dineway 0.1.9 → 0.1.12

package/dist/plugins-D7-ILNib.mjs

@@ -0,0 +1,3249 @@
+import { t as OptionsRepository } from "./options-z8VVg1Ll.mjs";
+import { n as createPluginContext, t as PluginContextFactory } from "./context-CNIkMzot.mjs";
+import { t as extractRequestMeta } from "./request-meta-DixlNKKa.mjs";
+import { r as setCronTasksEnabled } from "./cron-CKxvBrRT.mjs";
+import { sql } from "kysely";
+import { AsyncLocalStorage } from "node:async_hooks";
+import { ulid } from "ulidx";
+import { z } from "astro/zod";
+import { Worker } from "node:worker_threads";
+
+//#region src/fields/image.ts
+/**
+* Image field schema
+*/
+const imageSchema = z.object({
+	id: z.string(),
+	src: z.string(),
+	alt: z.string().optional(),
+	width: z.number().optional(),
+	height: z.number().optional()
+});
+/**
+* Image field
+* References media items from the media library
+*/
+function image(options) {
+	return {
+		type: "image",
+		columnType: "TEXT",
+		schema: options?.required === false ? imageSchema.optional() : imageSchema,
+		options,
+		ui: { widget: "image" }
+	};
+}
+
+//#endregion
+//#region src/fields/reference.ts
+/**
+* Reference field
+* References another content item by ID
+*/
+function reference(collection, options) {
+	const schema = z.string();
+	return {
+		type: "reference",
+		columnType: "TEXT",
+		schema: options?.required === false ? schema.optional() : schema,
+		options: {
+			...options,
+			collection
+		},
+		ui: { widget: "reference" }
+	};
+}
+
+//#endregion
+//#region src/fields/portable-text.ts
+/**
+* Portable Text block schema
+*/
+const portableTextBlockSchema = z.object({
+	_type: z.string(),
+	_key: z.string()
+}).passthrough();
+/**
+* Portable Text field
+* Stores structured content in Portable Text format
+*/
+function portableText(options) {
+	const schema = z.array(portableTextBlockSchema);
+	return {
+		type: "portableText",
+		columnType: "JSON",
+		schema: options?.required === false ? schema.optional() : schema,
+		options,
+		ui: { widget: "portableText" }
+	};
+}
+
+//#endregion
+//#region src/content/converters/prosemirror-to-portable-text.ts
+/**
+* Generate a unique key for Portable Text blocks
+*/
+function generateKey() {
+	return Math.random().toString(36).substring(2, 11);
+}
+/**
+* Convert ProseMirror document to Portable Text
+*/
+function prosemirrorToPortableText(doc) {
+	if (!doc || doc.type !== "doc" || !doc.content) return [];
+	const blocks = [];
+	for (const node of doc.content) {
+		const converted = convertNode(node);
+		if (converted) if (Array.isArray(converted)) blocks.push(...converted);
+		else blocks.push(converted);
+	}
+	return blocks;
+}
+/**
+* Convert a single ProseMirror node to Portable Text block(s)
+*/
+function convertNode(node) {
+	switch (node.type) {
+		case "paragraph": return convertParagraph(node);
+		case "heading": return convertHeading(node);
+		case "bulletList": return convertList$1(node, "bullet");
+		case "orderedList": return convertList$1(node, "number");
+		case "blockquote": return convertBlockquote(node);
+		case "codeBlock": return convertCodeBlock$1(node);
+		case "image": return convertImage$1(node);
+		case "horizontalRule": return {
+			_type: "break",
+			_key: generateKey(),
+			style: "lineBreak"
+		};
+		default: return {
+			_type: node.type,
+			_key: generateKey(),
+			...node.attrs,
+			_pmContent: node.content
+		};
+	}
+}
+/**
+* Convert paragraph to Portable Text block
+*/
+function convertParagraph(node) {
+	const { children, markDefs } = convertInlineContent(node.content || []);
+	if (children.length === 0) return null;
+	return {
+		_type: "block",
+		_key: generateKey(),
+		style: "normal",
+		children,
+		markDefs: markDefs.length > 0 ? markDefs : void 0
+	};
+}
+/** Map heading level number to Portable Text style */
+function headingLevelToStyle(level) {
+	switch (level) {
+		case 1: return "h1";
+		case 2: return "h2";
+		case 3: return "h3";
+		case 4: return "h4";
+		case 5: return "h5";
+		case 6: return "h6";
+		default: return "h1";
+	}
+}
+/**
+* Convert heading to Portable Text block
+*/
+function convertHeading(node) {
+	const { children, markDefs } = convertInlineContent(node.content || []);
+	const style = headingLevelToStyle(typeof node.attrs?.level === "number" ? node.attrs.level : 1);
+	if (children.length === 0) return null;
+	return {
+		_type: "block",
+		_key: generateKey(),
+		style,
+		children,
+		markDefs: markDefs.length > 0 ? markDefs : void 0
+	};
+}
+/**
+* Convert list to Portable Text blocks
+*/
+function convertList$1(node, listItem) {
+	const blocks = [];
+	for (const item of node.content || []) if (item.type === "listItem") {
+		const itemBlocks = convertListItem$1(item, listItem, 1);
+		blocks.push(...itemBlocks);
+	}
+	return blocks;
+}
+/**
+* Convert list item to Portable Text blocks
+*/
+function convertListItem$1(item, listItem, level) {
+	const blocks = [];
+	for (const child of item.content || []) if (child.type === "paragraph") {
+		const { children, markDefs } = convertInlineContent(child.content || []);
+		if (children.length > 0) blocks.push({
+			_type: "block",
+			_key: generateKey(),
+			style: "normal",
+			listItem,
+			level,
+			children,
+			markDefs: markDefs.length > 0 ? markDefs : void 0
+		});
+	} else if (child.type === "bulletList") blocks.push(...convertListItemNested(child, "bullet", level + 1));
+	else if (child.type === "orderedList") blocks.push(...convertListItemNested(child, "number", level + 1));
+	return blocks;
+}
+/**
+* Convert nested list
+*/
+function convertListItemNested(node, listItem, level) {
+	const blocks = [];
+	for (const item of node.content || []) if (item.type === "listItem") blocks.push(...convertListItem$1(item, listItem, level));
+	return blocks;
+}
+/**
+* Convert blockquote to Portable Text blocks
+*/
+function convertBlockquote(node) {
+	const blocks = [];
+	for (const child of node.content || []) if (child.type === "paragraph") {
+		const { children, markDefs } = convertInlineContent(child.content || []);
+		if (children.length > 0) blocks.push({
+			_type: "block",
+			_key: generateKey(),
+			style: "blockquote",
+			children,
+			markDefs: markDefs.length > 0 ? markDefs : void 0
+		});
+	}
+	return blocks.length === 1 ? blocks[0] : blocks.length > 0 ? blocks : null;
+}
+/**
+* Convert code block to Portable Text
+*/
+function convertCodeBlock$1(node) {
+	const code = node.content?.map((n) => n.text || "").join("") || "";
+	const language = typeof node.attrs?.language === "string" ? node.attrs.language : void 0;
+	return {
+		_type: "code",
+		_key: generateKey(),
+		code,
+		language: language || void 0
+	};
+}
+/**
+* Convert image to Portable Text
+*/
+function convertImage$1(node) {
+	const attrs = node.attrs;
+	const provider = typeof attrs?.provider === "string" ? attrs.provider : void 0;
+	const mediaId = typeof attrs?.mediaId === "string" ? attrs.mediaId : void 0;
+	const src = typeof attrs?.src === "string" ? attrs.src : "";
+	const alt = typeof attrs?.alt === "string" ? attrs.alt : void 0;
+	const title = typeof attrs?.title === "string" ? attrs.title : void 0;
+	const width = typeof attrs?.width === "number" ? attrs.width : void 0;
+	const height = typeof attrs?.height === "number" ? attrs.height : void 0;
+	const displayWidth = typeof attrs?.displayWidth === "number" ? attrs.displayWidth : void 0;
+	const displayHeight = typeof attrs?.displayHeight === "number" ? attrs.displayHeight : void 0;
+	return {
+		_type: "image",
+		_key: generateKey(),
+		asset: {
+			_ref: mediaId || src || "",
+			url: src || "",
+			provider: provider && provider !== "local" ? provider : void 0
+		},
+		alt: alt || void 0,
+		caption: title || void 0,
+		width: width || void 0,
+		height: height || void 0,
+		displayWidth: displayWidth || void 0,
+		displayHeight: displayHeight || void 0
+	};
+}
+/**
+* Convert inline content (text nodes with marks) to Portable Text spans
+*/
+function convertInlineContent(nodes) {
+	const children = [];
+	const markDefs = [];
+	const markDefMap = /* @__PURE__ */ new Map();
+	for (const node of nodes) if (node.type === "text" && node.text) {
+		const marks = [];
+		for (const mark of node.marks || []) {
+			const markType = convertMark(mark, markDefs, markDefMap);
+			if (markType) marks.push(markType);
+		}
+		children.push({
+			_type: "span",
+			_key: generateKey(),
+			text: node.text,
+			marks: marks.length > 0 ? marks : void 0
+		});
+	} else if (node.type === "hardBreak") if (children.length > 0) {
+		const lastChild = children.at(-1);
+		lastChild.text += "\n";
+	} else children.push({
+		_type: "span",
+		_key: generateKey(),
+		text: "\n"
+	});
+	if (children.length === 0) children.push({
+		_type: "span",
+		_key: generateKey(),
+		text: ""
+	});
+	return {
+		children,
+		markDefs
+	};
+}
+/**
+* Convert a ProseMirror mark to Portable Text mark
+*/
+function convertMark(mark, markDefs, markDefMap) {
+	switch (mark.type) {
+		case "bold":
+		case "strong": return "strong";
+		case "italic":
+		case "em": return "em";
+		case "underline": return "underline";
+		case "strike":
+		case "strikethrough": return "strike-through";
+		case "code": return "code";
+		case "link": {
+			const href = (typeof mark.attrs?.href === "string" ? mark.attrs.href : "") || "";
+			if (markDefMap.has(href)) return markDefMap.get(href);
+			const key = generateKey();
+			markDefs.push({
+				_type: "link",
+				_key: key,
+				href,
+				blank: mark.attrs?.target === "_blank"
+			});
+			markDefMap.set(href, key);
+			return key;
+		}
+		default: return mark.type;
+	}
+}
+
+//#endregion
+//#region src/content/converters/portable-text-to-prosemirror.ts
+/**
+* Convert Portable Text to ProseMirror document
+*/
+function portableTextToProsemirror(blocks) {
+	if (!blocks || blocks.length === 0) return {
+		type: "doc",
+		content: [{ type: "paragraph" }]
+	};
+	const content = [];
+	let i = 0;
+	while (i < blocks.length) {
+		const block = blocks[i];
+		if (isTextBlock(block) && block.listItem) {
+			const listBlocks = [];
+			const listType = block.listItem;
+			while (i < blocks.length) {
+				const current = blocks[i];
+				if (isTextBlock(current) && current.listItem === listType) {
+					listBlocks.push(current);
+					i++;
+				} else break;
+			}
+			content.push(convertList(listBlocks, listType));
+		} else {
+			const converted = convertBlock(block);
+			if (converted) content.push(converted);
+			i++;
+		}
+	}
+	return {
+		type: "doc",
+		content: content.length > 0 ? content : [{ type: "paragraph" }]
+	};
+}
+/**
+* Type guard for text blocks
+*/
+function isTextBlock(block) {
+	return block._type === "block";
+}
+/**
+* Type guard for image blocks.
+* Checks both `_type` and that `asset` is a valid object — image blocks
+* without an `asset` wrapper (e.g. `{ _type: "image", url: "..." }`) are
+* malformed and should not be cast to `PortableTextImageBlock`.
