (e.g. lifecycle
-   * hooks, cron). Any plugin declaring a listed hook without the required
-   * capability will have that hook silently skipped at registration time.
-   */
-  private static readonly HOOK_REQUIRED_CAPABILITY;
-  /**
-   * Register a single plugin's hook by name
-   */
-  private registerPluginHook;
-  /**
-   * Register a single hook
-   */
-  private registerHook;
-  /**
-   * Sort hooks by priority and dependencies
-   */
-  private sortHooks;
-  /**
-   * Execute a hook with timeout
-   */
-  private executeWithTimeout;
-  /**
-   * Run plugin:install hooks
-   */
-  runPluginInstall(pluginId: string): Promise<HookResult<void>[]>;
-  /**
-   * Run plugin:activate hooks
-   */
-  runPluginActivate(pluginId: string): Promise<HookResult<void>[]>;
-  /**
-   * Run plugin:deactivate hooks
-   */
-  runPluginDeactivate(pluginId: string): Promise<HookResult<void>[]>;
-  /**
-   * Run plugin:uninstall hooks
-   */
-  runPluginUninstall(pluginId: string, deleteData: boolean): Promise<HookResult<void>[]>;
-  private runLifecycleHook;
-  /**
-   * Run content:beforeSave hooks
-   * Returns modified content from the pipeline
-   */
-  runContentBeforeSave(content: Record<string, unknown>, collection: string, isNew: boolean): Promise<{
-    content: Record<string, unknown>;
-    results: HookResult<Record<string, unknown>>[];
-  }>;
-  /**
-   * Run content:afterSave hooks
-   */
-  runContentAfterSave(content: Record<string, unknown>, collection: string, isNew: boolean): Promise<HookResult<void>[]>;
-  /**
-   * Run content:beforeDelete hooks
-   * Returns whether deletion is allowed
-   */
-  runContentBeforeDelete(id: string, collection: string): Promise<{
-    allowed: boolean;
-    results: HookResult<boolean>[];
-  }>;
-  /**
-   * Run content:afterDelete hooks
-   */
-  runContentAfterDelete(id: string, collection: string, permanent: boolean): Promise<HookResult<void>[]>;
-  /**
-   * Run content:afterPublish hooks (fire-and-forget).
-   */
-  runContentAfterPublish(content: Record<string, unknown>, collection: string): Promise<HookResult<void>[]>;
-  /**
-   * Run content:afterUnpublish hooks (fire-and-forget).
-   */
-  runContentAfterUnpublish(content: Record<string, unknown>, collection: string): Promise<HookResult<void>[]>;
-  /**
-   * Run media:beforeUpload hooks
-   */
-  runMediaBeforeUpload(file: {
-    name: string;
-    type: string;
-    size: number;
-  }): Promise<{
-    file: {
-      name: string;
-      type: string;
-      size: number;
-    };
-    results: HookResult<{
-      name: string;
-      type: string;
-      size: number;
-    }>[];
-  }>;
-  /**
-   * Run media:afterUpload hooks
-   */
-  runMediaAfterUpload(media: {
-    id: string;
-    filename: string;
-    mimeType: string;
-    size: number | null;
-    url: string;
-    createdAt: string;
-  }): Promise<HookResult<void>[]>;
-  /**
-   * Invoke the cron hook for a specific plugin.
-   *
-   * Unlike other hooks which broadcast to all plugins, the cron hook is
-   * dispatched only to the target plugin — the one that owns the task.
-   */
-  invokeCronHook(pluginId: string, event: CronEvent): Promise<HookResult<void>>;
-  /**
-   * Run email:beforeSend hooks (middleware pipeline).
-   *
-   * Each handler receives the message and returns a modified message or
-   * `false` to cancel delivery. The pipeline chains message transformations —
-   * each handler receives the output of the previous one.
-   */
-  runEmailBeforeSend(message: EmailMessage, source: string): Promise<{
-    message: EmailMessage | false;
-    results: HookResult<EmailMessage | false>[];
-  }>;
-  /**
-   * Run email:afterSend hooks (fire-and-forget).
-   *
-   * Errors are logged but don't propagate — they don't affect the caller.
-   */
-  runEmailAfterSend(message: EmailMessage, source: string): Promise<HookResult<void>[]>;
-  /**
-   * Run comment:beforeCreate hooks (middleware pipeline).
-   *
-   * Each handler receives the event and returns a modified event or
-   * `false` to reject the comment. The pipeline chains transformations —
-   * each handler receives the output of the previous one.
-   */
-  runCommentBeforeCreate(event: CommentBeforeCreateEvent): Promise<CommentBeforeCreateEvent | false>;
-  /**
-   * Run comment:afterCreate hooks (fire-and-forget).
-   *
-   * Errors are logged but don't propagate — they don't affect the caller.
-   */
-  runCommentAfterCreate(event: CommentAfterCreateEvent): Promise<void>;
-  /**
-   * Run comment:afterModerate hooks (fire-and-forget).
-   *
-   * Errors are logged but don't propagate — they don't affect the caller.
-   */
-  runCommentAfterModerate(event: CommentAfterModerateEvent): Promise<void>;
-  /**
-   * Run page:metadata hooks. Each handler returns contributions that are
-   * merged by the metadata collector. Errors are logged but don't propagate.
-   */
-  runPageMetadata(event: PageMetadataEvent): Promise<Array<{
-    pluginId: string;
-    contributions: PageMetadataContribution[];
-  }>>;
-  /**
-   * Run page:fragments hooks. Only trusted plugins should be registered
-   * for this hook. Errors are logged but don't propagate.
-   */
-  runPageFragments(event: PageFragmentEvent): Promise<Array<{
-    pluginId: string;
-    contributions: PageFragmentContribution[];
-  }>>;
-  /**
-   * Check if any hooks are registered for a given name
-   */
-  hasHooks(name: HookNameV2): boolean;
-  /**
-   * Get hook count for debugging
-   */
-  getHookCount(name: HookNameV2): number;
-  /**
-   * Get all registered hook names
-   */
-  getRegisteredHooks(): HookNameV2[];
-  /**
-   * Returns hook names where at least one handler declared exclusive: true
-   */
-  getRegisteredExclusiveHooks(): string[];
-  /**
-   * Check if a hook is exclusive
-   */
-  isExclusiveHook(name: string): boolean;
-  /**
-   * Set the selected provider for an exclusive hook.
-   * Called by PluginManager after resolution.
-   */
-  setExclusiveSelection(hookName: string, pluginId: string): void;
-  /**
-   * Clear the selected provider for an exclusive hook.
-   */
-  clearExclusiveSelection(hookName: string): void;
-  /**
-   * Get the selected provider for an exclusive hook (if any).
-   */
-  getExclusiveSelection(hookName: string): string | undefined;
-  /**
-   * Get all plugins that registered a handler for a given exclusive hook.
-   */
-  getExclusiveHookProviders(hookName: string): Array<{
-    pluginId: string;
-  }>;
-  /**
-   * Invoke an exclusive hook — dispatch only to the selected provider.
-   * Returns null if no provider is selected or if the selected hook
-   * is not found in the pipeline.
-   *
-   * This is a generic dispatch used by the email pipeline and other
-   * exclusive hook consumers. The handler type is unknown — callers
-   * must know the expected signature.
-   *
-   * Errors are isolated: a failing handler returns an error result
-   * instead of propagating the exception to the caller.
-   */
-  invokeExclusiveHook(hookName: string, event: unknown): Promise<{
-    result: unknown;
-    pluginId: string;
-    error?: Error;
-    duration: number;
-  } | null>;
-}
-/**
- * Create a hook pipeline from plugins
- */
-declare function createHookPipeline(plugins: ResolvedPlugin[], factoryOptions?: PluginContextFactoryOptions): HookPipeline;
+declare function createHookPipeline(plugins: ResolvedPlugin[], factoryOptions?: PluginContextFactoryOptions): HookPipeline;
 //#endregion
 //#region src/plugins/email.d.ts
 /**
@@ -3412,517 +2870,104 @@ declare class PluginManager {
   /**
    * Set the selected provider for an exclusive hook in the options table.
    * Pass null to clear the selection.
-   */
-  setExclusiveHookSelection(hookName: string, pluginId: string | null): Promise<void>;
-  /**
-   * Resolution algorithm for exclusive hooks.
-   *
-   * Delegates to the shared resolveExclusiveHooks() function.
-   * See hooks.ts for the full algorithm description.
-   */
-  resolveExclusiveHooks(preferredHints?: Map<string, string[]>): Promise<void>;
-  /**
-   * Get all exclusive hooks with their providers and current selections.
-   * Used by the admin API.
-   */
-  getExclusiveHooksInfo(): Promise<Array<{
-    hookName: string;
-    providers: Array<{
-      pluginId: string;
-    }>;
-    selectedPluginId: string | null;
-  }>>;
-  /**
-   * Initialize or reinitialize the hook pipeline and route registry
-   */
-  private ensureInitialized;
-  /**
-   * Force reinitialization (useful after plugin state changes)
-   */
-  reinitialize(): void;
-  /**
-   * Delete all cron tasks for a plugin.
-   * Used during uninstall.
-   */
-  private deleteCronTasks;
-}
-/**
- * Create a plugin manager
- */
-declare function createPluginManager(options: PluginManagerOptions): PluginManager;
-//#endregion
-//#region src/plugins/sandbox/noop.d.ts
-/**
- * Error thrown when attempting to use sandboxing on an unsupported platform.
- */
-declare class SandboxNotAvailableError extends Error {
-  constructor();
-}
-/**
- * No-op sandbox runner for platforms without isolation support.
- *
- * - `isAvailable()` returns false
- * - `load()` throws SandboxNotAvailableError
- * - `terminateAll()` is a no-op
- *
- * This is the default runner when no platform adapter is configured.
- */
-declare class NoopSandboxRunner implements SandboxRunner {
-  /**
-   * Always returns false - sandboxing is not available.
-   */
-  isAvailable(): boolean;
-  /**
-   * Always throws - can't load sandboxed plugins without isolation.
-   */
-  load(_manifest: PluginManifest, _code: string): Promise<SandboxedPlugin>;
-  /**
-   * No-op - sandboxing not available, email callback is irrelevant.
-   */
-  setEmailSend(): void;
-  /**
-   * No-op - nothing to terminate.
-   */
-  terminateAll(): Promise<void>;
-}
-/**
- * Create a no-op sandbox runner.
- * This is used as the default when no platform adapter is configured.