+*/
+function isImageBlock(block) {
+	return block._type === "image" && "asset" in block && typeof block.asset === "object" && block.asset !== null;
+}
+/**
+* Type guard for code blocks
+*/
+function isCodeBlock(block) {
+	return block._type === "code";
+}
+/**
+* Convert a single Portable Text block to ProseMirror node
+*/
+function convertBlock(block) {
+	if (isTextBlock(block)) return convertTextBlock(block);
+	if (isImageBlock(block)) return convertImage(block);
+	if (block._type === "image") return convertMalformedImage(block);
+	if (isCodeBlock(block)) return convertCodeBlock(block);
+	if (block._type === "break") return { type: "horizontalRule" };
+	return {
+		type: "paragraph",
+		content: [{
+			type: "text",
+			text: `[Unknown block type: ${block._type}]`,
+			marks: [{ type: "code" }]
+		}]
+	};
+}
+/**
+* Convert text block to ProseMirror paragraph or heading
+*/
+function convertTextBlock(block) {
+	const { style = "normal", children, markDefs = [] } = block;
+	const content = convertSpans(children, markDefs);
+	switch (style) {
+		case "h1":
+		case "h2":
+		case "h3":
+		case "h4":
+		case "h5":
+		case "h6": return {
+			type: "heading",
+			attrs: { level: parseInt(style.substring(1), 10) },
+			content: content.length > 0 ? content : void 0
+		};
+		case "blockquote": return {
+			type: "blockquote",
+			content: [{
+				type: "paragraph",
+				content: content.length > 0 ? content : void 0
+			}]
+		};
+		default: return {
+			type: "paragraph",
+			content: content.length > 0 ? content : void 0
+		};
+	}
+}
+/**
+* Convert list items to ProseMirror list
+*/
+function convertList(items, listType) {
+	const rootItems = [];
+	let i = 0;
+	while (i < items.length) {
+		const item = items[i];
+		if ((item.level || 1) === 1) {
+			const nestedItems = [];
+			i++;
+			while (i < items.length && (items[i].level || 1) > 1) {
+				nestedItems.push(items[i]);
+				i++;
+			}
+			rootItems.push(convertListItem(item, nestedItems, listType));
+		} else {
+			rootItems.push(convertListItem(item, [], listType));
+			i++;
+		}
+	}
+	return {
+		type: listType === "bullet" ? "bulletList" : "orderedList",
+		content: rootItems
+	};
+}
+/**
+* Convert a single list item to ProseMirror
+*/
+function convertListItem(item, nestedItems, parentListType) {
+	const content = [];
+	const spans = convertSpans(item.children, item.markDefs || []);
+	content.push({
+		type: "paragraph",
+		content: spans.length > 0 ? spans : void 0
+	});
+	if (nestedItems.length > 0) {
+		let j = 0;
+		while (j < nestedItems.length) {
+			const nestedListType = nestedItems[j].listItem || parentListType;
+			const nestedGroup = [];
+			while (j < nestedItems.length && (nestedItems[j].listItem || parentListType) === nestedListType) {
+				nestedGroup.push(nestedItems[j]);
+				j++;
+			}
+			if (nestedGroup.length > 0) {
+				const adjustedGroup = nestedGroup.map((ni) => ({
+					...ni,
+					level: (ni.level || 2) - 1
+				}));
+				content.push(convertList(adjustedGroup, nestedListType));
+			}
+		}
+	}
+	return {
+		type: "listItem",
+		content
+	};
+}
+/**
+* Convert Portable Text spans to ProseMirror text nodes
+*/
+function convertSpans(spans, markDefs) {
+	const nodes = [];
+	const markDefsMap = new Map(markDefs.map((md) => [md._key, md]));
+	for (const span of spans) {
+		if (span._type !== "span") continue;
+		const parts = span.text.split("\n");
+		for (let i = 0; i < parts.length; i++) {
+			const text = parts[i];
+			if (text.length > 0) {
+				const marks = convertMarks(span.marks || [], markDefsMap);
+				const node = {
+					type: "text",
+					text
+				};
+				if (marks.length > 0) node.marks = marks;
+				nodes.push(node);
+			}
+			if (i < parts.length - 1) nodes.push({ type: "hardBreak" });
+		}
+	}
+	return nodes;
+}
+/**
+* Convert Portable Text marks to ProseMirror marks
+*/
+function convertMarks(marks, markDefs) {
+	const pmMarks = [];
+	for (const mark of marks) switch (mark) {
+		case "strong":
+			pmMarks.push({ type: "bold" });
+			break;
+		case "em":
+			pmMarks.push({ type: "italic" });
+			break;
+		case "underline":
+			pmMarks.push({ type: "underline" });
+			break;
+		case "strike-through":
+			pmMarks.push({ type: "strike" });
+			break;
+		case "code":
+			pmMarks.push({ type: "code" });
+			break;
+		default: {
+			const markDef = markDefs.get(mark);
+			if (markDef) if (markDef._type === "link") pmMarks.push({
+				type: "link",
+				attrs: {
+					href: markDef.href,
+					target: markDef.blank ? "_blank" : null
+				}
+			});
+			else pmMarks.push({
+				type: markDef._type,
+				attrs: markDef
+			});
+			break;
+		}
+	}
+	return pmMarks;
+}
+/**
+* Convert image block to ProseMirror
+*/
+function convertImage(block) {
+	return {
+		type: "image",
+		attrs: {
+			src: block.asset.url || block.asset._ref,
+			alt: block.alt || "",
+			title: block.caption || "",
+			mediaId: block.asset._ref,
+			provider: block.asset.provider,
+			width: block.width,
+			height: block.height,
+			displayWidth: block.displayWidth,
+			displayHeight: block.displayHeight
+		}
+	};
+}
+/**
+* Convert a malformed image block (missing `asset` wrapper) to ProseMirror.
+* Handles blocks like `{ _type: "image", url: "...", alt: "..." }` that may
+* originate from migrations or third-party imports.
+*/
+function convertMalformedImage(block) {
+	return {
+		type: "image",
+		attrs: {
+			src: "url" in block && typeof block.url === "string" ? block.url : "",
+			alt: "alt" in block && typeof block.alt === "string" ? block.alt : "",
+			title: "caption" in block && typeof block.caption === "string" ? block.caption : "",
+			mediaId: void 0,
+			provider: void 0,
+			width: "width" in block && typeof block.width === "number" ? block.width : void 0,
+			height: "height" in block && typeof block.height === "number" ? block.height : void 0,
+			displayWidth: "displayWidth" in block && typeof block.displayWidth === "number" ? block.displayWidth : void 0,
+			displayHeight: "displayHeight" in block && typeof block.displayHeight === "number" ? block.displayHeight : void 0
+		}
+	};
+}
+/**
+* Convert code block to ProseMirror
+*/
+function convertCodeBlock(block) {
+	return {
+		type: "codeBlock",
+		attrs: { language: block.language || null },
+		content: block.code ? [{
+			type: "text",
+			text: block.code
+		}] : void 0
+	};
+}
+
+//#endregion
+//#region src/after.ts
+function after(fn) {
+	Promise.resolve().then(fn).catch((error) => {
+		console.error("[dineway] deferred task failed:", error);
+	});
+}
+
+//#endregion
+//#region src/plugins/define-plugin.ts
+const SIMPLE_ID = /^[a-z0-9-]+$/;
+const SCOPED_ID = /^@[a-z0-9-]+\/[a-z0-9-]+$/;
+const SEMVER_PATTERN = /^\d+\.\d+\.\d+/;
+function definePlugin(definition) {
+	if (!("id" in definition) || !("version" in definition)) {
+		if (!("hooks" in definition) && !("routes" in definition)) throw new Error("Standard plugin format requires at least `hooks` or `routes`. For native format, provide `id` and `version`.");
+		return definition;
+	}
+	return defineNativePlugin(definition);
+}
+/**
+* Internal: define a native-format plugin with full validation and normalization.
+*/
+function defineNativePlugin(definition) {
+	const { id, version, capabilities = [], allowedHosts = [], hooks = {}, routes = {}, admin = {} } = definition;
+	const storage = definition.storage ?? {};
+	if (!SIMPLE_ID.test(id) && !SCOPED_ID.test(id)) throw new Error(`Invalid plugin id "${id}". Must be lowercase alphanumeric with dashes (e.g., "my-plugin" or "@scope/my-plugin").`);
+	if (!SEMVER_PATTERN.test(version)) throw new Error(`Invalid plugin version "${version}". Must be semver format (e.g., "1.0.0").`);
+	const validCapabilities = new Set([
+		"network:request",
+		"network:request:unrestricted",
+		"content:read",
+		"content:write",
+		"media:read",
+		"media:write",
+		"users:read",
+		"email:send",
+		"hooks.email-transport:register",
+		"hooks.email-events:register",
+		"hooks.page-fragments:register"
+	]);
+	for (const cap of capabilities) if (!validCapabilities.has(cap)) throw new Error(`Invalid capability "${cap}" in plugin "${id}".`);
+	const normalizedCapabilities = [...capabilities];
+	if (capabilities.includes("content:write") && !capabilities.includes("content:read")) normalizedCapabilities.push("content:read");
+	if (capabilities.includes("media:write") && !capabilities.includes("media:read")) normalizedCapabilities.push("media:read");
+	if (capabilities.includes("network:request:unrestricted") && !capabilities.includes("network:request")) normalizedCapabilities.push("network:request");
+	return {
+		id,
+		version,
+		capabilities: normalizedCapabilities,
+		allowedHosts,
+		storage,
+		hooks: resolveHooks(hooks, id),
+		routes,
+		admin
+	};
+}
+/**
+* Resolve hooks to normalized format with defaults.
+*
+* PluginHooks and ResolvedPluginHooks share the same keys — each input value is
+* `HookConfig<H> | H` and the output is `ResolvedHook<H>`.  TS can't narrow
+* the handler type through a dynamic key, so we assert at the loop boundary.
+*/
+function resolveHooks(hooks, pluginId) {
+	const resolved = {};
+	for (const key of Object.keys(hooks)) {
+		const hook = hooks[key];
+		if (hook) resolved[key] = resolveHook(hook, pluginId);
+	}
+	return resolved;
+}
+/**
+* Check if a hook value is a config object (has a `handler` property)
+*/
+function isHookConfig(hook) {
+	return typeof hook === "object" && hook !== null && "handler" in hook;
+}
+/**
+* Resolve a single hook to normalized format
+*/
+function resolveHook(hook, pluginId) {
+	if (isHookConfig(hook)) {
+		if (hook.exclusive !== void 0 && typeof hook.exclusive !== "boolean") throw new Error(`Invalid "exclusive" value in hook config for plugin "${pluginId}". Must be boolean.`);
+		return {
+			priority: hook.priority ?? 100,
+			timeout: hook.timeout ?? 5e3,
+			dependencies: hook.dependencies ?? [],
+			errorPolicy: hook.errorPolicy ?? "abort",
+			exclusive: hook.exclusive ?? false,
+			handler: hook.handler,
+			pluginId
+		};
+	}
+	return {
+		priority: 100,
+		timeout: 5e3,
+		dependencies: [],
+		errorPolicy: "abort",
+		exclusive: false,
+		handler: hook,
+		pluginId
+	};
+}
+
+//#endregion
+//#region src/plugins/hooks.ts
+/**
+* Plugin Hooks System v2
+*
+* Uses the unified PluginContext for all hooks.
+* Manages lifecycle hooks with:
+* - Deterministic ordering via priority + dependencies
+* - Timeout enforcement
+* - Error isolation
+* - Observability
+*
+*/
+/**
+* Hook pipeline for executing hooks in order
+*/
+var HookPipeline = class HookPipeline {
+	hooks = /* @__PURE__ */ new Map();
+	pluginMap = /* @__PURE__ */ new Map();
+	contextFactory = null;
+	/** Stored so setContextFactory can merge incrementally. */
+	contextFactoryOptions = {};
+	/** Hook names where at least one handler declared exclusive: true */
+	exclusiveHookNames = /* @__PURE__ */ new Set();
+	/**
+	* Selected provider plugin ID for each exclusive hook.