- */
-declare function createNoopSandboxRunner(_options?: SandboxOptions): SandboxRunner;
-//#endregion
-//#region src/plugins/sandbox/runtime-options.d.ts
-interface SandboxRunnerRuntimeOptions extends SandboxOptions {
-  mediaStorage?: Storage;
-  cronReschedule?: () => void;
-}
-//#endregion
-//#region src/plugins/sandbox/node.d.ts
-declare class NodeSandboxRunner implements SandboxRunner {
-  private readonly options;
-  private readonly limits;
-  private readonly activeWorkers;
-  private emailSend;
-  constructor(options: SandboxRunnerRuntimeOptions);
-  isAvailable(): boolean;
-  load(manifest: PluginManifest, code: string): Promise<SandboxedPlugin>;
-  setEmailSend(callback: SandboxEmailSendCallback | null): void;
-  terminateAll(): Promise<void>;
-}
-declare function createNodeSandboxRunner(options: SandboxRunnerRuntimeOptions): SandboxRunner;
-//#endregion
-//#region src/import/types.d.ts
-/** Author info from WordPress */
-interface WpAuthorInfo {
-  id?: number;
-  login?: string;
-  email?: string;
-  displayName?: string;
-  postCount: number;
-}
-/** File-based input (WXR upload) */
-interface FileInput {
-  type: "file";
-  file: File;
-}
-/** URL-based input (REST API probe) */
-interface UrlInput {
-  type: "url";
-  url: string;
-  /** Optional auth token for authenticated requests */
-  token?: string;
-}
-/** OAuth-based input (WordPress.com) */
-interface OAuthInput {
-  type: "oauth";
-  url: string;
-  accessToken: string;
-  /** Site ID for WordPress.com */
-  siteId?: string;
-}
-type SourceInput = FileInput | UrlInput | OAuthInput;
-/** Auth requirements for an import source */
-interface SourceAuth {
-  type: "oauth" | "token" | "password" | "none";
-  /** OAuth provider identifier */
-  provider?: string;
-  /** OAuth authorization URL */
-  oauthUrl?: string;
-  /** Human-readable instructions */
-  instructions?: string;
-}
-/** What the source can provide */
-interface SourceCapabilities {
-  /** Can fetch published content without auth */
-  publicContent: boolean;
-  /** Can fetch drafts/private (may need auth) */
-  privateContent: boolean;
-  /** Can fetch all custom post types */
-  customPostTypes: boolean;
-  /** Can fetch all meta fields */
-  allMeta: boolean;
-  /** Can stream media directly */
-  mediaStream: boolean;
-}
-/** Suggested next action after probe */
-type SuggestedAction = {
-  type: "proceed";
-} | {
-  type: "oauth";
-  url: string;
-  provider: string;
-} | {
-  type: "upload";
-  instructions: string;
-} | {
-  type: "install-plugin";
-  instructions: string;
-};
-/** Detected i18n/multilingual plugin info */
-interface I18nDetection {
-  /** Multilingual plugin name (e.g. "wpml", "polylang") */
-  plugin: string;
-  /** BCP 47 default locale */
-  defaultLocale: string;
-  /** All configured locales */
-  locales: string[];
-}
-/** Result of probing a URL for a specific source */
-interface SourceProbeResult {
-  /** Which source can handle this */
-  sourceId: string;
-  /** Confidence level */
-  confidence: "definite" | "likely" | "possible";
-  /** What we detected */
-  detected: {
-    platform: string;
-    version?: string;
-    siteTitle?: string;
-    siteUrl?: string;
-  };
-  /** What capabilities are available */
-  capabilities: SourceCapabilities;
-  /** What auth is needed, if any */
-  auth?: SourceAuth;
-  /** Suggested next step */
-  suggestedAction: SuggestedAction;
-  /** Preview data if available (e.g., post counts from REST API) */
-  preview?: {
-    posts?: number;
-    pages?: number;
-    media?: number;
-  };
-  /** Detected multilingual plugin. Absent when none detected. */
-  i18n?: I18nDetection;
-}
-/** Combined probe result from all sources */
-interface ProbeResult {
-  url: string;
-  isWordPress: boolean;
-  /** Best matching source (highest confidence) */
-  bestMatch: SourceProbeResult | null;
-  /** All matching sources */
-  allMatches: SourceProbeResult[];
-}
-/** Field definition for import */
-interface ImportFieldDef {
-  slug: string;
-  label: string;
-  type: string;
-  required: boolean;
-  searchable?: boolean;
-}
-/** Field compatibility with existing schema */
-type FieldCompatibility = "compatible" | "type_mismatch" | "missing";
-/** Schema status for a collection */
-interface CollectionSchemaStatus {
-  exists: boolean;
-  fieldStatus: Record<string, {
-    status: FieldCompatibility;
-    existingType?: string;
-    requiredType: string;
-  }>;
-  canImport: boolean;
-  reason?: string;
-}
-/** Analysis of a single post type */
-interface PostTypeAnalysis {
-  name: string;
-  count: number;
-  suggestedCollection: string;
-  requiredFields: ImportFieldDef[];
-  schemaStatus: CollectionSchemaStatus;
-}
-/** Attachment/media info */
-interface AttachmentInfo {
-  id?: number;
-  title?: string;
-  url?: string;
-  filename?: string;
-  mimeType?: string;
-  alt?: string;
-  caption?: string;
-  width?: number;
-  height?: number;
-}
-/** Navigation menu analysis */
-interface NavMenuAnalysis {
-  /** Menu name/slug */
-  name: string;
-  /** Menu display label */
-  label: string;
-  /** Number of items in this menu */
-  itemCount: number;
-}
-/** Custom taxonomy analysis */
-interface TaxonomyAnalysis {
-  /** Taxonomy slug (e.g., 'genre', 'portfolio_category') */
-  slug: string;
-  /** Number of terms in this taxonomy */
-  termCount: number;
-  /** Sample term names */
-  sampleTerms: string[];
-}
-/** Reusable block analysis (wp_block post type) */
-interface ReusableBlockAnalysis {
-  /** Original WP ID */
-  id: number;
-  /** Block title */
-  title: string;
-  /** Block slug */
-  slug: string;
-}
-/** Normalized analysis result - same format for all sources */
-interface ImportAnalysis {
-  /** Source that produced this analysis */
-  sourceId: string;
-  site: {
-    title: string;
-    url: string;
-  };
-  postTypes: PostTypeAnalysis[];
-  attachments: {
-    count: number;
-    items: AttachmentInfo[];
-  };
-  categories: number;
-  tags: number;
-  authors: WpAuthorInfo[];
-  /** Navigation menus found in the export */
-  navMenus?: NavMenuAnalysis[];
-  /** Custom taxonomies (beyond categories/tags) */
-  customTaxonomies?: TaxonomyAnalysis[];
-  /** Reusable blocks (wp_block post type) - will be imported as sections */
-  reusableBlocks?: ReusableBlockAnalysis[];
-  /** Source-specific custom fields analysis */
-  customFields?: Array<{
-    key: string;
-    count: number;
-    samples: string[];
-    suggestedField: string;
-    suggestedType: "string" | "number" | "boolean" | "date" | "json";
-    isInternal: boolean;
-  }>;
-  /** Detected multilingual plugin. Absent when none detected. */
-  i18n?: I18nDetection;
-}
-/** Normalized content item - produced by all sources */
-interface NormalizedItem {
-  /** Original ID from source */
-  sourceId: string | number;
-  /** WordPress post type */
-  postType: string;
-  /** Content status */
-  status: "publish" | "draft" | "pending" | "private" | "future";
-  /** URL slug */
-  slug: string;
-  /** Title */
-  title: string;
-  /** Content as Portable Text (already converted) */
-  content: PortableTextBlock[];
-  /** Excerpt/summary */
-  excerpt?: string;
-  /** Publication date */
-  date: Date;
-  /** Last modified date */
-  modified?: Date;
-  /** Author identifier */
-  author?: string;
-  /** Category slugs */
-  categories?: string[];
-  /** Tag slugs */
-  tags?: string[];
-  /** Custom meta fields */
-  meta?: Record<string, unknown>;
-  /** Featured image URL */
-  featuredImage?: string;
-  /** Parent post ID (for hierarchical content like pages) */
-  parentId?: string | number;
-  /** Menu order for sorting */
-  menuOrder?: number;
-  /** Custom taxonomy assignments beyond categories/tags */
-  customTaxonomies?: Record<string, string[]>;
-  /** BCP 47 locale code. When omitted, defaults to defaultLocale. */
-  locale?: string;
-  /**
-   * Source-side translation group ID (opaque string from the origin system).
-   * Items sharing the same translationGroup are linked as translations.
-   * Resolved to a Dineway translation_group ULID during execute.
-   */
-  translationGroup?: string;
-}
-/** Post type mapping configuration */
-interface PostTypeMapping {
-  enabled: boolean;
-  collection: string;
-}
-/** Import configuration */
-interface ImportConfig {
-  postTypeMappings: Record<string, PostTypeMapping>;
-  skipExisting?: boolean;
-}
-/** Options for fetching content */
-interface FetchOptions {
-  /** Post types to fetch */
-  postTypes: string[];
-  /** Whether to include drafts */
-  includeDrafts?: boolean;
-  /** Limit number of items (for testing) */
-  limit?: number;
-}
-/** Import result */
-interface ImportResult {
-  success: boolean;
-  imported: number;
-  skipped: number;
-  errors: Array<{
-    title: string;
-    error: string;
-  }>;
-  byCollection: Record<string, number>;
-}
-/**
- * An import source provides content from an external system.
- * All sources produce the same normalized analysis and content format.
- */
-interface ImportSource {
-  /** Unique identifier */
-  id: string;
-  /** Display name */
-  name: string;
-  /** Description for UI */
-  description: string;
-  /** Icon identifier */
-  icon: "upload" | "globe" | "wordpress" | "plug";
-  /** Whether this source requires a file upload */
-  requiresFile?: boolean;
-  /** Whether this source can probe URLs */
-  canProbe?: boolean;
+   */
+  setExclusiveHookSelection(hookName: string, pluginId: string | null): Promise<void>;
+  /**
+   * Resolution algorithm for exclusive hooks.
+   *
+   * Delegates to the shared resolveExclusiveHooks() function.
+   * See hooks.ts for the full algorithm description.
+   */
+  resolveExclusiveHooks(preferredHints?: Map<string, string[]>): Promise<void>;
   /**
-   * Probe a URL to see if this source can handle it.
-   * Returns null if not applicable.
+   * Get all exclusive hooks with their providers and current selections.
+   * Used by the admin API.
    */
-  probe?(url: string): Promise<SourceProbeResult | null>;
+  getExclusiveHooksInfo(): Promise<Array<{
+    hookName: string;
+    providers: Array<{
+      pluginId: string;
+    }>;
+    selectedPluginId: string | null;
+  }>>;
   /**
-   * Analyze content from this source.
-   * Returns normalized ImportAnalysis.
+   * Initialize or reinitialize the hook pipeline and route registry
    */
-  analyze(input: SourceInput, context: ImportContext): Promise<ImportAnalysis>;
+  private ensureInitialized;
   /**
-   * Stream content items for import.
-   * Yields normalized content items.
+   * Force reinitialization (useful after plugin state changes)
    */
-  fetchContent(input: SourceInput, options: FetchOptions): AsyncGenerator<NormalizedItem>;
+  reinitialize(): void;
   /**
-   * Fetch a media item's data.
-   * Used for media import.
+   * Delete all cron tasks for a plugin.
+   * Used during uninstall.
    */
-  fetchMedia?(url: string, input: SourceInput): Promise<Blob>;
-}
-/** Context passed to import sources */
-interface ImportContext {
-  /** Database connection for schema checks */
-  db?: unknown;
-  /** Function to check existing collections */
-  getExistingCollections?: () => Promise<Map<string, {
-    slug: string;
-    fields: Map<string, {
-      type: string;
-    }>;
-  }>>;
-}
-//#endregion
-//#region src/import/sections.d.ts
-/**
- * Result of sections import operation
- */
-interface SectionsImportResult {
-  /** Number of sections created */
-  sectionsCreated: number;
-  /** Number of sections skipped (already exist) */
-  sectionsSkipped: number;
-  /** Errors encountered during import */
-  errors: Array<{
-    title: string;
-    error: string;
-  }>;
+  private deleteCronTasks;
 }
 /**
- * Import reusable blocks (wp_block post type) from WXR as sections
- *
- * @param posts - All posts from WXR (will filter to wp_block)
- * @param db - Database connection
- * @returns Import result with counts
+ * Create a plugin manager
  */
-declare function importReusableBlocksAsSections(posts: WxrPost[], db: Kysely<Database>): Promise<SectionsImportResult>;
+declare function createPluginManager(options: PluginManagerOptions): PluginManager;
 //#endregion
-//#region src/import/registry.d.ts
-/**
- * Register an import source
- */
-declare function registerSource(source: ImportSource): void;
-/**
- * Get a source by ID
- */
-declare function getSource(id: string): ImportSource | undefined;
-/**
- * Get all registered sources
- */
-declare function getAllSources(): ImportSource[];
-/**
- * Get sources that can handle file uploads
- */
-declare function getFileSources(): ImportSource[];
+//#region src/plugins/sandbox/noop.d.ts
 /**
- * Get sources that can probe URLs
+ * Error thrown when attempting to use sandboxing on an unsupported platform.
  */
-declare function getUrlSources(): ImportSource[];
+declare class SandboxNotAvailableError extends Error {
+  constructor();
+}
 /**
- * Probe a URL against all registered sources
+ * No-op sandbox runner for platforms without isolation support.
+ *
+ * - `isAvailable()` returns false
+ * - `load()` throws SandboxNotAvailableError
+ * - `terminateAll()` is a no-op
  *
- * Returns probe results sorted by confidence (definite > likely > possible)
+ * This is the default runner when no platform adapter is configured.
  */
-declare function probeUrl(url: string): Promise<ProbeResult>;
+declare class NoopSandboxRunner implements SandboxRunner {
+  /**
+   * Always returns false - sandboxing is not available.
+   */
+  isAvailable(): boolean;
+  /**
+   * Always throws - can't load sandboxed plugins without isolation.
+   */
+  load(_manifest: PluginManifest, _code: string): Promise<SandboxedPlugin>;
+  /**
+   * No-op - sandboxing not available, email callback is irrelevant.
+   */
+  setEmailSend(): void;
+  /**
+   * No-op - nothing to terminate.
+   */
+  terminateAll(): Promise<void>;
+}
 /**
- * Clear all registered sources (useful for testing)
+ * Create a no-op sandbox runner.
+ * This is used as the default when no platform adapter is configured.
  */
-declare function clearSources(): void;
+declare function createNoopSandboxRunner(_options?: SandboxOptions): SandboxRunner;
 //#endregion
-//#region src/import/sources/wxr.d.ts
-declare const wxrSource: ImportSource;
-/**
- * Parse a WXR date with the correct fallback chain:
- * 1. GMT date (always UTC, most reliable)
- * 2. pubDate (RFC 2822, includes timezone offset)
- * 3. Site-local date (MySQL datetime without timezone, imprecise but best available)
- *
- * Returns undefined when none of the inputs yield a valid date.
- * Callers that need a guaranteed Date should use `?? new Date()`.
- */
-declare function parseWxrDate(gmtDate: string | undefined, pubDate: string | undefined, localDate: string | undefined): Date | undefined;
+//#region src/plugins/sandbox/runtime-options.d.ts
+interface SandboxRunnerRuntimeOptions extends SandboxOptions {
+  mediaStorage?: Storage;
+  cronReschedule?: () => void;
+}
 //#endregion
-//#region src/import/sources/wordpress-rest.d.ts
-declare const wordpressRestSource: ImportSource;
+//#region src/plugins/sandbox/node.d.ts
+declare class NodeSandboxRunner implements SandboxRunner {
+  private readonly options;
+  private readonly limits;
+  private readonly activeWorkers;
+  private emailSend;
+  constructor(options: SandboxRunnerRuntimeOptions);
+  isAvailable(): boolean;
+  load(manifest: PluginManifest, code: string): Promise<SandboxedPlugin>;
+  setEmailSend(callback: SandboxEmailSendCallback | null): void;
+  terminateAll(): Promise<void>;
+}
+declare function createNodeSandboxRunner(options: SandboxRunnerRuntimeOptions): SandboxRunner;
 //#endregion
 //#region src/preview/tokens.d.ts
 /**
@@ -4039,8 +3084,16 @@ interface GetPreviewUrlOptions {
   expiresIn?: string | number;
   /** Base URL of the site. If not provided, returns a relative URL. */
   baseUrl?: string;
-  /** Custom path pattern. Use {collection} and {id} as placeholders. Default: "/{collection}/{id}" */
+  /**
+   * Custom path pattern. Supports `{collection}`, `{id}`, and `{locale}` placeholders.
+   * Default: "/{collection}/{id}".
+   */
   pathPattern?: string;
+  /**
+   * Locale segment substituted for `{locale}`. Use an empty string to omit the
+   * locale segment; adjacent slashes are collapsed.
+   */
+  locale?: string;
 }
 /**
  * Generate a preview URL for content
@@ -4414,485 +3467,964 @@ declare function getByline(id: string): Promise<BylineSummary | null>;
  * }
  * ```
  */
-declare function getBylineBySlug(slug: string): Promise<BylineSummary | null>;
-//#endregion
-//#region src/taxonomies/types.d.ts
+declare function getBylineBySlug(slug: string): Promise<BylineSummary | null>;
+//#endregion
+//#region src/taxonomies/types.d.ts
+/**
+ * Taxonomy types for Dineway Agentic Web builder
+ */
+/**
+ * Taxonomy definition - describes a taxonomy like "category" or "tag"
+ */
+interface TaxonomyDef {
+  id: string;
+  name: string;
+  label: string;
+  labelSingular?: string;
+  hierarchical: boolean;
+  collections: string[];
+}
+/**
+ * Taxonomy term - a specific term within a taxonomy (e.g., "News" in "category")
+ */
+interface TaxonomyTerm {
+  id: string;
+  name: string;
+  slug: string;
+  label: string;
+  parentId?: string;
+  description?: string;
+  children: TaxonomyTerm[];
+  count?: number;
+}
+/**
+ * Flat version for DB row
+ */
+interface TaxonomyTermRow {
+  id: string;
+  name: string;
+  slug: string;
+  label: string;
+  parent_id: string | null;
+  data: string | null;
+}
+/**
+ * Input for creating a term
+ */
+interface CreateTermInput {
+  slug: string;
+  label: string;
+  parentId?: string;
+  description?: string;
+}
+/**
+ * Input for updating a term
+ */
+interface UpdateTermInput {
+  slug?: string;
+  label?: string;
+  parentId?: string | null;
+  description?: string;
+}
+//#endregion
+//#region src/taxonomies/index.d.ts
+/**
+ * Get all taxonomy definitions
+ */
+declare function getTaxonomyDefs(): Promise<TaxonomyDef[]>;
+/**
+ * Get a single taxonomy definition by name
+ */
+declare function getTaxonomyDef(name: string): Promise<TaxonomyDef | null>;
+/**
+ * Get all terms for a taxonomy (as tree for hierarchical, flat for tags)
+ */
+declare function getTaxonomyTerms(taxonomyName: string): Promise<TaxonomyTerm[]>;
+/**
+ * Get a single term by taxonomy and slug
+ */
+declare function getTerm(taxonomyName: string, slug: string): Promise<TaxonomyTerm | null>;
+/**
+ * Get terms assigned to an entry
+ */
+declare function getEntryTerms(collection: string, entryId: string, taxonomyName?: string): Promise<TaxonomyTerm[]>;
+/**
+ * Get terms for multiple entries in a single query (batched API)
+ *
+ * This is more efficient than calling getEntryTerms for each entry
+ * when you need terms for a list of entries.
+ *
+ * @param collection - The collection type (e.g., "posts")
+ * @param entryIds - Array of entry IDs
+ * @param taxonomyName - The taxonomy name (e.g., "categories")
+ * @returns Map from entry ID to array of terms
+ */
+declare function getTermsForEntries(collection: string, entryIds: string[], taxonomyName: string): Promise<Map<string, TaxonomyTerm[]>>;
+/**
+ * Get entries by term (wraps getDinewayCollection)
+ */
+declare function getEntriesByTerm(collection: string, taxonomyName: string, termSlug: string): Promise<Array<{
+  id: string;
+  data: Record<string, unknown>;
+}>>;
+//#endregion
+//#region src/widgets/types.d.ts
+type WidgetType = "content" | "menu" | "component";
+interface Widget {
+  id: string;
+  type: WidgetType;
+  title?: string;
+  content?: PortableTextBlock$1[];
+  menuName?: string;
+  componentId?: string;
+  componentProps?: Record<string, unknown>;
+}
+interface WidgetArea {
+  id: string;
+  name: string;
+  label: string;
+  description?: string;
+  widgets: Widget[];
+}
+interface WidgetComponentDef {
+  id: string;
+  label: string;
+  description?: string;
+  props: Record<string, PropDef>;
+}
+interface PropDef {
+  type: "string" | "number" | "boolean" | "select";
+  label: string;
+  default?: unknown;
+  options?: Array<{
+    value: string;
+    label: string;
+  }>;
+}
+interface CreateWidgetAreaInput {
+  name: string;
+  label: string;
+  description?: string;
+}
+interface CreateWidgetInput {
+  type: WidgetType;
+  title?: string;
+  content?: PortableTextBlock$1[];
+  menuName?: string;
+  componentId?: string;
+  componentProps?: Record<string, unknown>;
+}
+interface UpdateWidgetInput extends Partial<CreateWidgetInput> {}
+interface ReorderWidgetsInput {
+  widgetIds: string[];
+}
+//#endregion
+//#region src/widgets/index.d.ts
+/**
+ * Get a widget area by name, with all its widgets
+ */
+declare function getWidgetArea(name: string): Promise<WidgetArea | null>;
 /**
- * Taxonomy types for Dineway Agentic Web builder
+ * Get all widget areas with their widgets
  */
+declare function getWidgetAreas(): Promise<WidgetArea[]>;
 /**
- * Taxonomy definition - describes a taxonomy like "category" or "tag"
+ * Get available widget components (for admin UI)
  */
-interface TaxonomyDef {
-  id: string;
-  name: string;
-  label: string;
-  labelSingular?: string;
-  hierarchical: boolean;
-  collections: string[];
-}
+declare function getWidgetComponents(): WidgetComponentDef[];
+//#endregion
+//#region src/search/types.d.ts
 /**
- * Taxonomy term - a specific term within a taxonomy (e.g., "News" in "category")
+ * Search Types
+ *
+ * Type definitions for the Dineway search system.