+	* Set by the PluginManager after resolution.
+	*/
+	exclusiveSelections = /* @__PURE__ */ new Map();
+	constructor(plugins, factoryOptions) {
+		if (factoryOptions) {
+			this.contextFactory = new PluginContextFactory(factoryOptions);
+			this.contextFactoryOptions = { ...factoryOptions };
+		}
+		for (const plugin of plugins) this.pluginMap.set(plugin.id, plugin);
+		this.registerPlugins(plugins);
+	}
+	/**
+	* Set or update the context factory options.
+	*
+	* When called on a pipeline that already has a factory, the new options
+	* are merged on top of the existing ones so that callers don't need to
+	* repeat every field (e.g. adding `cronReschedule` without losing
+	* `storage` / `getUploadUrl`).
+	*/
+	setContextFactory(options) {
+		const merged = {
+			...this.contextFactoryOptions,
+			...options
+		};
+		this.contextFactory = new PluginContextFactory(merged);
+		this.contextFactoryOptions = merged;
+	}
+	/**
+	* Get context for a plugin
+	*/
+	getContext(pluginId) {
+		const plugin = this.pluginMap.get(pluginId);
+		if (!plugin) throw new Error(`Plugin "${pluginId}" not found`);
+		if (!this.contextFactory) throw new Error("Context factory not initialized - call setContextFactory first");
+		return this.contextFactory.createContext(plugin);
+	}
+	/**
+	* Get typed hooks for a specific hook name.
+	* The internal map stores ResolvedHook<unknown>, but we know each name
+	* maps to a specific handler type via HookHandlerMap.
+	*
+	* Exclusive hooks that have a selected provider are filtered out — they
+	* should only run via invokeExclusiveHook(), not in the regular pipeline.
+	*/
+	getTypedHooks(name) {
+		const all = this.hooks.get(name) ?? [];
+		if (this.exclusiveSelections.has(name)) return all.filter((h) => !h.exclusive);
+		return all;
+	}
+	/**
+	* Register all hooks from plugins.
+	*
+	* Registers each hook name individually to preserve type safety. The
+	* internal map stores ResolvedHook<unknown> since it's keyed by string,
+	* but getTypedHooks() restores the correct handler type on retrieval.
+	*/
+	registerPlugins(plugins) {
+		for (const plugin of plugins) {
+			this.registerPluginHook(plugin, "plugin:install");
+			this.registerPluginHook(plugin, "plugin:activate");
+			this.registerPluginHook(plugin, "plugin:deactivate");
+			this.registerPluginHook(plugin, "plugin:uninstall");
+			this.registerPluginHook(plugin, "content:beforeSave");
+			this.registerPluginHook(plugin, "content:afterSave");
+			this.registerPluginHook(plugin, "content:beforeDelete");
+			this.registerPluginHook(plugin, "content:afterDelete");
+			this.registerPluginHook(plugin, "content:afterPublish");
+			this.registerPluginHook(plugin, "content:afterUnpublish");
+			this.registerPluginHook(plugin, "media:beforeUpload");
+			this.registerPluginHook(plugin, "media:afterUpload");
+			this.registerPluginHook(plugin, "cron");
+			this.registerPluginHook(plugin, "email:beforeSend");
+			this.registerPluginHook(plugin, "email:deliver");
+			this.registerPluginHook(plugin, "email:afterSend");
+			this.registerPluginHook(plugin, "comment:beforeCreate");
+			this.registerPluginHook(plugin, "comment:moderate");
+			this.registerPluginHook(plugin, "comment:afterCreate");
+			this.registerPluginHook(plugin, "comment:afterModerate");
+			this.registerPluginHook(plugin, "page:metadata");
+			this.registerPluginHook(plugin, "page:fragments");
+		}
+		for (const [hookName, hooks] of this.hooks) this.hooks.set(hookName, this.sortHooks(hooks));
+	}
+	/**
+	* Maps hook names to the capability required to register them.
+	*
+	* Hooks not listed here have no capability requirement (e.g. lifecycle
+	* hooks, cron). Any plugin declaring a listed hook without the required
+	* capability will have that hook silently skipped at registration time.
+	*/
+	static HOOK_REQUIRED_CAPABILITY = new Map([
+		["email:beforeSend", "hooks.email-events:register"],
+		["email:afterSend", "hooks.email-events:register"],
+		["email:deliver", "hooks.email-transport:register"],
+		["content:beforeSave", "content:write"],
+		["content:afterSave", "content:read"],
+		["content:beforeDelete", "content:read"],
+		["content:afterDelete", "content:read"],
+		["content:afterPublish", "content:read"],
+		["content:afterUnpublish", "content:read"],
+		["media:beforeUpload", "media:write"],
+		["media:afterUpload", "media:read"],
+		["comment:beforeCreate", "users:read"],
+		["comment:moderate", "users:read"],
+		["comment:afterCreate", "users:read"],
+		["comment:afterModerate", "users:read"],
+		["page:fragments", "hooks.page-fragments:register"]
+	]);
+	/**
+	* Register a single plugin's hook by name
+	*/
+	registerPluginHook(plugin, name) {
+		const hook = plugin.hooks[name];
+		if (!hook) return;
+		const requiredCapability = HookPipeline.HOOK_REQUIRED_CAPABILITY.get(name);
+		if (requiredCapability && !plugin.capabilities.includes(requiredCapability)) {
+			console.warn(`[hooks] Plugin "${plugin.id}" declares ${name} hook without ${requiredCapability} capability — skipping`);
+			return;
+		}
+		if (hook.exclusive) this.exclusiveHookNames.add(name);
+		this.registerHook(name, hook);
+	}
+	/**
+	* Register a single hook
+	*/
+	registerHook(name, hook) {
+		const existing = this.hooks.get(name) || [];
+		existing.push(hook);
+		this.hooks.set(name, existing);
+	}
+	/**
+	* Sort hooks by priority and dependencies
+	*/
+	sortHooks(hooks) {
+		const sorted = [];
+		const remaining = [...hooks];
+		while (remaining.length > 0) {
+			const ready = remaining.filter((hook) => hook.dependencies.every((dep) => sorted.some((s) => s.pluginId === dep)));
+			if (ready.length === 0) {
+				const pluginIds = remaining.map((hook) => hook.pluginId).join(", ");
+				console.warn(`[hooks] Hook dependency cycle or missing dependency detected among plugins: ${pluginIds}. Falling back to priority order.`);
+				remaining.sort((a, b) => a.priority - b.priority);
+				sorted.push(...remaining);
+				break;
+			}
+			ready.sort((a, b) => a.priority - b.priority);
+			const next = ready[0];
+			sorted.push(next);
+			remaining.splice(remaining.indexOf(next), 1);
+		}
+		return sorted;
+	}
+	/**
+	* Execute a hook with timeout
+	*/
+	async executeWithTimeout(fn, timeout) {
+		let timer;
+		const timeoutPromise = new Promise((_, reject) => {
+			timer = setTimeout(() => reject(/* @__PURE__ */ new Error(`Hook timeout after ${timeout}ms`)), timeout);
+		});
+		try {
+			return await Promise.race([fn(), timeoutPromise]);
+		} finally {
+			if (timer) clearTimeout(timer);
+		}
+	}
+	/**
+	* Run plugin:install hooks
+	*/
+	async runPluginInstall(pluginId) {
+		return this.runLifecycleHook("plugin:install", pluginId);
+	}
+	/**
+	* Run plugin:activate hooks
+	*/
+	async runPluginActivate(pluginId) {
+		return this.runLifecycleHook("plugin:activate", pluginId);
+	}
+	/**
+	* Run plugin:deactivate hooks
+	*/
+	async runPluginDeactivate(pluginId) {
+		return this.runLifecycleHook("plugin:deactivate", pluginId);
+	}
+	/**
+	* Run plugin:uninstall hooks
+	*/
+	async runPluginUninstall(pluginId, deleteData) {
+		const hooks = this.getTypedHooks("plugin:uninstall");
+		const results = [];
+		const hook = hooks.find((h) => h.pluginId === pluginId);
+		if (!hook) return results;
+		const { handler } = hook;
+		const event = { deleteData };
+		const ctx = this.getContext(pluginId);
+		const start = Date.now();
+		try {
+			await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+			results.push({
+				success: true,
+				pluginId: hook.pluginId,
+				duration: Date.now() - start
+			});
+		} catch (error) {
+			results.push({
+				success: false,
+				error: error instanceof Error ? error : new Error(String(error)),
+				pluginId: hook.pluginId,
+				duration: Date.now() - start
+			});
+		}
+		return results;
+	}
+	async runLifecycleHook(hookName, pluginId) {
+		const hooks = this.getTypedHooks(hookName);
+		const results = [];
+		const hook = hooks.find((h) => h.pluginId === pluginId);
+		if (!hook) return results;
+		const { handler } = hook;
+		const event = {};
+		const ctx = this.getContext(pluginId);
+		const start = Date.now();
+		try {
+			await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+			results.push({
+				success: true,
+				pluginId: hook.pluginId,
+				duration: Date.now() - start
+			});
+		} catch (error) {
+			results.push({
+				success: false,
+				error: error instanceof Error ? error : new Error(String(error)),
+				pluginId: hook.pluginId,
+				duration: Date.now() - start
+			});
+		}
+		return results;
+	}
+	/**
+	* Run content:beforeSave hooks
+	* Returns modified content from the pipeline
+	*/
+	async runContentBeforeSave(content, collection, isNew) {
+		const hooks = this.getTypedHooks("content:beforeSave");
+		const results = [];
+		let currentContent = content;
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const event = {
+				content: currentContent,
+				collection,
+				isNew
+			};
+			const ctx = this.getContext(hook.pluginId);
+			const start = Date.now();
+			try {
+				const result = await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+				if (result !== void 0) currentContent = result;
+				results.push({
+					success: true,
+					value: currentContent,
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+			} catch (error) {
+				results.push({
+					success: false,
+					error: error instanceof Error ? error : new Error(String(error)),
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+				if (hook.errorPolicy === "abort") throw error;
+			}
+		}
+		return {
+			content: currentContent,
+			results
+		};
+	}
+	/**
+	* Run content:afterSave hooks
+	*/
+	async runContentAfterSave(content, collection, isNew) {
+		const hooks = this.getTypedHooks("content:afterSave");
+		const results = [];
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const event = {
+				content,
+				collection,
+				isNew
+			};
+			const ctx = this.getContext(hook.pluginId);
+			const start = Date.now();
+			try {
+				await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+				results.push({
+					success: true,
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+			} catch (error) {
+				results.push({
+					success: false,
+					error: error instanceof Error ? error : new Error(String(error)),
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+				if (hook.errorPolicy === "abort") throw error;
+			}
+		}
+		return results;
+	}
+	/**
+	* Run content:beforeDelete hooks
+	* Returns whether deletion is allowed
+	*/
+	async runContentBeforeDelete(id, collection) {
+		const hooks = this.getTypedHooks("content:beforeDelete");
+		const results = [];
+		let allowed = true;
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const event = {
+				id,
+				collection,
+				permanent: false
+			};
+			const ctx = this.getContext(hook.pluginId);
+			const start = Date.now();
+			try {
+				const result = await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+				if (result === false) allowed = false;
+				results.push({
+					success: true,
+					value: result !== false,
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+			} catch (error) {
+				results.push({
+					success: false,
+					error: error instanceof Error ? error : new Error(String(error)),
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+				if (hook.errorPolicy === "abort") throw error;
+			}
+		}
+		return {
+			allowed,
+			results
+		};
+	}
+	/**
+	* Run content:afterDelete hooks
+	*/
+	async runContentAfterDelete(id, collection, permanent) {
+		const hooks = this.getTypedHooks("content:afterDelete");
+		const results = [];
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const event = {
+				id,
+				collection,
+				permanent
+			};
+			const ctx = this.getContext(hook.pluginId);
+			const start = Date.now();
+			try {
+				await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+				results.push({
+					success: true,
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+			} catch (error) {
+				results.push({
+					success: false,
+					error: error instanceof Error ? error : new Error(String(error)),
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+				if (hook.errorPolicy === "abort") throw error;
+			}
+		}
+		return results;
+	}
+	/**
+	* Run content:afterPublish hooks (fire-and-forget).
+	*/
+	async runContentAfterPublish(content, collection) {
+		const hooks = this.getTypedHooks("content:afterPublish");
+		const results = [];
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const event = {
+				content,
+				collection
+			};
+			const ctx = this.getContext(hook.pluginId);
+			const start = Date.now();
+			try {
+				await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+				results.push({
+					success: true,
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+			} catch (error) {
+				results.push({
+					success: false,
+					error: error instanceof Error ? error : new Error(String(error)),
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+				if (hook.errorPolicy === "abort") throw error;
+			}
+		}
+		return results;
+	}
+	/**
+	* Run content:afterUnpublish hooks (fire-and-forget).
+	*/
+	async runContentAfterUnpublish(content, collection) {
+		const hooks = this.getTypedHooks("content:afterUnpublish");
+		const results = [];
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const event = {
+				content,
+				collection
+			};
+			const ctx = this.getContext(hook.pluginId);
+			const start = Date.now();
+			try {
+				await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+				results.push({
+					success: true,
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+			} catch (error) {
+				results.push({
+					success: false,
+					error: error instanceof Error ? error : new Error(String(error)),
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+				if (hook.errorPolicy === "abort") throw error;
+			}
+		}
+		return results;
+	}
+	/**
+	* Run media:beforeUpload hooks
+	*/
+	async runMediaBeforeUpload(file) {
+		const hooks = this.getTypedHooks("media:beforeUpload");
+		const results = [];
+		let currentFile = file;
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const event = { file: currentFile };
+			const ctx = this.getContext(hook.pluginId);
+			const start = Date.now();
+			try {
+				const result = await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+				if (result !== void 0) currentFile = result;
+				results.push({
+					success: true,
+					value: currentFile,
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+			} catch (error) {
+				results.push({
+					success: false,
+					error: error instanceof Error ? error : new Error(String(error)),
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+				if (hook.errorPolicy === "abort") throw error;
+			}
+		}
+		return {
+			file: currentFile,
+			results
+		};
+	}
+	/**
+	* Run media:afterUpload hooks
+	*/
+	async runMediaAfterUpload(media) {
+		const hooks = this.getTypedHooks("media:afterUpload");
+		const results = [];
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const event = { media };
+			const ctx = this.getContext(hook.pluginId);
+			const start = Date.now();
+			try {
+				await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+				results.push({
+					success: true,
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+			} catch (error) {
+				results.push({
+					success: false,
+					error: error instanceof Error ? error : new Error(String(error)),
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+				if (hook.errorPolicy === "abort") throw error;
+			}
+		}
+		return results;
+	}
+	/**
+	* Invoke the cron hook for a specific plugin.
+	*
+	* Unlike other hooks which broadcast to all plugins, the cron hook is
+	* dispatched only to the target plugin — the one that owns the task.
+	*/
+	async invokeCronHook(pluginId, event) {
+		const hook = this.getTypedHooks("cron").find((h) => h.pluginId === pluginId);
+		if (!hook) return {
+			success: false,
+			error: /* @__PURE__ */ new Error(`Plugin "${pluginId}" has no cron hook registered`),
+			pluginId,
+			duration: 0
+		};
+		const { handler } = hook;
+		const ctx = this.getContext(pluginId);
+		const start = Date.now();
+		try {
+			await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+			return {
+				success: true,
+				pluginId,
+				duration: Date.now() - start
+			};
+		} catch (error) {
+			return {
+				success: false,
+				error: error instanceof Error ? error : new Error(String(error)),
+				pluginId,
+				duration: Date.now() - start
+			};
+		}
+	}
+	/**
+	* Run email:beforeSend hooks (middleware pipeline).
+	*
+	* Each handler receives the message and returns a modified message or
+	* `false` to cancel delivery. The pipeline chains message transformations —
+	* each handler receives the output of the previous one.
+	*/
+	async runEmailBeforeSend(message, source) {
+		const hooks = this.getTypedHooks("email:beforeSend");
+		const results = [];
+		let currentMessage = message;
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const event = {
+				message: { ...currentMessage },
+				source
+			};
+			const ctx = this.getContext(hook.pluginId);
+			const start = Date.now();
+			try {
+				const result = await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+				if (result === false) {
+					results.push({
+						success: true,
+						value: false,
+						pluginId: hook.pluginId,
+						duration: Date.now() - start
+					});
+					return {
+						message: false,
+						results
+					};
+				}
+				if (result && typeof result === "object") currentMessage = result;
+				results.push({
+					success: true,
+					value: currentMessage,
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+			} catch (error) {
+				results.push({
+					success: false,
+					error: error instanceof Error ? error : new Error(String(error)),
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+				if (hook.errorPolicy === "abort") throw error;
+			}
+		}
+		return {
+			message: currentMessage,
+			results
+		};
+	}
+	/**
+	* Run email:afterSend hooks (fire-and-forget).
+	*
+	* Errors are logged but don't propagate — they don't affect the caller.
+	*/
+	async runEmailAfterSend(message, source) {
+		const hooks = this.getTypedHooks("email:afterSend");
+		const results = [];
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const event = {
+				message,
+				source
+			};
+			const ctx = this.getContext(hook.pluginId);
+			const start = Date.now();
+			try {
+				await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+				results.push({
+					success: true,
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+			} catch (error) {
+				console.error(`[email:afterSend] Plugin "${hook.pluginId}" error:`, error instanceof Error ? error.message : error);
+				results.push({
+					success: false,
+					error: error instanceof Error ? error : new Error(String(error)),
+					pluginId: hook.pluginId,
+					duration: Date.now() - start
+				});
+			}
+		}
+		return results;
+	}
+	/**
+	* Run comment:beforeCreate hooks (middleware pipeline).
+	*
+	* Each handler receives the event and returns a modified event or
+	* `false` to reject the comment. The pipeline chains transformations —
+	* each handler receives the output of the previous one.
+	*/
+	async runCommentBeforeCreate(event) {
+		const hooks = this.getTypedHooks("comment:beforeCreate");
+		let currentEvent = event;
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const ctx = this.getContext(hook.pluginId);
+			const start = Date.now();
+			try {
+				const result = await this.executeWithTimeout(() => handler({ ...currentEvent }, ctx), hook.timeout);
+				if (result === false) return false;
+				if (result && typeof result === "object") currentEvent = result;
+			} catch (error) {
+				console.error(`[comment:beforeCreate] Plugin "${hook.pluginId}" error (${Date.now() - start}ms):`, error instanceof Error ? error.message : error);
+				if (hook.errorPolicy === "abort") throw error;
+			}
+		}
+		return currentEvent;
+	}
+	/**
+	* Run comment:afterCreate hooks (fire-and-forget).
+	*
+	* Errors are logged but don't propagate — they don't affect the caller.
+	*/
+	async runCommentAfterCreate(event) {
+		const hooks = this.getTypedHooks("comment:afterCreate");
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const ctx = this.getContext(hook.pluginId);
+			try {
+				await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+			} catch (error) {
+				console.error(`[comment:afterCreate] Plugin "${hook.pluginId}" error:`, error instanceof Error ? error.message : error);
+			}
+		}
+	}
+	/**
+	* Run comment:afterModerate hooks (fire-and-forget).
+	*
+	* Errors are logged but don't propagate — they don't affect the caller.
+	*/
+	async runCommentAfterModerate(event) {
+		const hooks = this.getTypedHooks("comment:afterModerate");
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const ctx = this.getContext(hook.pluginId);
+			try {
+				await this.executeWithTimeout(() => handler(event, ctx), hook.timeout);
+			} catch (error) {
+				console.error(`[comment:afterModerate] Plugin "${hook.pluginId}" error:`, error instanceof Error ? error.message : error);
+			}
+		}
+	}
+	/**
+	* Run page:metadata hooks. Each handler returns contributions that are
+	* merged by the metadata collector. Errors are logged but don't propagate.
+	*/
+	async runPageMetadata(event) {
+		const hooks = this.getTypedHooks("page:metadata");
+		const results = [];
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const ctx = this.getContext(hook.pluginId);
+			try {
+				const result = await this.executeWithTimeout(() => Promise.resolve(handler(event, ctx)), hook.timeout);
+				if (result != null) {
+					const contributions = Array.isArray(result) ? result : [result];
+					results.push({
+						pluginId: hook.pluginId,
+						contributions
+					});
+				}
+			} catch (error) {
+				console.error(`[page:metadata] Plugin "${hook.pluginId}" error:`, error instanceof Error ? error.message : error);
+			}
+		}
+		return results;
+	}
+	/**
+	* Run page:fragments hooks. Only trusted plugins should be registered
+	* for this hook. Errors are logged but don't propagate.
+	*/
+	async runPageFragments(event) {
+		const hooks = this.getTypedHooks("page:fragments");
+		const results = [];
+		for (const hook of hooks) {
+			const { handler } = hook;
+			const ctx = this.getContext(hook.pluginId);
+			try {
+				const result = await this.executeWithTimeout(() => Promise.resolve(handler(event, ctx)), hook.timeout);
+				if (result != null) {
+					const contributions = Array.isArray(result) ? result : [result];
+					results.push({
+						pluginId: hook.pluginId,
+						contributions
+					});
+				}
+			} catch (error) {
+				console.error(`[page:fragments] Plugin "${hook.pluginId}" error:`, error instanceof Error ? error.message : error);
+			}
+		}
+		return results;
+	}
+	/**
+	* Check if any hooks are registered for a given name
+	*/
+	hasHooks(name) {
+		const hooks = this.hooks.get(name);
+		return hooks !== void 0 && hooks.length > 0;
+	}
+	/**
+	* Get hook count for debugging
+	*/
+	getHookCount(name) {
+		return this.hooks.get(name)?.length || 0;
+	}
+	/**
+	* Get all registered hook names
+	*/
+	getRegisteredHooks() {
+		return [...this.hooks.keys()];
+	}
+	/**
+	* Returns hook names where at least one handler declared exclusive: true
+	*/
+	getRegisteredExclusiveHooks() {
+		return [...this.exclusiveHookNames];
+	}
+	/**
+	* Check if a hook is exclusive
+	*/
+	isExclusiveHook(name) {
+		return this.exclusiveHookNames.has(name);
+	}
+	/**
+	* Set the selected provider for an exclusive hook.
+	* Called by PluginManager after resolution.
+	*/
+	setExclusiveSelection(hookName, pluginId) {
+		this.exclusiveSelections.set(hookName, pluginId);
+	}
+	/**
+	* Clear the selected provider for an exclusive hook.
+	*/
+	clearExclusiveSelection(hookName) {
+		this.exclusiveSelections.delete(hookName);
+	}
+	/**
+	* Get the selected provider for an exclusive hook (if any).
+	*/
+	getExclusiveSelection(hookName) {
+		return this.exclusiveSelections.get(hookName);
+	}
+	/**
+	* Get all plugins that registered a handler for a given exclusive hook.