  */
-interface TaxonomyTerm {
-  id: string;
-  name: string;
-  slug: string;
-  label: string;
-  parentId?: string;
-  description?: string;
-  children: TaxonomyTerm[];
-  count?: number;
+/**
+ * Search configuration for a collection
+ */
+interface SearchConfig {
+  /** Whether search is enabled for this collection */
+  enabled: boolean;
+  /** Field weights for ranking (higher = more important) */
+  weights?: Record<string, number>;
 }
 /**
- * Flat version for DB row
+ * Options for search queries
  */
-interface TaxonomyTermRow {
-  id: string;
-  name: string;
-  slug: string;
-  label: string;
-  parent_id: string | null;
-  data: string | null;
+interface SearchOptions {
+  /** Collections to search (defaults to all searchable collections) */
+  collections?: string[];
+  /** Filter by content status (defaults to 'published') */
+  status?: string;
+  /** Filter by locale (omit to search all locales) */
+  locale?: string;
+  /** Maximum results to return (defaults to 20) */
+  limit?: number;
+  /** Pagination cursor */
+  cursor?: string;
 }
 /**
- * Input for creating a term
+ * Options for collection-specific search
  */
-interface CreateTermInput {
-  slug: string;
-  label: string;
-  parentId?: string;
-  description?: string;
+interface CollectionSearchOptions {
+  /** Filter by content status (defaults to 'published') */
+  status?: string;
+  /** Filter by locale (omit to search all locales) */
+  locale?: string;
+  /** Maximum results to return (defaults to 20) */
+  limit?: number;
+  /** Pagination cursor */
+  cursor?: string;
 }
 /**
- * Input for updating a term
+ * A single search result
  */
-interface UpdateTermInput {
-  slug?: string;
-  label?: string;
-  parentId?: string | null;
-  description?: string;
+interface SearchResult {
+  /** Collection the result belongs to */
+  collection: string;
+  /** Entry ID */
+  id: string;
+  /** Entry slug */
+  slug: string | null;
+  /** Content locale */
+  locale: string;
+  /** Entry title (if available) */
+  title?: string;
+  /**
+   * Highlighted snippet showing match context.
+   *
+   * Safe to render as HTML: source text is escaped, and matched terms
+   * are wrapped in literal `<mark>...</mark>` tags.
+   */
+  snippet?: string;
+  /** Relevance score (higher = more relevant) */
+  score: number;
 }
-//#endregion
-//#region src/taxonomies/index.d.ts
 /**
- * Get all taxonomy definitions
+ * Response from a search query
  */
-declare function getTaxonomyDefs(): Promise<TaxonomyDef[]>;
+interface SearchResponse {
+  /** Search results */
+  items: SearchResult[];
+  /** Cursor for next page of results */
+  nextCursor?: string;
+}
 /**
- * Get a single taxonomy definition by name
+ * Options for suggestion/autocomplete queries
  */
-declare function getTaxonomyDef(name: string): Promise<TaxonomyDef | null>;
+interface SuggestOptions {
+  /** Collections to search (defaults to all searchable collections) */
+  collections?: string[];
+  /** Filter by locale (omit to search all locales) */
+  locale?: string;
+  /** Maximum suggestions to return (defaults to 5) */
+  limit?: number;
+}
 /**
- * Get all terms for a taxonomy (as tree for hierarchical, flat for tags)
+ * A single suggestion result
  */
-declare function getTaxonomyTerms(taxonomyName: string): Promise<TaxonomyTerm[]>;
+interface Suggestion {
+  /** Collection the suggestion belongs to */
+  collection: string;
+  /** Entry ID */
+  id: string;
+  /** Entry title */
+  title: string;
+}
 /**
- * Get a single term by taxonomy and slug
+ * Search index statistics
  */
-declare function getTerm(taxonomyName: string, slug: string): Promise<TaxonomyTerm | null>;
+interface SearchStats {
+  collections: Record<string, {
+    /** Number of indexed entries */indexed: number; /** When the index was last rebuilt */
+    lastRebuilt?: string;
+  }>;
+}
+//#endregion
+//#region src/search/fts-manager.d.ts
 /**
- * Get terms assigned to an entry
+ * FTS5 Manager
+ *
+ * Handles creation, deletion, and management of FTS5 virtual tables
+ * for full-text search on content collections.
  */
-declare function getEntryTerms(collection: string, entryId: string, taxonomyName?: string): Promise<TaxonomyTerm[]>;
+declare class FTSManager {
+  private db;
+  constructor(db: Kysely<Database>);
+  /**
+   * Validate a collection slug and its searchable field names.
+   * Must be called before any raw SQL interpolation.
+   */
+  private validateInputs;
+  /**
+   * Get the FTS table name for a collection
+   * Uses _dineway_ prefix to clearly mark as internal/system table
+   */
+  getFtsTableName(collectionSlug: string): string;
+  /**
+   * Get the content table name for a collection
+   */
+  getContentTableName(collectionSlug: string): string;
+  /**
+   * Check if an FTS table exists for a collection
+   */
+  ftsTableExists(collectionSlug: string): Promise<boolean>;
+  /**
+   * Create an FTS5 virtual table for a collection.
+   * FTS5 is SQLite-only; on other dialects this is a no-op.
+   *
+   * @param collectionSlug - The collection slug
+   * @param searchableFields - Array of field names to index
+   * @param weights - Optional field weights for ranking
+   */
+  createFtsTable(collectionSlug: string, searchableFields: string[], _weights?: Record<string, number>): Promise<void>;
+  /**
+   * Create triggers to keep FTS table in sync with content table.
+   *
+   * Insert and update triggers only add rows to the FTS index when
+   * `deleted_at IS NULL`. This keeps soft-deleted content out of the
+   * index and keeps repair counts aligned with searchable content.
+   */
+  private createTriggers;
+  /**
+   * Drop triggers for a collection
+   */
+  private dropTriggers;
+  /**
+   * Drop the FTS table and triggers for a collection
+   */
+  dropFtsTable(collectionSlug: string): Promise<void>;
+  /**
+   * Rebuild the FTS index for a collection
+   *
+   * This is useful after bulk imports or if the index gets out of sync.
+   */
+  rebuildIndex(collectionSlug: string, searchableFields: string[], weights?: Record<string, number>): Promise<void>;
+  /**
+   * Populate the FTS table from existing content
+   */
+  populateFromContent(collectionSlug: string, searchableFields: string[]): Promise<void>;
+  /**
+   * Get the search configuration for a collection
+   */
+  getSearchConfig(collectionSlug: string): Promise<SearchConfig | null>;
+  /**
+   * Update the search configuration for a collection
+   */
+  setSearchConfig(collectionSlug: string, config: SearchConfig): Promise<void>;
+  /**
+   * Get searchable fields for a collection
+   */
+  getSearchableFields(collectionSlug: string): Promise<string[]>;
+  /**
+   * Enable search for a collection.
+   *
+   * Rebuilds from scratch to ensure stale tables or triggers do not survive
+   * repeated enablement.
+   */
+  enableSearch(collectionSlug: string, options?: {
+    weights?: Record<string, number>;
+  }): Promise<void>;
+  /**
+   * Disable search for a collection
+   *
+   * Drops the FTS table and triggers.
+   */
+  disableSearch(collectionSlug: string): Promise<void>;
+  /**
+   * Get index statistics for a collection
+   */
+  getIndexStats(collectionSlug: string): Promise<{
+    indexed: number;
+    lastRebuilt?: string;
+  } | null>;
+  /**
+   * Verify FTS index integrity and rebuild if corrupted.
+   *
+   * Checks for row count mismatch between content table and FTS table.
+   *
+   * Returns true if the index was rebuilt, false if it was healthy.
+   */
+  verifyAndRepairIndex(collectionSlug: string): Promise<boolean>;
+  /**
+   * Verify and repair FTS indexes for all search-enabled collections.
+   *
+   * Intended to run at startup to auto-heal any corruption from
+   * previous process crashes.
+   */
+  verifyAndRepairAll(): Promise<number>;
+}
+//#endregion
+//#region src/search/query.d.ts
 /**
- * Get terms for multiple entries in a single query (batched API)
+ * Search across multiple collections
  *
- * This is more efficient than calling getEntryTerms for each entry
- * when you need terms for a list of entries.
+ * Public API that auto-injects the database.
  *
- * @param collection - The collection type (e.g., "posts")
- * @param entryIds - Array of entry IDs
- * @param taxonomyName - The taxonomy name (e.g., "categories")
- * @returns Map from entry ID to array of terms
+ * @param query - Search query (FTS5 syntax supported)
+ * @param options - Search options
+ * @returns Search results with pagination
+ *
+ * @example
+ * ```typescript
+ * import { search } from "dineway";
+ *
+ * const results = await search("hello world", {
+ *   collections: ["posts", "pages"],
+ *   limit: 20
+ * });
+ * ```
  */
-declare function getTermsForEntries(collection: string, entryIds: string[], taxonomyName: string): Promise<Map<string, TaxonomyTerm[]>>;
+declare function search(query: string, options?: SearchOptions): Promise<SearchResponse>;
 /**
- * Get entries by term (wraps getDinewayCollection)
+ * Search across multiple collections (with explicit db)
+ *
+ * @internal Use `search()` in templates. This variant is for admin routes
+ * that already have a database handle.
+ *
+ * @param db - Kysely database instance
+ * @param query - Search query (FTS5 syntax supported)
+ * @param options - Search options
+ * @returns Search results with pagination
  */
-declare function getEntriesByTerm(collection: string, taxonomyName: string, termSlug: string): Promise<Array<{
-  id: string;
-  data: Record<string, unknown>;
-}>>;
-//#endregion
-//#region src/widgets/types.d.ts
-type WidgetType = "content" | "menu" | "component";
-interface Widget {
-  id: string;
-  type: WidgetType;
-  title?: string;
-  content?: PortableTextBlock$2[];
-  menuName?: string;
-  componentId?: string;
-  componentProps?: Record<string, unknown>;
-}
-interface WidgetArea {
-  id: string;
-  name: string;
-  label: string;
-  description?: string;
-  widgets: Widget[];
-}
-interface WidgetComponentDef {
-  id: string;
-  label: string;
-  description?: string;
-  props: Record<string, PropDef>;
-}
-interface PropDef {
-  type: "string" | "number" | "boolean" | "select";
-  label: string;
-  default?: unknown;
-  options?: Array<{
-    value: string;
-    label: string;
-  }>;
-}
-interface CreateWidgetAreaInput {
-  name: string;
-  label: string;
-  description?: string;
-}
-interface CreateWidgetInput {
-  type: WidgetType;
-  title?: string;
-  content?: PortableTextBlock$2[];
-  menuName?: string;
-  componentId?: string;
-  componentProps?: Record<string, unknown>;
-}
-interface UpdateWidgetInput extends Partial<CreateWidgetInput> {}
-interface ReorderWidgetsInput {
-  widgetIds: string[];
-}
-//#endregion
-//#region src/widgets/index.d.ts
+declare function searchWithDb(db: Kysely<Database>, query: string, options?: SearchOptions): Promise<SearchResponse>;
 /**
- * Get a widget area by name, with all its widgets
+ * Search within a single collection
+ *
+ * @param db - Kysely database instance
+ * @param collection - Collection slug
+ * @param query - Search query (FTS5 syntax supported)
+ * @param options - Search options
+ * @returns Search results with pagination
+ *
+ * @example
+ * ```typescript
+ * const results = await searchCollection(db, "posts", "hello world", {
+ *   limit: 10
+ * });
+ * ```
  */
-declare function getWidgetArea(name: string): Promise<WidgetArea | null>;
+declare function searchCollection(db: Kysely<Database>, collection: string, query: string, options?: CollectionSearchOptions): Promise<SearchResponse>;
 /**
- * Get all widget areas with their widgets
+ * Get search suggestions for autocomplete
+ *
+ * @param db - Kysely database instance
+ * @param query - Partial search query
+ * @param options - Suggestion options
+ * @returns Array of suggestions
  */
-declare function getWidgetAreas(): Promise<WidgetArea[]>;
+declare function getSuggestions(db: Kysely<Database>, query: string, options?: SuggestOptions): Promise<Suggestion[]>;
 /**
- * Get available widget components (for admin UI)
+ * Get search statistics for all collections
  */
-declare function getWidgetComponents(): WidgetComponentDef[];
+declare function getSearchStats(db: Kysely<Database>): Promise<SearchStats>;
 //#endregion
-//#region src/search/types.d.ts
+//#region src/search/text-extraction.d.ts
 /**
- * Search Types
+ * Extract plain text from Portable Text blocks
  *
- * Type definitions for the Dineway search system.
- */
-/**
- * Search configuration for a collection
+ * Uses @portabletext/toolkit's toPlainText for standard blocks,
+ * plus extracts text from custom block types (code, images with alt/caption).
+ *
+ * @param blocks - Array of Portable Text blocks (or a JSON string)
+ * @returns Plain text content
+ *
+ * @example
+ * ```typescript
+ * const text = extractPlainText([
+ *   {
+ *     _type: "block",
+ *     _key: "abc",
+ *     children: [{ _type: "span", _key: "s1", text: "Hello World" }]
+ *   }
+ * ]);
+ * // Returns: "Hello World"
+ * ```
  */
-interface SearchConfig {
-  /** Whether search is enabled for this collection */
-  enabled: boolean;
-  /** Field weights for ranking (higher = more important) */
-  weights?: Record<string, number>;
-}
+declare function extractPlainText(blocks: PortableTextBlock[] | string | null | undefined): string;
 /**
- * Options for search queries
+ * Extract searchable text from a content entry
+ *
+ * Extracts text from specified fields, handling both plain text and Portable Text.
+ *
+ * @param entry - Content entry data
+ * @param fields - Field names to extract text from
+ * @returns Object mapping field names to extracted text
  */
-interface SearchOptions {
-  /** Collections to search (defaults to all searchable collections) */
-  collections?: string[];
-  /** Filter by content status (defaults to 'published') */
-  status?: string;
-  /** Filter by locale (omit to search all locales) */
-  locale?: string;
-  /** Maximum results to return (defaults to 20) */
-  limit?: number;
-  /** Pagination cursor */
-  cursor?: string;
-}
+declare function extractSearchableFields(entry: Record<string, unknown>, fields: string[]): Record<string, string>;
+//#endregion
+//#region src/astro/storage/types.d.ts
 /**
- * Options for collection-specific search
+ * Serializable storage configuration descriptor
  */
-interface CollectionSearchOptions {
-  /** Filter by content status (defaults to 'published') */
-  status?: string;
-  /** Filter by locale (omit to search all locales) */
-  locale?: string;
-  /** Maximum results to return (defaults to 20) */
-  limit?: number;
-  /** Pagination cursor */
-  cursor?: string;
+interface StorageDescriptor {
+  /** Module path exporting createStorage function */
+  entrypoint: string;
+  /** Serializable config passed to createStorage at runtime */
+  config: unknown;
 }
 /**
- * A single search result
+ * S3-compatible storage configuration
  */
-interface SearchResult {
-  /** Collection the result belongs to */
-  collection: string;
-  /** Entry ID */
-  id: string;
-  /** Entry slug */
-  slug: string | null;
-  /** Content locale */
-  locale: string;
-  /** Entry title (if available) */
-  title?: string;
-  /** Highlighted snippet showing match context */
-  snippet?: string;
-  /** Relevance score (higher = more relevant) */
-  score: number;
+interface S3StorageConfig {
+  /** S3 endpoint URL */
+  endpoint: string;
+  /** Bucket name */
+  bucket: string;
+  /**
+   * Access key ID.
+   * May be resolved from `S3_ACCESS_KEY_ID` at runtime on Node.
+   * Must be provided together with `secretAccessKey`, or both omitted.
+   */
+  accessKeyId?: string;
+  /**
+   * Secret access key.
+   * May be resolved from `S3_SECRET_ACCESS_KEY` at runtime on Node.
+   * Must be provided together with `accessKeyId`, or both omitted.
+   */
+  secretAccessKey?: string;
+  /** Optional region (defaults to "auto") */
+  region?: string;
+  /** Optional public URL prefix for CDN */
+  publicUrl?: string;
 }
 /**
- * Response from a search query
+ * Local filesystem storage configuration
  */
-interface SearchResponse {
-  /** Search results */
-  items: SearchResult[];
-  /** Cursor for next page of results */
-  nextCursor?: string;
+interface LocalStorageConfig {
+  /** Directory path for storing files */
+  directory: string;
+  /** Base URL for serving files */
+  baseUrl: string;
 }
+//#endregion
+//#region src/astro/integration/runtime.d.ts
 /**
- * Options for suggestion/autocomplete queries
+ * Admin page definition (copied from plugins/types to avoid circular deps)
  */
-interface SuggestOptions {
-  /** Collections to search (defaults to all searchable collections) */
-  collections?: string[];
-  /** Filter by locale (omit to search all locales) */
-  locale?: string;
-  /** Maximum suggestions to return (defaults to 5) */
-  limit?: number;
+interface PluginAdminPage {
+  path: string;
+  label: string;
+  icon?: string;
 }
 /**
- * A single suggestion result
+ * Dashboard widget definition (copied from plugins/types to avoid circular deps)
  */
-interface Suggestion {
-  /** Collection the suggestion belongs to */
-  collection: string;
-  /** Entry ID */
+interface PluginDashboardWidget {
   id: string;
-  /** Entry title */
-  title: string;
+  size?: "full" | "half" | "third";
+  title?: string;
 }
 /**
- * Search index statistics
+ * Plugin descriptor - returned by plugin factory functions
+ *
+ * Contains all static metadata needed for manifest and admin UI,
+ * plus the entrypoint for runtime instantiation.
+ *
+ * @example
+ * ```ts
+ * export function myPlugin(options?: MyPluginOptions): PluginDescriptor {
+ *   return {
+ *     id: "my-plugin",
+ *     version: "1.0.0",
+ *     entrypoint: "@my-org/dineway-plugin-foo",
+ *     options: options ?? {},
+ *     adminEntry: "@my-org/dineway-plugin-foo/admin",
+ *     adminPages: [{ path: "/settings", label: "Settings" }],
+ *   };
+ * }
+ * ```
  */
-interface SearchStats {
-  collections: Record<string, {
-    /** Number of indexed entries */indexed: number; /** When the index was last rebuilt */
-    lastRebuilt?: string;
-  }>;
+/**
+ * Storage collection declaration for sandboxed plugins
+ */
+interface StorageCollectionDeclaration {
+  indexes?: string[];
+  uniqueIndexes?: string[];
+}
+interface PluginDescriptor<TOptions = Record<string, unknown>> {
+  /** Unique plugin identifier */
+  id: string;
+  /** Plugin version (semver) */
+  version: string;
+  /** Module specifier to import (e.g., "@dineway-ai/plugin-api-test") */
+  entrypoint: string;
+  /**
+   * Options to pass to createPlugin(). Native format only.
+   * Standard-format plugins configure themselves via KV settings
+   * and Block Kit admin pages -- not constructor options.
+   */
+  options?: TOptions;
+  /**
+   * Plugin format. Determines how the entrypoint is loaded:
+   * - `"standard"` -- exports `definePlugin({ hooks, routes })` as default.
+   *   Wrapped with `adaptSandboxEntry` for in-process execution. Can run in both
+   *   `plugins: []` (in-process) and `sandboxed: []` (isolate).
+   * - `"native"` -- exports `createPlugin(options)` returning a `ResolvedPlugin`.
+   *   Can only run in `plugins: []`. Cannot be sandboxed or published to marketplace.
+   *
+   * Defaults to `"native"` when unset.
+   *
+   */
+  format?: "standard" | "native";
+  /** Admin UI module specifier (e.g., "@dineway-ai/plugin-audit-log/admin") */
+  adminEntry?: string;
+  /** Module specifier for site-side Astro rendering components (must export `blockComponents`) */
+  componentsEntry?: string;
+  /** Admin pages for navigation */
+  adminPages?: PluginAdminPage[];
+  /** Dashboard widgets */
+  adminWidgets?: PluginDashboardWidget[];
+  /**
+   * Capabilities the plugin requests.
+   * For standard-format plugins, capabilities are enforced in both trusted and
+   * sandboxed modes via the PluginContextFactory.
+   */
+  capabilities?: string[];
+  /**
+   * Allowed hosts for network:request capability
+   * Supports wildcards like "*.example.com"
+   */
+  allowedHosts?: string[];
+  /**
+   * Storage collections the plugin declares
+   * Sandboxed plugins can only access declared collections.
+   */
+  storage?: Record<string, StorageCollectionDeclaration>;
 }
-//#endregion
-//#region src/search/fts-manager.d.ts
 /**
- * FTS5 Manager
+ * Sandboxed plugin descriptor - same format as PluginDescriptor
  *
- * Handles creation, deletion, and management of FTS5 virtual tables
- * for full-text search on content collections.
+ * These run in isolated environments provided by the configured sandbox runner.
+ * The `entrypoint` is resolved to a file and bundled at build time.