+	*/
+	getExclusiveHookProviders(hookName) {
+		return (this.hooks.get(hookName) ?? []).filter((h) => h.exclusive).map((h) => ({ pluginId: h.pluginId }));
+	}
+	/**
+	* Get all plugins that registered a non-exclusive handler for a given hook,
+	* preserving priority order. This partitions with getExclusiveHookProviders().
+	*/
+	getHookProviders(hookName) {
+		return (this.hooks.get(hookName) ?? []).filter((h) => !h.exclusive).map((h) => ({ pluginId: h.pluginId }));
+	}
+	/**
+	* Invoke an exclusive hook — dispatch only to the selected provider.
+	* Returns null if no provider is selected or if the selected hook
+	* is not found in the pipeline.
+	*
+	* This is a generic dispatch used by the email pipeline and other
+	* exclusive hook consumers. The handler type is unknown — callers
+	* must know the expected signature.
+	*
+	* Errors are isolated: a failing handler returns an error result
+	* instead of propagating the exception to the caller.
+	*/
+	async invokeExclusiveHook(hookName, event) {
+		const selectedPluginId = this.exclusiveSelections.get(hookName);
+		if (!selectedPluginId) return null;
+		const hook = (this.hooks.get(hookName) ?? []).find((h) => h.pluginId === selectedPluginId && h.exclusive);
+		if (!hook) return null;
+		const start = Date.now();
+		try {
+			const ctx = this.getContext(selectedPluginId);
+			const handler = hook.handler;
+			return {
+				result: await this.executeWithTimeout(() => handler(event, ctx), hook.timeout),
+				pluginId: selectedPluginId,
+				duration: Date.now() - start
+			};
+		} catch (error) {
+			return {
+				result: void 0,
+				pluginId: selectedPluginId,
+				error: error instanceof Error ? error : new Error(String(error)),
+				duration: Date.now() - start
+			};
+		}
+	}
+};
+/**
+* Create a hook pipeline from plugins
+*/
+function createHookPipeline(plugins, factoryOptions) {
+	return new HookPipeline(plugins, factoryOptions);
+}
+/** Options table key prefix for exclusive hook selections */
+const EXCLUSIVE_HOOK_KEY_PREFIX$1 = "dineway:exclusive_hook:";
+/**
+* Resolve exclusive hook selections.
+*
+* Shared algorithm used by both PluginManager and DinewayRuntime:
+* 1. If a DB selection exists and that plugin is active → keep it.
+* 2. If DB selection is stale (plugin inactive/gone) → clear it.
+* 3. If no selection and only one active provider → auto-select it.
+* 4. If preferred hints match an active provider → first match wins.
+* 5. If multiple providers and no hint → leave unselected (admin must choose).
+*/
+async function resolveExclusiveHooks(opts) {
+	const { pipeline, isActive, getOption, setOption, deleteOption, preferredHints } = opts;
+	const exclusiveHookNames = pipeline.getRegisteredExclusiveHooks();
+	for (const hookName of exclusiveHookNames) {
+		const providers = pipeline.getExclusiveHookProviders(hookName);
+		const activeProviderIds = new Set(providers.map((p) => p.pluginId).filter((id) => isActive(id)));
+		const key = `${EXCLUSIVE_HOOK_KEY_PREFIX$1}${hookName}`;
+		let currentSelection = null;
+		try {
+			currentSelection = await getOption(key);
+		} catch {
+			continue;
+		}
+		if (currentSelection && activeProviderIds.has(currentSelection)) {
+			pipeline.setExclusiveSelection(hookName, currentSelection);
+			continue;
+		}
+		if (currentSelection) try {
+			await deleteOption(key);
+		} catch {}
+		if (activeProviderIds.size === 1) {
+			const [onlyProvider] = activeProviderIds;
+			try {
+				await setOption(key, onlyProvider);
+			} catch {}
+			pipeline.setExclusiveSelection(hookName, onlyProvider);
+			continue;
+		}
+		if (preferredHints) {
+			let found = false;
+			for (const [pluginId, hooks] of preferredHints) if (hooks.includes(hookName) && activeProviderIds.has(pluginId)) {
+				try {
+					await setOption(key, pluginId);
+				} catch {}
+				pipeline.setExclusiveSelection(hookName, pluginId);
+				found = true;
+				break;
+			}
+			if (found) continue;
+		}
+		pipeline.clearExclusiveSelection(hookName);
+	}
+}
+
+//#endregion
+//#region src/plugins/email.ts
+/**
+* Email Pipeline
+*
+* Orchestrates the three-stage email pipeline:
+* 1. email:beforeSend hooks (middleware — transform, validate, cancel)
+* 2. email:deliver hook (exclusive — exactly one provider delivers)
+* 3. email:afterSend hooks (logging, analytics, fire-and-forget)
+*
+* Security features:
+* - Recursion guard prevents re-entrant sends (e.g. plugin calling ctx.email.send from a hook)
+* - System emails (source="system") bypass email:beforeSend and email:afterSend hooks entirely
+*   to protect auth tokens from exfiltration by plugin hooks
+*
+*/
+/** Hook name for the exclusive email delivery hook */
+const EMAIL_DELIVER_HOOK = "email:deliver";
+/** Source value used for auth emails (magic links, invites, password resets) */
+const SYSTEM_SOURCE = "system";
+/**
+* Error thrown when ctx.email.send() is called but no provider is configured.
+*/
+var EmailNotConfiguredError = class extends Error {
+	constructor() {
+		super("No email provider is configured. Install and activate an email provider plugin, then select it in Settings > Email.");
+		this.name = "EmailNotConfiguredError";
+	}
+};
+/**
+* Error thrown when a recursive email send is detected.
+*/
+var EmailRecursionError = class extends Error {
+	constructor() {
+		super("Recursive email send detected. A plugin hook attempted to send an email from within the email pipeline, which would cause infinite recursion.");
+		this.name = "EmailRecursionError";
+	}
+};
+/**
+* Recursion guard using AsyncLocalStorage.
+*
+* EmailPipeline is a singleton (worker-lifetime cached via DinewayRuntime).
+* Instance state like `sendDepth` would false-positive under concurrent
+* requests because two unrelated sends would increment the same counter.
+* ALS scopes the guard to the current async execution context, so concurrent
+* requests each get their own independent recursion tracking.
+*/
+const emailSendALS = new AsyncLocalStorage();
+/**
+* EmailPipeline orchestrates email delivery through the plugin hook system.
+*
+* The pipeline runs in three stages:
+* 1. email:beforeSend — middleware hooks that can transform or cancel messages
+* 2. email:deliver — exclusive hook dispatching to the selected provider
+* 3. email:afterSend — fire-and-forget hooks for logging/analytics
+*/
+var EmailPipeline = class {
+	pipeline;
+	constructor(pipeline) {
+		this.pipeline = pipeline;
+	}
+	/**
+	* Replace the underlying hook pipeline.
+	*
+	* Called by the runtime when rebuilding the hook pipeline after a
+	* plugin is enabled or disabled, so the email pipeline dispatches
+	* to the current set of active hooks.
+	*/
+	setPipeline(pipeline) {
+		this.pipeline = pipeline;
+	}
+	/**
+	* Send an email through the full pipeline.
+	*
+	* @param message - The email to send
+	* @param source - Where the email originated ("system" for auth, plugin ID for plugins)
+	* @throws EmailNotConfiguredError if no provider is selected
+	* @throws EmailRecursionError if called re-entrantly from within a hook
+	* @throws Error if the provider handler throws
+	*/
+	async send(message, source) {
+		const store = emailSendALS.getStore();
+		if (store && store.depth > 0) throw new EmailRecursionError();
+		const run = () => this.sendInner(message, source);
+		if (store) {
+			store.depth++;
+			try {
+				await run();
+			} finally {
+				store.depth--;
+			}
+		} else await emailSendALS.run({ depth: 1 }, run);
+	}
+	/**
+	* Inner send implementation, separated from the recursion guard.
+	*/
+	async sendInner(message, source) {
+		if (!message || typeof message !== "object") throw new Error("Invalid email message: message must be an object");
+		if (!message.to || typeof message.to !== "string") throw new Error("Invalid email message: 'to' is required and must be a string");
+		if (!message.subject || typeof message.subject !== "string") throw new Error("Invalid email message: 'subject' is required and must be a string");
+		if (!message.text || typeof message.text !== "string") throw new Error("Invalid email message: 'text' is required and must be a string");
+		const isSystemEmail = source === SYSTEM_SOURCE;
+		let finalMessage;
+		if (isSystemEmail) finalMessage = message;
+		else {
+			const beforeResult = await this.pipeline.runEmailBeforeSend(message, source);
+			if (beforeResult.message === false) {
+				const cancelledBy = beforeResult.results.find((r) => r.value === false)?.pluginId ?? "unknown";
+				console.info(`[email] Email to "${message.to}" cancelled by plugin "${cancelledBy}"`);
+				return;
+			}
+			finalMessage = beforeResult.message;
+		}
+		const deliverEvent = {
+			message: finalMessage,
+			source
+		};
+		const deliverResult = await this.pipeline.invokeExclusiveHook(EMAIL_DELIVER_HOOK, deliverEvent);
+		if (!deliverResult) throw new EmailNotConfiguredError();
+		if (deliverResult.error) throw deliverResult.error;
+		if (!isSystemEmail) this.pipeline.runEmailAfterSend(finalMessage, source).catch((err) => console.error("[email] afterSend pipeline error:", err instanceof Error ? err.message : err));
+	}
+	/**
+	* Check if an email provider is configured and available.
+	*
+	* Returns true if an email:deliver provider is selected in the exclusive
+	* hook system. Plugins and auth code use this to decide whether to show
+	* "send invite" vs "copy invite link" UI.
+	*/
+	isAvailable() {
+		return this.pipeline.getExclusiveSelection(EMAIL_DELIVER_HOOK) !== void 0;
+	}
+};
+
+//#endregion
+//#region src/plugins/routes.ts
+/**
+* Plugin Routes v2
+*
+* Handles plugin API route invocation with:
+* - Input validation via Zod schemas
+* - Route context creation
+* - Error handling
+*
+*/
+/**
+* Route handler for a plugin
+*/
+var PluginRouteHandler = class {
+	contextFactory;
+	plugin;
+	trustedProxyHeaders;
+	constructor(plugin, factoryOptions) {
+		this.plugin = plugin;
+		this.contextFactory = new PluginContextFactory(factoryOptions);
+		this.trustedProxyHeaders = factoryOptions.trustedProxyHeaders ?? [];
+	}
+	/**
+	* Invoke a route by name
+	*/
+	async invoke(routeName, options) {
+		const route = this.plugin.routes[routeName];
+		if (!route) return {
+			success: false,
+			error: {
+				code: "ROUTE_NOT_FOUND",
+				message: `Route "${routeName}" not found in plugin "${this.plugin.id}"`
+			},
+			status: 404
+		};
+		let validatedInput;
+		if (route.input) {
+			const parseResult = route.input.safeParse(options.body);
+			if (!parseResult.success) return {
+				success: false,
+				error: {
+					code: "VALIDATION_ERROR",
+					message: "Invalid request body",
+					details: parseResult.error.format()
+				},
+				status: 400
+			};
+			validatedInput = parseResult.data;
+		} else validatedInput = options.body;
+		const routeContext = {
+			...this.contextFactory.createContext(this.plugin),
+			input: validatedInput,
+			request: options.request,
+			requestMeta: extractRequestMeta(options.request, this.trustedProxyHeaders)
+		};
+		try {
+			return {
+				success: true,
+				data: await route.handler(routeContext),
+				status: 200
+			};
+		} catch (error) {
+			if (error instanceof PluginRouteError) return {
+				success: false,
+				error: {
+					code: error.code,
+					message: error.message,
+					details: error.details
+				},
+				status: error.status
+			};
+			console.error(`[plugin:${this.plugin.id}] Route handler failed:`, error);
+			return {
+				success: false,
+				error: {
+					code: "INTERNAL_ERROR",
+					message: "An internal error occurred"
+				},
+				status: 500
+			};
+		}
+	}
+	/**
+	* Get all route names
+	*/
+	getRouteNames() {
+		return Object.keys(this.plugin.routes);
+	}
+	/**
+	* Check if a route exists
+	*/
+	hasRoute(name) {
+		return name in this.plugin.routes;
+	}
+	/**
+	* Get route metadata without invoking the handler.