  */
-declare class FTSManager {
-  private db;
-  constructor(db: Kysely<Database>);
+type SandboxedPluginDescriptor<TOptions = Record<string, unknown>> = PluginDescriptor<TOptions>;
+interface DinewayFontsConfig {
   /**
-   * Validate a collection slug and its searchable field names.
-   * Must be called before any raw SQL interpolation.
+   * Additional Noto Sans or compatible script families to include in the admin UI.
+   *
+   * Use script names like "arabic", "farsi", "japanese", or "chinese-simplified".
    */
-  private validateInputs;
+  scripts?: string[];
+}
+interface DinewayConfig {
   /**
-   * Get the FTS table name for a collection
-   * Uses _dineway_ prefix to clearly mark as internal/system table
+   * Database configuration
+   *
+   * Use one of the adapter functions:
+   * - `libsql({ url: process.env.DINEWAY_DATABASE_URL || "file:./data.db" })` - Default Node/libSQL path
+   * - `sqlite({ url: "file:./data.db" })` - Local SQLite only
+   * - `postgres({ connectionString: process.env.DATABASE_URL! })` - PostgreSQL deployments
+   *
+   * @example
+   * ```ts
+   * import { libsql } from "dineway/db";
+   *
+   * dineway({
+   *   database: libsql({ url: process.env.DINEWAY_DATABASE_URL || "file:./data.db" }),
+   * })
+   * ```
    */
-  getFtsTableName(collectionSlug: string): string;
+  database?: DatabaseDescriptor;
   /**
-   * Get the content table name for a collection
+   * Storage configuration (for media)
    */
-  getContentTableName(collectionSlug: string): string;
+  storage?: StorageDescriptor;
   /**
-   * Check if an FTS table exists for a collection
+   * Trusted plugins to load (run in main isolate)
+   *
+   * @example
+   * ```ts
+   * import { auditLogPlugin } from "@dineway-ai/plugin-audit-log";
+   * import { webhookNotifierPlugin } from "@dineway-ai/plugin-webhook-notifier";
+   *
+   * dineway({
+   *   plugins: [
+   *     auditLogPlugin(),
+   *     webhookNotifierPlugin({ url: "https://example.com/webhook" }),
+   *   ],
+   * })
+   * ```
    */
-  ftsTableExists(collectionSlug: string): Promise<boolean>;
+  plugins?: PluginDescriptor[];
   /**
-   * Create an FTS5 virtual table for a collection.
-   * FTS5 is SQLite-only; on other dialects this is a no-op.
+   * Sandboxed plugins to load (run behind the configured `SandboxRunner`)
    *
-   * @param collectionSlug - The collection slug
-   * @param searchableFields - Array of field names to index
-   * @param weights - Optional field weights for ranking
+   * Uses the same format as `plugins`; the configured sandbox runner decides
+   * how isolation is enforced for the current runtime.
+   *
+   * @example
+   * ```ts
+   * import { untrustedPlugin } from "some-third-party-plugin";
+   *
+   * dineway({
+   *   plugins: [trustedPlugin()],     // runs in host
+   *   sandboxed: [untrustedPlugin()], // runs in the default Node sandbox
+   * })
+   * ```
    */
-  createFtsTable(collectionSlug: string, searchableFields: string[], _weights?: Record<string, number>): Promise<void>;
+  sandboxed?: SandboxedPluginDescriptor[];
   /**
-   * Create triggers to keep FTS table in sync with content table.
+   * Optional module that exports a custom sandbox runner factory.
+   * When omitted, Dineway uses its built-in Node sandbox runner.
    *
-   * Insert and update triggers only add rows to the FTS index when
-   * `deleted_at IS NULL`. This keeps soft-deleted content out of the
-   * index and keeps repair counts aligned with searchable content.
+   * @example
+   * ```ts
+   * import { createNodeSandboxRunner } from "dineway";
+   *
+   * export const createSandboxRunner = createNodeSandboxRunner;
+   * ```
+   *
+   * @example
+   * ```ts
+   * dineway({
+   *   sandboxRunner: "./src/sandbox-runner.ts",
+   * })
+   * ```
    */
-  private createTriggers;
+  sandboxRunner?: string;
   /**
-   * Drop triggers for a collection
+   * Authentication configuration
+   *
+   * Use an auth descriptor or an adapter function from a provider package.
+   *
+   * When an external auth provider is configured, passkey auth is disabled.
+   *
+   * @example
+   * ```ts
+   * dineway({
+   *   auth: {
+   *     type: "header-auth",
+   *     entrypoint: "./src/header-auth.ts",
+   *     config: {
+   *       userHeader: "x-forwarded-user-email",
+   *       roleHeader: "x-forwarded-user-role",
+   *     },
+   *   },
+   * })
+   * ```
    */
-  private dropTriggers;
+  auth?: AuthDescriptor;
   /**
-   * Drop the FTS table and triggers for a collection
+   * Interactive login providers shown on the admin login page and setup wizard.
+   *
+   * These are additive to built-in passkey auth. Transparent request auth still
+   * uses `auth`; when `auth` is configured, the external provider owns login.
    */
-  dropFtsTable(collectionSlug: string): Promise<void>;
+  authProviders?: AuthProviderDescriptor[];
   /**
-   * Rebuild the FTS index for a collection
+   * MCP (Model Context Protocol) server endpoint.
    *
-   * This is useful after bulk imports or if the index gets out of sync.
+   * Exposes an MCP Streamable HTTP server at `/_dineway/api/mcp`
+   * that allows AI agents and tools to interact with the CMS using
+   * the standardized MCP protocol.
+   *
+   * Enabled by default. The endpoint requires bearer token auth, so
+   * it has no practical effect unless the user creates an API token
+   * or configures an OAuth client. Set to `false` to disable.
+   *
+   * @default true
+   *
+   * @example
+   * ```ts
+   * dineway({
+   *   mcp: false,
+   * })
+   * ```
    */
-  rebuildIndex(collectionSlug: string, searchableFields: string[], weights?: Record<string, number>): Promise<void>;
+  mcp?: boolean;
   /**
-   * Populate the FTS table from existing content
+   * Plugin marketplace URL
+   *
+   * When set, enables the marketplace features: browse, install, update,
+   * and uninstall plugins from a remote marketplace.
+   *
+   * Must be an HTTPS URL in production, or localhost/127.0.0.1 in dev.
+   * Marketplace plugins run in the built-in Node sandbox runner unless
+   * `sandboxRunner` is set to override it.
+   *
+   * @example
+   * ```ts
+   * dineway({
+   *   marketplace: "https://marketplace.example.com",
+   * })
+   * ```
    */
-  populateFromContent(collectionSlug: string, searchableFields: string[]): Promise<void>;
+  marketplace?: string;
   /**
-   * Get the search configuration for a collection
+   * Maximum allowed media file upload size in bytes.
+   *
+   * Applies to both direct multipart uploads and signed-URL uploads.
+   * When omitted, Dineway defaults to 52_428_800 (50 MB).
+   *
+   * @example
+   * ```ts
+   * dineway({ maxUploadSize: 100 * 1024 * 1024 }) // 100 MB
+   * ```
    */
-  getSearchConfig(collectionSlug: string): Promise<SearchConfig | null>;
+  maxUploadSize?: number;
   /**
-   * Update the search configuration for a collection
+   * Admin UI branding.
+   *
+   * Use this to customize the logo, name, and favicon shown in the
+   * Dineway admin panel without changing public site identity settings.
+   *
+   * @example
+   * ```ts
+   * dineway({
+   *   admin: {
+   *     logo: "/images/agency-logo.svg",
+   *     siteName: "Agency Console",
+   *     favicon: "/agency-favicon.ico",
+   *   },
+   * })
+   * ```
    */
-  setSearchConfig(collectionSlug: string, config: SearchConfig): Promise<void>;
+  admin?: {
+    /** URL or path to a custom logo image for the admin UI. */logo?: string; /** Custom name displayed in the admin sidebar and browser tab. */
+    siteName?: string; /** URL or path to a custom favicon for the admin panel. */
+    favicon?: string;
+  };
   /**
-   * Get searchable fields for a collection
+   * Admin UI font configuration.
+   *
+   * By default, Dineway uses the Astro Font API to load Noto Sans at
+   * build time and self-host the generated font files. Set to false to
+   * disable Dineway-managed fonts and use system fonts.
+   *
+   * @example
+   * ```ts
+   * dineway({
+   *   fonts: {
+   *     scripts: ["arabic", "farsi", "japanese"],
+   *   },
+   * })
+   * ```
    */
-  getSearchableFields(collectionSlug: string): Promise<string[]>;
+  fonts?: false | DinewayFontsConfig;
   /**
-   * Enable search for a collection.
+   * Public browser-facing origin for the site.
    *
-   * Rebuilds from scratch to ensure stale tables or triggers do not survive
-   * repeated enablement.
+   * Use when `Astro.url` / `request.url` do not match what users open — common with a
+   * **TLS-terminating reverse proxy**: the app often sees `http://` on the internal hop
+   * while the browser uses `https://`, which breaks WebAuthn, CSRF, OAuth, and redirect URLs.
+   *
+   * Set to the full origin users type in the address bar (no path), e.g.
+   * `https://mysite.example.com`. When not set, falls back to environment variables
+   * `DINEWAY_SITE_URL` > `SITE_URL`, then to the request URL's origin.
+   *
+   * Replaces `passkeyPublicOrigin` (which only fixed passkeys).
    */
-  enableSearch(collectionSlug: string, options?: {
-    weights?: Record<string, number>;
-  }): Promise<void>;
+  siteUrl?: string;
   /**
-   * Disable search for a collection
+   * Additional origins accepted by passkey verification.
    *
-   * Drops the FTS table and triggers.
+   * When the same Dineway deployment is reachable under several hostnames
+   * sharing a registrable parent (e.g. `https://example.com` plus
+   * `https://preview.example.com`), the canonical `siteUrl` defines the
+   * `rpId` and the entries here are the additional origins from which
+   * assertions are accepted. Each entry must be the same hostname as
+   * `siteUrl` or a subdomain of it; WebAuthn requires `rpId` to be a
+   * registrable suffix of every origin.
+   *
+   * Merged at runtime with the `DINEWAY_ALLOWED_ORIGINS` env var
+   * (comma-separated), falling back to `ALLOWED_ORIGINS` when the prefixed
+   * variable is absent. Validation:
+   *   - Config-declared entries are shape-checked at Astro startup.
+   *   - Subdomain relationship to `siteUrl` is checked at startup when
+   *     `siteUrl` is also config-declared, otherwise at first passkey
+   *     verification because `siteUrl` may come from `DINEWAY_SITE_URL`.
+   *
+   * Mismatches throw with a source-attributed message naming
+   * `config.allowedOrigins`, `DINEWAY_ALLOWED_ORIGINS`, or `ALLOWED_ORIGINS`.