+	* Returns null if the route doesn't exist.
+	*/
+	getRouteMeta(name) {
+		const route = this.plugin.routes[name];
+		if (!route) return null;
+		return { public: route.public === true };
+	}
+};
+/**
+* Error class for plugin routes
+* Allows plugins to return structured errors with specific HTTP status codes
+*/
+var PluginRouteError = class PluginRouteError extends Error {
+	constructor(code, message, status = 400, details) {
+		super(message);
+		this.code = code;
+		this.status = status;
+		this.details = details;
+		this.name = "PluginRouteError";
+	}
+	/**
+	* Create a bad request error (400)
+	*/
+	static badRequest(message, details) {
+		return new PluginRouteError("BAD_REQUEST", message, 400, details);
+	}
+	/**
+	* Create an unauthorized error (401)
+	*/
+	static unauthorized(message = "Unauthorized") {
+		return new PluginRouteError("UNAUTHORIZED", message, 401);
+	}
+	/**
+	* Create a forbidden error (403)
+	*/
+	static forbidden(message = "Forbidden") {
+		return new PluginRouteError("FORBIDDEN", message, 403);
+	}
+	/**
+	* Create a not found error (404)
+	*/
+	static notFound(message = "Not found") {
+		return new PluginRouteError("NOT_FOUND", message, 404);
+	}
+	/**
+	* Create a conflict error (409)
+	*/
+	static conflict(message, details) {
+		return new PluginRouteError("CONFLICT", message, 409, details);
+	}
+	/**
+	* Create an internal error (500)
+	*/
+	static internal(message = "Internal error") {
+		return new PluginRouteError("INTERNAL_ERROR", message, 500);
+	}
+};
+/**
+* Registry for all plugin route handlers
+*/
+var PluginRouteRegistry = class {
+	handlers = /* @__PURE__ */ new Map();
+	constructor(factoryOptions) {
+		this.factoryOptions = factoryOptions;
+	}
+	/**
+	* Register a plugin's routes
+	*/
+	register(plugin) {
+		const handler = new PluginRouteHandler(plugin, this.factoryOptions);
+		this.handlers.set(plugin.id, handler);
+	}
+	/**
+	* Unregister a plugin's routes
+	*/
+	unregister(pluginId) {
+		this.handlers.delete(pluginId);
+	}
+	/**
+	* Invoke a plugin route
+	*/
+	async invoke(pluginId, routeName, options) {
+		const handler = this.handlers.get(pluginId);
+		if (!handler) return {
+			success: false,
+			error: {
+				code: "PLUGIN_NOT_FOUND",
+				message: `Plugin "${pluginId}" not found`
+			},
+			status: 404
+		};
+		return handler.invoke(routeName, options);
+	}
+	/**
+	* Get all registered plugin IDs
+	*/
+	getPluginIds() {
+		return [...this.handlers.keys()];
+	}
+	/**
+	* Get routes for a plugin
+	*/
+	getRoutes(pluginId) {
+		return this.handlers.get(pluginId)?.getRouteNames() ?? [];
+	}
+	/**
+	* Get route metadata for a specific plugin route.
+	* Returns null if the plugin or route doesn't exist.
+	*/
+	getRouteMeta(pluginId, routeName) {
+		const handler = this.handlers.get(pluginId);
+		if (!handler) return null;
+		return handler.getRouteMeta(routeName);
+	}
+};
+
+//#endregion
+//#region src/plugins/manager.ts
+/** Options table key prefix for exclusive hook DB reads via PluginManager */
+const EXCLUSIVE_HOOK_KEY_PREFIX = "dineway:exclusive_hook:";
+/**
+* Plugin Manager v2
+*
+* Manages the full lifecycle of plugins and coordinates hooks/routes.
+*/
+var PluginManager = class {
+	plugins = /* @__PURE__ */ new Map();
+	hookPipeline = null;
+	routeRegistry = null;
+	factoryOptions;
+	initialized = false;
+	constructor(options) {
+		this.options = options;
+		this.factoryOptions = {
+			db: options.db,
+			storage: options.storage,
+			getUploadUrl: options.getUploadUrl,
+			trustedProxyHeaders: options.trustedProxyHeaders
+		};
+	}
+	/**
+	* Set the email pipeline used when creating plugin contexts.
+	* Reinitializes routes/hooks if already initialized so ctx.email is available immediately.
+	*/
+	setEmailPipeline(pipeline) {
+		this.factoryOptions.emailPipeline = pipeline;
+		if (this.initialized) this.reinitialize();
+	}
+	/**
+	* Register a plugin definition
+	* This resolves the definition and adds it to the manager, but doesn't install it
+	*/
+	register(definition) {
+		const resolved = definePlugin(definition);
+		if (this.plugins.has(resolved.id)) throw new Error(`Plugin "${resolved.id}" is already registered`);
+		this.plugins.set(resolved.id, {
+			plugin: resolved,
+			state: "registered"
+		});
+		this.initialized = false;
+		return resolved;
+	}
+	/**
+	* Register multiple plugins
+	*/
+	registerAll(definitions) {
+		for (const def of definitions) this.register(def);
+	}
+	/**
+	* Unregister a plugin
+	* Plugin must be inactive or just registered
+	*/
+	unregister(pluginId) {
+		const entry = this.plugins.get(pluginId);
+		if (!entry) return false;
+		if (entry.state === "active") throw new Error(`Cannot unregister active plugin "${pluginId}". Deactivate it first.`);
+		this.plugins.delete(pluginId);
+		this.initialized = false;
+		return true;
+	}
+	/**
+	* Install a plugin (run install hooks, set up storage)
+	*/
+	async install(pluginId) {
+		const entry = this.plugins.get(pluginId);
+		if (!entry) throw new Error(`Plugin "${pluginId}" not found`);
+		if (entry.state !== "registered") throw new Error(`Plugin "${pluginId}" is already installed (state: ${entry.state})`);
+		this.ensureInitialized();
+		const results = await this.hookPipeline.runPluginInstall(pluginId);
+		const failed = results.find((r) => !r.success);
+		if (failed) throw new Error(`Plugin install failed: ${failed.error?.message ?? "Unknown error"}`);
+		entry.state = "installed";
+		return results;
+	}
+	/**
+	* Activate a plugin (run activate hooks, enable hooks/routes)
+	*/
+	async activate(pluginId) {
+		const entry = this.plugins.get(pluginId);
+		if (!entry) throw new Error(`Plugin "${pluginId}" not found`);
+		if (entry.state === "active") return [];
+		if (entry.state === "registered") await this.install(pluginId);
+		this.ensureInitialized();
+		const results = await this.hookPipeline.runPluginActivate(pluginId);
+		const failed = results.find((r) => !r.success);
+		if (failed) throw new Error(`Plugin activation failed: ${failed.error?.message ?? "Unknown error"}`);
+		entry.state = "active";
+		await setCronTasksEnabled(this.options.db, pluginId, true);
+		this.reinitialize();
+		await this.resolveExclusiveHooks();
+		return results;
+	}
+	/**
+	* Deactivate a plugin (run deactivate hooks, disable hooks/routes)
+	*/
+	async deactivate(pluginId) {
+		const entry = this.plugins.get(pluginId);
+		if (!entry) throw new Error(`Plugin "${pluginId}" not found`);
+		if (entry.state !== "active") return [];
+		this.ensureInitialized();
+		const results = await this.hookPipeline.runPluginDeactivate(pluginId);
+		await setCronTasksEnabled(this.options.db, pluginId, false);
+		entry.state = "inactive";
+		this.reinitialize();
+		await this.resolveExclusiveHooks();
+		return results;
+	}
+	/**
+	* Uninstall a plugin (run uninstall hooks, optionally delete data)
+	*/
+	async uninstall(pluginId, deleteData = false) {
+		const entry = this.plugins.get(pluginId);
+		if (!entry) throw new Error(`Plugin "${pluginId}" not found`);
+		if (entry.state === "active") await this.deactivate(pluginId);
+		this.ensureInitialized();
+		const results = await this.hookPipeline.runPluginUninstall(pluginId, deleteData);
+		await this.deleteCronTasks(pluginId);
+		this.plugins.delete(pluginId);
+		this.initialized = false;
+		await this.resolveExclusiveHooks();
+		return results;
+	}
+	/**
+	* Run content:beforeSave hooks across all active plugins
+	*/
+	async runContentBeforeSave(content, collection, isNew) {
+		this.ensureInitialized();
+		return this.hookPipeline.runContentBeforeSave(content, collection, isNew);
+	}
+	/**
+	* Run content:afterSave hooks across all active plugins
+	*/
+	async runContentAfterSave(content, collection, isNew) {
+		this.ensureInitialized();
+		return this.hookPipeline.runContentAfterSave(content, collection, isNew);
+	}
+	/**
+	* Run content:beforeDelete hooks across all active plugins
+	*/
+	async runContentBeforeDelete(id, collection) {
+		this.ensureInitialized();
+		return this.hookPipeline.runContentBeforeDelete(id, collection);
+	}
+	/**
+	* Run content:afterDelete hooks across all active plugins
+	*/
+	async runContentAfterDelete(id, collection, permanent) {
+		this.ensureInitialized();
+		return this.hookPipeline.runContentAfterDelete(id, collection, permanent);
+	}
+	/**
+	* Run content:afterPublish hooks across all active plugins
+	*/
+	async runContentAfterPublish(content, collection) {
+		this.ensureInitialized();
+		return this.hookPipeline.runContentAfterPublish(content, collection);
+	}
+	/**
+	* Run content:afterUnpublish hooks across all active plugins
+	*/
+	async runContentAfterUnpublish(content, collection) {
+		this.ensureInitialized();
+		return this.hookPipeline.runContentAfterUnpublish(content, collection);
+	}
+	/**
+	* Run media:beforeUpload hooks across all active plugins
+	*/
+	async runMediaBeforeUpload(file) {
+		this.ensureInitialized();
+		return this.hookPipeline.runMediaBeforeUpload(file);
+	}
+	/**
+	* Run media:afterUpload hooks across all active plugins
+	*/
+	async runMediaAfterUpload(media) {
+		this.ensureInitialized();
+		return this.hookPipeline.runMediaAfterUpload(media);
+	}
+	/**
+	* Invoke the cron hook for a specific plugin (per-plugin dispatch).
+	* Used as the InvokeCronHookFn callback for CronExecutor.
+	*/
+	async invokeCronHook(pluginId, event) {
+		this.ensureInitialized();
+		const result = await this.hookPipeline.invokeCronHook(pluginId, event);
+		if (!result.success && result.error) throw result.error;
+	}
+	/**
+	* Invoke a plugin route
+	*/
+	async invokeRoute(pluginId, routeName, options) {
+		this.ensureInitialized();
+		return this.routeRegistry.invoke(pluginId, routeName, options);
+	}
+	/**
+	* Get all routes for a plugin
+	*/
+	getPluginRoutes(pluginId) {
+		this.ensureInitialized();
+		return this.routeRegistry.getRoutes(pluginId);
+	}
+	/**
+	* Get a plugin by ID
+	*/
+	getPlugin(pluginId) {
+		return this.plugins.get(pluginId)?.plugin;
+	}
+	/**
+	* Get plugin state
+	*/
+	getPluginState(pluginId) {
+		return this.plugins.get(pluginId)?.state;
+	}
+	/**
+	* Get all registered plugins
+	*/
+	getAllPlugins() {
+		return Array.from(this.plugins.values(), (entry) => ({
+			plugin: entry.plugin,
+			state: entry.state
+		}));
+	}
+	/**
+	* Get all active plugins
+	*/
+	getActivePlugins() {
+		return [...this.plugins.values()].filter((entry) => entry.state === "active").map((entry) => entry.plugin);
+	}
+	/**
+	* Check if a plugin exists
+	*/
+	hasPlugin(pluginId) {
+		return this.plugins.has(pluginId);
+	}
+	/**
+	* Check if a plugin is active
+	*/
+	isActive(pluginId) {
+		return this.plugins.get(pluginId)?.state === "active";
+	}
+	/**
+	* Get all plugins that registered a handler for an exclusive hook.