+   *
+   * @example
+   * ```ts
+   * dineway({
+   *   siteUrl: "https://example.com",
+   *   allowedOrigins: ["https://preview.example.com"],
+   * })
+   * ```
    */
-  disableSearch(collectionSlug: string): Promise<void>;
+  allowedOrigins?: string[];
   /**
-   * Get index statistics for a collection
+   * Reverse-proxy headers that Dineway may trust for client IP resolution.
+   *
+   * Defaults to no trusted headers. Set this only when Dineway is deployed
+   * behind a reverse proxy you control and that proxy strips or overwrites
+   * incoming client-supplied copies of these headers.
+   *
+   * When omitted, Dineway falls back to `DINEWAY_TRUSTED_PROXY_HEADERS`.
+   *
+   * @example
+   * ```ts
+   * dineway({
+   *   trustedProxyHeaders: ["x-real-ip", "x-forwarded-for"],
+   * })
+   * ```
    */
-  getIndexStats(collectionSlug: string): Promise<{
-    indexed: number;
-    lastRebuilt?: string;
-  } | null>;
+  trustedProxyHeaders?: string[];
   /**
-   * Verify FTS index integrity and rebuild if corrupted.
+   * Enable playground mode for ephemeral "try Dineway" sites.
    *
-   * Checks for row count mismatch between content table and FTS table.
+   * When set, the integration injects a playground middleware (order: "pre")
+   * that runs BEFORE the normal Dineway middleware chain. It creates an
+   * isolated session database per visitor, runs migrations, applies the
+   * seed, creates an anonymous admin user, and stashes the request-scoped
+   * database on locals so the runtime and request-context middleware can
+   * pick it up.
    *
-   * Returns true if the index was rebuilt, false if it was healthy.
+   * Setup and auth middleware are skipped because the playground middleware
+   * handles bootstrap and user injection.
+   *
+   * For the first portable release, playground sidecars are explicitly
+   * single-instance only.
+   *
+   * @example
+   * ```ts
+   * import { fileURLToPath } from "node:url";
+   * import { libsql } from "dineway/db";
+   *
+   * dineway({
+   *   database: libsql({ url: process.env.DINEWAY_DATABASE_URL || "file:./playground.db" }),
+   *   playground: {
+   *     middlewareEntrypoint: fileURLToPath(
+   *       new URL("./src/playground-middleware.ts", import.meta.url)
+   *     ),
+   *   },
+   * })
+   * ```
    */
-  verifyAndRepairIndex(collectionSlug: string): Promise<boolean>;
+  playground?: {
+    /** Module path for the playground middleware. */middlewareEntrypoint: string;
+  };
   /**
-   * Verify and repair FTS indexes for all search-enabled collections.
+   * Media providers for browsing and uploading media
    *
-   * Intended to run at startup to auto-heal any corruption from
-   * previous process crashes.
+   * The local media provider (using storage adapter) is available by default.
+   * Additional providers can be added for external services like Unsplash,
+   * Cloudinary, Mux, and other provider packages.
+   *
+   * @example
+   * ```ts
+   * import { unsplash } from "@dineway-ai/provider-unsplash";
+   *
+   * dineway({
+   *   mediaProviders: [
+   *     unsplash({ accessKey: "..." }),
+   *   ],
+   * })
+   * ```
    */
-  verifyAndRepairAll(): Promise<number>;
+  mediaProviders?: MediaProviderDescriptor[];
 }
-//#endregion
-//#region src/search/query.d.ts
-/**
- * Search across multiple collections
- *
- * Public API that auto-injects the database.
- *
- * @param query - Search query (FTS5 syntax supported)
- * @param options - Search options
- * @returns Search results with pagination
- *
- * @example
- * ```typescript
- * import { search } from "dineway";
- *
- * const results = await search("hello world", {
- *   collections: ["posts", "pages"],
- *   limit: 20
- * });
- * ```
- */
-declare function search(query: string, options?: SearchOptions): Promise<SearchResponse>;
-/**
- * Search across multiple collections (with explicit db)
- *
- * @internal Use `search()` in templates. This variant is for admin routes
- * that already have a database handle.
- *
- * @param db - Kysely database instance
- * @param query - Search query (FTS5 syntax supported)
- * @param options - Search options
- * @returns Search results with pagination
- */
-declare function searchWithDb(db: Kysely<Database>, query: string, options?: SearchOptions): Promise<SearchResponse>;
-/**
- * Search within a single collection
- *
- * @param db - Kysely database instance
- * @param collection - Collection slug
- * @param query - Search query (FTS5 syntax supported)
- * @param options - Search options
- * @returns Search results with pagination
- *
- * @example
- * ```typescript
- * const results = await searchCollection(db, "posts", "hello world", {
- *   limit: 10
- * });
- * ```
- */
-declare function searchCollection(db: Kysely<Database>, collection: string, query: string, options?: CollectionSearchOptions): Promise<SearchResponse>;
-/**
- * Get search suggestions for autocomplete
- *
- * @param db - Kysely database instance
- * @param query - Partial search query
- * @param options - Suggestion options
- * @returns Array of suggestions
- */
-declare function getSuggestions(db: Kysely<Database>, query: string, options?: SuggestOptions): Promise<Suggestion[]>;
-/**
- * Get search statistics for all collections
- */
-declare function getSearchStats(db: Kysely<Database>): Promise<SearchStats>;
-//#endregion
-//#region src/search/text-extraction.d.ts
-/**
- * Extract plain text from Portable Text blocks
- *
- * Uses @portabletext/toolkit's toPlainText for standard blocks,
- * plus extracts text from custom block types (code, images with alt/caption).
- *
- * @param blocks - Array of Portable Text blocks (or a JSON string)
- * @returns Plain text content
- *
- * @example
- * ```typescript
- * const text = extractPlainText([
- *   {
- *     _type: "block",
- *     _key: "abc",
- *     children: [{ _type: "span", _key: "s1", text: "Hello World" }]
- *   }
- * ]);
- * // Returns: "Hello World"
- * ```
- */
-declare function extractPlainText(blocks: PortableTextBlock$1[] | string | null | undefined): string;
 /**
- * Extract searchable text from a content entry
- *
- * Extracts text from specified fields, handling both plain text and Portable Text.
- *
- * @param entry - Content entry data
- * @param fields - Field names to extract text from
- * @returns Object mapping field names to extracted text
+ * Get stored config from global
+ * This is set by the virtual module at build time
  */
-declare function extractSearchableFields(entry: Record<string, unknown>, fields: string[]): Record<string, string>;
+declare function getStoredConfig(): DinewayConfig | null;
+declare global {
+  var __dinewayConfig: DinewayConfig | undefined;
+}
 //#endregion
-export { GetCommentsOptions as $, ContentResponse as $i, SessionDatabaseFactory as $n, ProseMirrorDocument as $r, OAuthInput as $t, getEntryTerms as A, handleRevisionRestore as Ai, AuthProviderModule as An, getDinewayEntry as Ar, wordpressRestSource as At, UpdateTermInput as B, handleContentGetIncludingTrashed as Bi, WxrTag as Bn, sanitizeHref as Br, importReusableBlocksAsSections as Bt, ReorderWidgetsInput as C, handleMediaGet as Ci, DinewayConfig as Cn, EditFieldMeta as Cr, GeneratePreviewTokenOptions as Ct, WidgetComponentDef as D, RevisionResponse as Di, S3StorageConfig as Dn, TranslationSummary as Dr, generatePreviewToken as Dt, WidgetArea as E, RevisionListResponse as Ei, LocalStorageConfig as En, ResolvePathResult as Er, VerifyPreviewTokenResult as Et, getTermsForEntries as F, handleContentCreate as Fi, WxrAuthor as Fn, EditProxy as Fr, getFileSources as Ft, CreateMenuInput as G, handleContentRestore as Gi, EntryFilter as Gn, prosemirrorToPortableText as Gr, FileInput as Gt, getBylineBySlug as H, handleContentListTrashed as Hi, parseWxrString as Hn, computeContentHash as Hr, CollectionSchemaStatus as Ht, CreateTermInput as I, handleContentDelete as Ii, WxrCategory as In, FieldAnnotation as Ir, getSource as It, MenuItem as J, handleContentUnpublish as Ji, FilePreviewMiddlewareConfig as Jn, PortableTextLinkMark as Jr, ImportContext as Jt, CreateMenuItemInput as K, handleContentSchedule as Ki, dinewayLoader as Kn, PortableTextCodeBlock as Kr, ImportAnalysis as Kt, TaxonomyDef as L, handleContentDiscardDraft as Li, WxrData as Ln, createEditable as Lr, getUrlSources as Lt, getTaxonomyDefs as M, handleContentCompare as Mi, ExternalAuthConfig as Mn, getTranslations as Mr, wxrSource as Mt, getTaxonomyTerms as N, handleContentCountScheduled as Ni, definePlugin as Nn, resolveDinewayPath as Nr, clearSources as Nt, WidgetType as O, handleRevisionGet as Oi, StorageDescriptor as On, TranslationsResult as Or, parseContentId as Ot, getTerm as P, handleContentCountTrashed as Pi, WxrAttachment as Pn, CMSAnnotation as Pr, getAllSources as Pt, UpdateMenuItemInput as Q, ContentListResponse as Qi, SessionCleanupResult as Qn, PortableTextUnknownBlock as Qr, NormalizedItem as Qt, TaxonomyTerm as R, handleContentDuplicate as Ri, WxrPost as Rn, createNoop as Rr, probeUrl as Rt, PropDef as S, handleMediaDelete as Si, pluginManifestSchema as Sn, DinewayCollections as Sr, getPreviewUrl as St, Widget as T, handleMediaUpdate as Ti, getStoredConfig as Tn, InferCollectionData as Tr, VerifyPreviewTokenOptions as Tt, getMenu as U, handleContentPermanentDelete as Ui, CollectionFilter as Un, hashString as Ur, FetchOptions as Ut, getByline as V, handleContentList as Vi, parseWxr as Vn, decodeSlug as Vr, AttachmentInfo as Vt, getMenus as W, handleContentPublish as Wi, EntryData as Wn, portableTextToProsemirror as Wr, FieldCompatibility as Wt, ReorderMenuItemsInput as X, handleContentUpdate as Xi, FileSessionDatabaseFactory as Xn, PortableTextSpan as Xr, ImportResult as Xt, MenuItemType as Y, handleContentUnschedule as Yi, createFilePreviewMiddleware as Yn, PortableTextMarkDef as Yr, ImportFieldDef as Yt, UpdateMenuInput as Z, ApiContext as Zi, FileSessionDatabaseFactoryOptions as Zn, PortableTextTextBlock as Zr, ImportSource as Zt, getWidgetArea as _, SchemaError as _i, EmailPipeline as _n, after as _r, isBlockedInPreview as _t, search as a, image as aa, SandboxRunner as ai, SourceInput as an, PreviewSidecarClient as ar, getSiteSetting as at, CreateWidgetAreaInput as b, MediaResponse as bi, createHookPipeline as bn, CollectionResult as br, GetPreviewUrlOptions as bt, FTSManager as c, FileValue as ca, SerializedRequest as ci, UrlInput as cn, defaultPreviewSidecarClient as cr, PreviewToolbarConfig as ct, SearchOptions as d, CreateMediaInput as da, CreateSectionInput as di, NoopSandboxRunner as dn, verifyPreviewSignature as dr, ApplySnapshotToDatabaseOptions as dt, FieldDescriptor as ea, ProseMirrorMark as ei, PostTypeAnalysis as en, SessionDatabaseHandle as er, GetCommentsResult as et, SearchResponse as f, MediaItem as fa, GetSectionsOptions as fi, SandboxNotAvailableError as fn, I18nConfig as fr, applySnapshotToDatabase as ft, Suggestion as g, DinewayDatabaseError as ga, getCollectionInfo as gi, PluginRouteError as gn, AfterCallback as gr, renderPreviewLoadingPage as gt, SuggestOptions as h, DatabaseConfig as ha, UpdateSectionInput as hi, createPluginManager as hn, isI18nEnabled as hr, Snapshot as ht, getSuggestions as i, reference as ia, SandboxOptions as ii, SourceCapabilities as in, SessionOpenOrCreateOptions as ir, getPluginSettings as it, getTaxonomyDef as j, generateManifest as ji, AuthResult as jn, getEditMeta as jr, parseWxrDate as jt, getEntriesByTerm as k, handleRevisionList as ki, AuthDescriptor as kn, getDinewayCollection as kr, verifyPreviewToken as kt, CollectionSearchOptions as l, ImageValue as la, getSection as li, NodeSandboxRunner as ln, parsePreviewSignatureHeader as lr, renderPreviewToolbar as lt, SearchStats as m, ContentRepository as ma, SectionSource as mi, PluginManager as mn, getI18nConfig as mr, getAppliedSnapshotMeta as mt, extractSearchableFields as n, ManifestResponse as na, SandboxEmailMessage as ni, ProbeResult as nn, SessionDatabaseLimitError as nr, getComments as nt, searchCollection as o, FieldDefinition as oa, SandboxRunnerFactory as oi, SourceProbeResult as on, PreviewSidecarSignature as or, getSiteSettings as ot, SearchResult as p, MediaRepository as pa, Section as pi, createNoopSandboxRunner as pn, getFallbackChain as pr, dropSessionDatabaseTables as pt, Menu as q, handleContentTranslations as qi, getDb as qn, PortableTextImageBlock as qr, ImportConfig as qt, getSearchStats as r, portableText as ra, SandboxEmailSendCallback as ri, SourceAuth as rn, SessionOpenOptions as rr, getPluginSetting as rt, searchWithDb as s, FieldUIHints as sa, SandboxedPlugin as si, SuggestedAction as sn, buildPreviewSignatureHeader as sr, setSiteSettings as st, extractPlainText as t, ListResponse as ta, ProseMirrorNode as ti, PostTypeMapping as tn, SessionDatabaseInfo as tr, getCommentCount as tt, SearchConfig as u, PortableTextBlock$2 as ua, getSections as ui, createNodeSandboxRunner as un, signPreviewUrl as ur, AppliedSnapshotMeta as ut, getWidgetAreas as v, SchemaRegistry as vi, HookPipeline as vn, CacheHint as vr, getPreviewToken as vt, UpdateWidgetInput as w, handleMediaList as wi, PluginDescriptor as wn, EntryResult as wr, PreviewTokenPayload as wt, CreateWidgetInput as x, handleMediaCreate as xi, ValidatedPluginManifest as xn, ContentEntry as xr, buildPreviewUrl as xt, getWidgetComponents as y, MediaListResponse as yi, HookResult as yn, CollectionFilter$1 as yr, isPreviewRequest as yt, TaxonomyTermRow as z, handleContentGet as zi, WxrSite as zn, isSafeHref as zr, registerSource as zt };
+export { Menu as $, PortableTextCodeBlock as $n, handleContentSchedule as $r, EntryFilter as $t, UpdateWidgetInput as A, ListResponse as Ai, DinewayCollections as An, handleMediaGet as Ar, PreviewTokenPayload as At, getTerm as B, getTranslations as Bn, handleContentCountScheduled as Br, createNoopSandboxRunner as Bt, getWidgetArea as C, apiError as Ci, isI18nEnabled as Cn, getCollectionInfo as Cr, isBlockedInPreview as Ct, CreateWidgetInput as D, ContentListResponse as Di, CollectionFilter$1 as Dn, MediaResponse as Dr, buildPreviewUrl as Dt, CreateWidgetAreaInput as E, ApiContext as Ei, CacheHint as En, MediaListResponse as Er, GetPreviewUrlOptions as Et, getEntriesByTerm as F, TranslationSummary as Fn, handleRevisionGet as Fr, verifyPreviewToken as Ft, TaxonomyTermRow as G, createEditable as Gn, handleContentDuplicate as Gr, HookPipeline as Gt, CreateTermInput as H, CMSAnnotation as Hn, handleContentCreate as Hr, createPluginManager as Ht, getEntryTerms as I, TranslationsResult as In, handleRevisionList as Ir, NodeSandboxRunner as It, getBylineBySlug as J, sanitizeHref as Jn, handleContentList as Jr, ValidatedPluginManifest as Jt, UpdateTermInput as K, createNoop as Kn, handleContentGet as Kr, HookResult as Kt, getTaxonomyDef as L, getDinewayCollection as Ln, handleRevisionRestore as Lr, createNodeSandboxRunner as Lt, WidgetArea as M, EntryResult as Mn, handleMediaUpdate as Mr, VerifyPreviewTokenResult as Mt, WidgetComponentDef as N, InferCollectionData as Nn, RevisionListResponse as Nr, generatePreviewToken as Nt, PropDef as O, ContentResponse as Oi, CollectionResult as On, handleMediaCreate as Or, getPreviewUrl as Ot, WidgetType as P, ResolvePathResult as Pn, RevisionResponse as Pr, parseContentId as Pt, CreateMenuItemInput as Q, prosemirrorToPortableText as Qn, handleContentRestore as Qr, EntryData as Qt, getTaxonomyDefs as R, getDinewayEntry as Rn, generateManifest as Rr, NoopSandboxRunner as Rt, Suggestion as S, parseQuery as Si, getI18nConfig as Sn, UpdateSectionInput as Sr, renderPreviewLoadingPage as St, getWidgetComponents as T, handleError as Ti, after as Tn, SchemaRegistry as Tr, isPreviewRequest as Tt, TaxonomyDef as U, EditProxy as Un, handleContentDelete as Ur, PluginRouteError as Ut, getTermsForEntries as V, resolveDinewayPath as Vn, handleContentCountTrashed as Vr, PluginManager as Vt, TaxonomyTerm as W, FieldAnnotation as Wn, handleContentDiscardDraft as Wr, EmailPipeline as Wt, getMenus as X, hashString as Xn, handleContentPermanentDelete as Xr, definePlugin as Xt, getMenu as Y, computeContentHash as Yn, handleContentListTrashed as Yr, pluginManifestSchema as Yt, CreateMenuInput as Z, portableTextToProsemirror as Zn, handleContentPublish as Zr, CollectionFilter as Zt, SearchOptions as _, DinewayDatabaseError as _i, parsePreviewSignatureHeader as _n, getSections as _r, ApplySnapshotToDatabaseOptions as _t, S3StorageConfig as a, reference as ai, FileSessionDatabaseFactoryOptions as an, PortableTextUnknownBlock as ar, GetCommentsOptions as at, SearchStats as b, isParseError as bi, I18nConfig as bn, Section as br, getAppliedSnapshotMeta as bt, extractSearchableFields as c, FieldUIHints as ci, SessionDatabaseHandle as cn, ProseMirrorNode as cr, getComments as ct, search as d, PortableTextBlock$1 as di, SessionOpenOptions as dn, SandboxOptions as dr, getSiteSetting as dt, handleContentTranslations as ei, dinewayLoader as en, PortableTextImageBlock as er, MenuItem as et, searchCollection as f, CreateMediaInput as fi, SessionOpenOrCreateOptions as fn, SandboxRunner as fr, getSiteSettings as ft, SearchConfig as g, DatabaseConfig as gi, defaultPreviewSidecarClient as gn, getSection as gr, AppliedSnapshotMeta as gt, CollectionSearchOptions as h, ContentRepository as hi, buildPreviewSignatureHeader as hn, SerializedRequest as hr, renderPreviewToolbar as ht, LocalStorageConfig as i, portableText as ii, FileSessionDatabaseFactory as in, PortableTextTextBlock as ir, UpdateMenuItemInput as it, Widget as j, ManifestResponse as ji, EditFieldMeta as jn, handleMediaList as jr, VerifyPreviewTokenOptions as jt, ReorderWidgetsInput as k, FieldDescriptor as ki, ContentEntry as kn, handleMediaDelete as kr, GeneratePreviewTokenOptions as kt, getSearchStats as l, FileValue as li, SessionDatabaseInfo as ln, SandboxEmailMessage as lr, getPluginSetting as lt, FTSManager as m, MediaRepository as mi, PreviewSidecarSignature as mn, SandboxedPlugin as mr, PreviewToolbarConfig as mt, PluginDescriptor as n, handleContentUnschedule as ni, FilePreviewMiddlewareConfig as nn, PortableTextMarkDef as nr, ReorderMenuItemsInput as nt, StorageDescriptor as o, image as oi, SessionCleanupResult as on, ProseMirrorDocument as or, GetCommentsResult as ot, searchWithDb as p, MediaItem as pi, PreviewSidecarClient as pn, SandboxRunnerFactory as pr, setSiteSettings as pt, getByline as q, isSafeHref as qn, handleContentGetIncludingTrashed as qr, createHookPipeline as qt, getStoredConfig as r, handleContentUpdate as ri, createFilePreviewMiddleware as rn, PortableTextSpan as rr, UpdateMenuInput as rt, extractPlainText as s, FieldDefinition as si, SessionDatabaseFactory as sn, ProseMirrorMark as sr, getCommentCount as st, DinewayConfig as t, handleContentUnpublish as ti, getDb as tn, PortableTextLinkMark as tr, MenuItemType as tt, getSuggestions as u, ImageValue as ui, SessionDatabaseLimitError as un, SandboxEmailSendCallback as ur, getPluginSettings as ut, SearchResponse as v, OptionsRepository as vi, signPreviewUrl as vn, CreateSectionInput as vr, applySnapshotToDatabase as vt, getWidgetAreas as w, apiSuccess as wi, AfterCallback as wn, SchemaError as wr, getPreviewToken as wt, SuggestOptions as x, parseBody as xi, getFallbackChain as xn, SectionSource as xr, Snapshot as xt, SearchResult as y, ParseResult as yi, verifyPreviewSignature as yn, GetSectionsOptions as yr, dropSessionDatabaseTables as yt, getTaxonomyTerms as z, getEditMeta as zn, handleContentCompare as zr, SandboxNotAvailableError as zt };