+	*/
+	getExclusiveHookProviders(hookName) {
+		this.ensureInitialized();
+		return this.hookPipeline.getExclusiveHookProviders(hookName).map((p) => {
+			const plugin = this.plugins.get(p.pluginId);
+			return {
+				pluginId: p.pluginId,
+				pluginName: plugin?.plugin.id ?? p.pluginId
+			};
+		});
+	}
+	/**
+	* Read the selected provider for an exclusive hook from the options table.
+	*/
+	async getExclusiveHookSelection(hookName) {
+		return new OptionsRepository(this.options.db).get(`${EXCLUSIVE_HOOK_KEY_PREFIX}${hookName}`);
+	}
+	/**
+	* Set the selected provider for an exclusive hook in the options table.
+	* Pass null to clear the selection.
+	*/
+	async setExclusiveHookSelection(hookName, pluginId) {
+		const optionsRepo = new OptionsRepository(this.options.db);
+		const key = `${EXCLUSIVE_HOOK_KEY_PREFIX}${hookName}`;
+		if (pluginId === null) {
+			await optionsRepo.delete(key);
+			this.hookPipeline?.clearExclusiveSelection(hookName);
+			return;
+		}
+		const entry = this.plugins.get(pluginId);
+		if (!entry) throw new Error(`Plugin "${pluginId}" not found`);
+		if (entry.state !== "active") throw new Error(`Plugin "${pluginId}" is not active`);
+		await optionsRepo.set(key, pluginId);
+		this.hookPipeline?.setExclusiveSelection(hookName, pluginId);
+	}
+	/**
+	* Resolution algorithm for exclusive hooks.
+	*
+	* Delegates to the shared resolveExclusiveHooks() function.
+	* See hooks.ts for the full algorithm description.
+	*/
+	async resolveExclusiveHooks(preferredHints) {
+		this.ensureInitialized();
+		const optionsRepo = new OptionsRepository(this.options.db);
+		await resolveExclusiveHooks({
+			pipeline: this.hookPipeline,
+			isActive: (pluginId) => this.isActive(pluginId),
+			getOption: (key) => optionsRepo.get(key),
+			setOption: (key, value) => optionsRepo.set(key, value),
+			deleteOption: async (key) => {
+				await optionsRepo.delete(key);
+			},
+			preferredHints
+		});
+	}
+	/**
+	* Get all exclusive hooks with their providers and current selections.
+	* Used by the admin API.
+	*/
+	async getExclusiveHooksInfo() {
+		this.ensureInitialized();
+		const exclusiveHookNames = this.hookPipeline.getRegisteredExclusiveHooks();
+		const result = [];
+		for (const hookName of exclusiveHookNames) {
+			const providers = this.hookPipeline.getExclusiveHookProviders(hookName);
+			const selection = await this.getExclusiveHookSelection(hookName);
+			result.push({
+				hookName,
+				providers,
+				selectedPluginId: selection
+			});
+		}
+		return result;
+	}
+	/**
+	* Initialize or reinitialize the hook pipeline and route registry
+	*/
+	ensureInitialized() {
+		if (this.initialized) return;
+		const activePlugins = this.getActivePlugins();
+		this.hookPipeline = new HookPipeline(activePlugins, this.factoryOptions);
+		this.routeRegistry = new PluginRouteRegistry(this.factoryOptions);
+		for (const plugin of activePlugins) this.routeRegistry.register(plugin);
+		this.initialized = true;
+	}
+	/**
+	* Force reinitialization (useful after plugin state changes)
+	*/
+	reinitialize() {
+		this.initialized = false;
+		this.ensureInitialized();
+	}
+	/**
+	* Delete all cron tasks for a plugin.
+	* Used during uninstall.
+	*/
+	async deleteCronTasks(pluginId) {
+		try {
+			await sql`
+				DELETE FROM _dineway_cron_tasks
+				WHERE plugin_id = ${pluginId}
+			`.execute(this.options.db);
+		} catch {}
+	}
+};
+/**
+* Create a plugin manager
+*/
+function createPluginManager(options) {
+	return new PluginManager(options);
+}
+
+//#endregion
+//#region src/plugins/sandbox/noop.ts
+/**
+* Error thrown when attempting to use sandboxing on an unsupported platform.
+*/
+var SandboxNotAvailableError = class extends Error {
+	constructor() {
+		super("Plugin sandboxing is not available on this deployment. Marketplace-style plugins require a configured isolated SandboxRunner. Use trusted plugins from config until the portable Node runner lands.");
+		this.name = "SandboxNotAvailableError";
+	}
+};
+/**
+* No-op sandbox runner for platforms without isolation support.
+*
+* - `isAvailable()` returns false
+* - `load()` throws SandboxNotAvailableError
+* - `terminateAll()` is a no-op
+*
+* This is the default runner when no platform adapter is configured.
+*/
+var NoopSandboxRunner = class {
+	/**
+	* Always returns false - sandboxing is not available.
+	*/
+	isAvailable() {
+		return false;
+	}
+	/**
+	* Always throws - can't load sandboxed plugins without isolation.
+	*/
+	async load(_manifest, _code) {
+		throw new SandboxNotAvailableError();
+	}
+	/**
+	* No-op - sandboxing not available, email callback is irrelevant.
+	*/
+	setEmailSend() {}
+	/**
+	* No-op - nothing to terminate.
+	*/
+	async terminateAll() {}
+};
+/**
+* Create a no-op sandbox runner.
+* This is used as the default when no platform adapter is configured.
+*/
+function createNoopSandboxRunner(_options) {
+	return new NoopSandboxRunner();
+}
+
+//#endregion
+//#region src/plugins/sandbox/wrapper.ts
+const COMMENT_CLOSE_RE = /\*\//g;
+const NEWLINE_RE = /[\n\r]/g;
+const TRAILING_SLASH_RE = /\/$/;
+const DEFAULT_PLUGIN_MODULE_SPECIFIER = "sandbox-plugin.js";
+const DEFAULT_RUNTIME_GLOBAL$1 = "__DINEWAY_SANDBOX__";
+function generateSandboxWrapper(manifest, options = {}) {
+	const storageCollections = Object.keys(manifest.storage ?? {});
+	const pluginModuleSpecifier = options.pluginModuleSpecifier ?? DEFAULT_PLUGIN_MODULE_SPECIFIER;
+	const runtimeGlobal = options.runtimeGlobal ?? DEFAULT_RUNTIME_GLOBAL$1;
+	const site = options.site ?? {
+		name: "",
+		url: "",
+		locale: "en"
+	};
+	const hasReadContent = manifest.capabilities.includes("content:read") || manifest.capabilities.includes("content:write");
+	const hasWriteContent = manifest.capabilities.includes("content:write");
+	const hasReadMedia = manifest.capabilities.includes("media:read") || manifest.capabilities.includes("media:write");
+	const hasWriteMedia = manifest.capabilities.includes("media:write");
+	const hasHttp = manifest.capabilities.includes("network:request") || manifest.capabilities.includes("network:request:unrestricted");
+	const hasReadUsers = manifest.capabilities.includes("users:read");
+	const hasEmailSend = manifest.capabilities.includes("email:send");
+	return `
+// =============================================================================
+// Sandboxed Plugin Wrapper
+// Plugin: ${sanitizeComment(manifest.id)}@${sanitizeComment(manifest.version)}
+// =============================================================================
+
+import pluginModule from ${JSON.stringify(pluginModuleSpecifier)};
+
+const hooks = pluginModule?.hooks || pluginModule?.default?.hooks || {};
+const routes = pluginModule?.routes || pluginModule?.default?.routes || {};
+const storageCollections = ${JSON.stringify(storageCollections)};
+const fallbackPlugin = ${JSON.stringify({
+		id: manifest.id,
+		version: manifest.version
+	})};
+const fallbackSite = ${JSON.stringify(site)};
+
+function getRuntime() {
+	const runtime = globalThis[${JSON.stringify(runtimeGlobal)}];
+	if (!runtime || typeof runtime !== "object") {
+		throw new Error("Sandbox runtime bridge is not configured.");
+	}
+	return runtime;
+}
+
+function createHeaders(headerRecord) {
+	const normalized = new Map(
+		Object.entries(headerRecord || {}).map(([key, value]) => [key.toLowerCase(), value]),
+	);
+	return {
+		get(name) {
+			return normalized.get(String(name).toLowerCase()) ?? null;
+		},
+		has(name) {
+			return normalized.has(String(name).toLowerCase());
+		},
+		entries() {
+			return normalized.entries();
+		},
+		keys() {
+			return normalized.keys();
+		},
+		values() {
+			return normalized.values();
+		},
+		forEach(callback) {
+			for (const [key, value] of normalized.entries()) {
+				callback(value, key);
+			}
+		},
+	};
+}
+
+function createContext() {
+	const runtime = getRuntime();
+	const bridge = runtime.bridge;
+	const plugin = runtime.plugin || fallbackPlugin;
+	const site = runtime.site || fallbackSite;
+	const siteBaseUrl = String(site.url || "").replace(${TRAILING_SLASH_RE}, "");
+
+	const kv = {
+		get: (key) => bridge.kvGet(key),
+		set: (key, value) => bridge.kvSet(key, value),
+		delete: (key) => bridge.kvDelete(key),
+		list: (prefix) => bridge.kvList(prefix),
+	};
+
+	function createStorageCollection(collectionName) {
+		if (!storageCollections.includes(collectionName)) {
+			throw new Error('Storage collection "' + collectionName + '" is not declared in the plugin manifest.');
+		}
+		return {
+			get: (id) => bridge.storageGet(collectionName, id),
+			put: (id, data) => bridge.storagePut(collectionName, id, data),
+			delete: (id) => bridge.storageDelete(collectionName, id),
+			exists: async (id) => (await bridge.storageGet(collectionName, id)) !== null,
+			query: (options) => bridge.storageQuery(collectionName, options),
+			count: (where) => bridge.storageCount(collectionName, where),
+			getMany: async (ids) => {
+				const items = await bridge.storageGetMany(collectionName, ids);
+				return new Map(items.map((item) => [item.id, item.data]));
+			},
+			putMany: (items) => bridge.storagePutMany(collectionName, items),
+			deleteMany: (ids) => bridge.storageDeleteMany(collectionName, ids),
+		};
+	}
+
+	const storage = new Proxy({}, {
+		get(_, collectionName) {
+			if (typeof collectionName !== "string") return undefined;
+			return createStorageCollection(collectionName);
+		},
+	});
+
+	const content = ${hasReadContent ? `{
+		get: (collection, id) => bridge.contentGet(collection, id),
+		list: (collection, options) => bridge.contentList(collection, options),${hasWriteContent ? `
+		create: (collection, data) => bridge.contentCreate(collection, data),
+		update: (collection, id, data) => bridge.contentUpdate(collection, id, data),
+		delete: (collection, id) => bridge.contentDelete(collection, id),` : ""}
+	}` : "undefined"};
+
+	const media = ${hasReadMedia ? `{
+		get: (id) => bridge.mediaGet(id),
+		list: (options) => bridge.mediaList(options),${hasWriteMedia ? `
+		getUploadUrl: () => {
+			throw new Error("getUploadUrl is not available in sandbox mode. Use media.upload(filename, contentType, bytes) instead.");
+		},
+		upload: (filename, contentType, bytes) => bridge.mediaUpload(filename, contentType, bytes),
+		delete: (id) => bridge.mediaDelete(id),` : ""}
+	}` : "undefined"};
+
+	const http = ${hasHttp ? `{
+		fetch: async (url, init) => {
+			const result = await bridge.httpFetch(url, init);
+			return {
+				status: result.status,
+				ok: result.status >= 200 && result.status < 300,
+				headers: createHeaders(result.headers),
+				text: async () => result.text,
+				json: async () => JSON.parse(result.text),
+			};
+		},
+	}` : "undefined"};
+
+	const log = {
+		debug: (message, data) => bridge.log("debug", message, data),
+		info: (message, data) => bridge.log("info", message, data),
+		warn: (message, data) => bridge.log("warn", message, data),
+		error: (message, data) => bridge.log("error", message, data),
+	};
+
+	const users = ${hasReadUsers ? `{
+		get: (id) => bridge.userGet(id),
+		getByEmail: (email) => bridge.userGetByEmail(email),
+		list: (options) => bridge.userList(options),
+	}` : "undefined"};
+
+	const cron =
+		typeof bridge.cronSchedule === "function" &&
+		typeof bridge.cronCancel === "function" &&
+		typeof bridge.cronList === "function"
+			? {
+				schedule: (name, options) => bridge.cronSchedule(name, options),
+				cancel: (name) => bridge.cronCancel(name),
+				list: () => bridge.cronList(),
+			}
+			: undefined;
+
+	const email = ${hasEmailSend ? `{
+		send: (message) => bridge.emailSend(message),
+	}` : "undefined"};
+
+	function url(path) {
+		if (!path.startsWith("/")) {
+			throw new Error('URL path must start with "/", got: "' + path + '"');
+		}
+		if (path.startsWith("//")) {
+			throw new Error('URL path must not be protocol-relative, got: "' + path + '"');
+		}
+		return siteBaseUrl + path;
+	}
+
+	return {
+		plugin,
+		storage,
+		kv,
+		content,
+		media,
+		http,
+		log,
+		site,
+		url,
+		users,
+		cron,
+		email,
+	};
+}
+
+export async function invokeHook(hookName, event) {
+	const ctx = createContext();
+	const hookDef = hooks[hookName];
+	if (!hookDef) {
+		return undefined;
+	}
+	const handler = typeof hookDef === "function" ? hookDef : hookDef.handler;
+	if (typeof handler !== "function") {
+		throw new Error(\`Hook \${hookName} handler is not a function\`);
+	}
+	return handler(event, ctx);
+}
+
+export async function invokeRoute(routeName, input, serializedRequest) {
+	const ctx = createContext();
+	const route = routes[routeName];
+	if (!route) {
+		throw new Error(\`Route not found: \${routeName}\`);
+	}
+	const handler = typeof route === "function" ? route : route.handler;
+	if (typeof handler !== "function") {
+		throw new Error(\`Route \${routeName} handler is not a function\`);
+	}
+	return handler(
+		{ input, request: serializedRequest, requestMeta: serializedRequest.meta },
+		ctx,
+	);
+}
+`;
+}
+function sanitizeComment(value) {
+	return value.replace(NEWLINE_RE, " ").replace(COMMENT_CLOSE_RE, "* /");
+}
+
+//#endregion
+//#region src/plugins/sandbox/node.ts
+const DEFAULT_RUNTIME_GLOBAL = "__DINEWAY_SANDBOX__";
+const DEFAULT_LIMITS = {
+	cpuMs: 50,
+	memoryMb: 128,
+	subrequests: 10,
+	wallTimeMs: 3e4
+};
+const DINEWAY_SHIM_CODE = "export const definePlugin = (definition) => definition;\nexport default definePlugin;\n";
+const DINEWAY_STATIC_IMPORT_RE = /\bfrom\s+(['"])dineway\1/g;
+const DINEWAY_DYNAMIC_IMPORT_RE = /\bimport\(\s*(['"])dineway\1\s*\)/g;
+const ALL_BRIDGE_METHODS = [
+	"kvGet",
+	"kvSet",
+	"kvDelete",
+	"kvList",
+	"storageGet",
+	"storagePut",
+	"storageDelete",
+	"storageQuery",
+	"storageCount",
+	"storageGetMany",
+	"storagePutMany",
+	"storageDeleteMany",
+	"contentGet",
+	"contentList",
+	"contentCreate",
+	"contentUpdate",
+	"contentDelete",
+	"mediaGet",
+	"mediaList",
+	"mediaUpload",
+	"mediaDelete",
+	"httpFetch",
+	"userGet",
+	"userGetByEmail",
+	"userList",
+	"cronSchedule",
+	"cronCancel",
+	"cronList",
+	"emailSend",
+	"log"
+];
+const WORKER_SOURCE = `
+const { parentPort, workerData } = require("node:worker_threads");
+
+function toDataUrl(code) {
+	return "data:text/javascript;base64," + Buffer.from(code, "utf8").toString("base64");
+}
+
+function serializeError(error) {
+	if (error && typeof error === "object") {
+		return {
+			message: typeof error.message === "string" ? error.message : String(error),
+			stack: typeof error.stack === "string" ? error.stack : undefined,
+		};
+	}
+	return { message: String(error) };
+}
+
+const pendingBridgeCalls = new Map();
+let nextBridgeCallId = 1;
+
+function callBridge(method, args) {
+	return new Promise((resolve, reject) => {
+		const id = nextBridgeCallId++;
+		pendingBridgeCalls.set(id, { resolve, reject });
+		parentPort.postMessage({ type: "bridge", id, method, args });
+	});
+}
+
+parentPort.on("message", (message) => {
+	if (!message || typeof message !== "object") {
+		return;
+	}
+
+	if (message.type === "bridge-result") {
+		const pending = pendingBridgeCalls.get(message.id);
+		if (!pending) return;
+		pendingBridgeCalls.delete(message.id);
+		pending.resolve(message.value);
+		return;
+	}
+
+	if (message.type === "bridge-error") {
+		const pending = pendingBridgeCalls.get(message.id);
+		if (!pending) return;
+		pendingBridgeCalls.delete(message.id);
+		const error = new Error(
+			message.error && typeof message.error.message === "string"
+				? message.error.message
+				: "Sandbox bridge call failed",
+		);
+		if (message.error && typeof message.error.stack === "string") {
+			error.stack = message.error.stack;
+		}
+		pending.reject(error);
+	}
+});
+
+const bridgeMethods = new Set(workerData.bridgeMethods);
+const bridge = new Proxy(
+	{},
+	{
+		get(_target, prop) {
+			if (typeof prop !== "string" || !bridgeMethods.has(prop)) {
+				return undefined;
+			}
+			return (...args) => callBridge(prop, args);
+		},
+	},
+);
+
+globalThis[workerData.runtimeGlobal] = {
+	bridge,
+	plugin: workerData.plugin,
+	site: workerData.site,
+};
+
+(async () => {
+	try {
+		const wrapperModule = await import(toDataUrl(workerData.wrapperCode));
+		const invocation = workerData.invocation;
+		const result =
+			invocation.kind === "bootstrap"
+				? null
+				: invocation.kind === "hook"
+					? await wrapperModule.invokeHook(invocation.name, invocation.event)
+					: await wrapperModule.invokeRoute(
+							invocation.name,
+							invocation.input,
+							invocation.request,
+						);
+
+		parentPort.postMessage({ type: "result", value: result });
+	} catch (error) {
+		parentPort.postMessage({ type: "error", error: serializeError(error) });
+	}
+})();
+`;
+function normalizeLimits(limits) {
+	return {
+		cpuMs: limits?.cpuMs ?? DEFAULT_LIMITS.cpuMs,
+		memoryMb: limits?.memoryMb ?? DEFAULT_LIMITS.memoryMb,
+		subrequests: limits?.subrequests ?? DEFAULT_LIMITS.subrequests,
+		wallTimeMs: limits?.wallTimeMs ?? DEFAULT_LIMITS.wallTimeMs
+	};
+}
+function codeToDataUrl(code) {
+	return `data:text/javascript;base64,${Buffer.from(code, "utf8").toString("base64")}`;
+}
+function rewriteDinewayImport(code) {
+	const shimUrl = codeToDataUrl(DINEWAY_SHIM_CODE);
+	return code.replace(DINEWAY_STATIC_IMPORT_RE, `from "${shimUrl}"`).replace(DINEWAY_DYNAMIC_IMPORT_RE, `import("${shimUrl}")`);
+}
+function normalizeCapabilities(capabilities) {
+	const normalized = [...capabilities];
+	if (normalized.includes("content:write") && !normalized.includes("content:read")) normalized.push("content:read");
+	if (normalized.includes("media:write") && !normalized.includes("media:read")) normalized.push("media:read");
+	if (normalized.includes("network:request:unrestricted") && !normalized.includes("network:request")) normalized.push("network:request");
+	return normalized;
+}
+function createResolvedPluginFromManifest(manifest) {
+	return {
+		id: manifest.id,
+		version: manifest.version,
+		capabilities: normalizeCapabilities(manifest.capabilities),
+		allowedHosts: manifest.allowedHosts,
+		storage: manifest.storage,
+		hooks: {},
+		routes: {},
+		admin: manifest.admin
+	};
+}
+function createSandboxUploadUrlStub() {
+	return async () => {
+		throw new Error("getUploadUrl is not available in sandbox mode. Use media.upload(filename, contentType, bytes) instead.");
+	};
+}
+function toErrorPayload(error) {
+	if (error instanceof Error) return {
+		message: error.message,
+		stack: error.stack
+	};
+	return { message: String(error) };
+}
+function toArrayBuffer(value) {
+	if (value instanceof ArrayBuffer) return value;
+	if (ArrayBuffer.isView(value)) {
+		const bytes = new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
+		const copy = new Uint8Array(bytes.byteLength);
+		copy.set(bytes);
+		return copy.buffer;
+	}
+	throw new Error("Expected an ArrayBuffer-compatible value.");
+}
+function createSerializedHttpResponse(response) {
+	return response.text().then((text) => ({
+		status: response.status,
+		headers: Object.fromEntries(response.headers.entries()),
+		text
+	}));
+}
+function postWorkerMessage(worker, message) {
+	worker.postMessage(message);
+}
+function isWriteContentAccess(content) {
+	return !!content && typeof content.create === "function";
+}
+function isWriteMediaAccess(media) {
+	return !!media && typeof media.upload === "function" && typeof media.delete === "function";
+}
+function requireStorageCollection(storage, collection) {
+	const value = storage[collection];
+	if (!value) throw new Error(`Storage collection "${collection}" is not declared in the plugin manifest.`);
+	return value;
+}
+function requireHttpAccess(http) {
+	if (!http) throw new Error("HTTP access is not available for this plugin.");
+	return http;
+}
+function requireUserAccess(users) {
+	if (!users) throw new Error("User access is not available for this plugin.");
+	return users;
+}
+function requireCronAccess(cron) {
+	if (!cron) throw new Error("Cron access is not available for this plugin.");
+	return cron;
+}
+function requireWriteContentAccess(content) {
+	if (!isWriteContentAccess(content)) throw new Error("Content write access is not available for this plugin.");
+	return content;
+}
+function requireWriteMediaAccess(media) {
+	if (!isWriteMediaAccess(media)) throw new Error("Media write access is not available for this plugin.");
+	return media;
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function expectString(value, label) {
+	if (typeof value !== "string") throw new Error(`Expected ${label} to be a string.`);
+	return value;
+}
+function expectOptionalString(value, label) {
+	if (value === void 0) return;
+	return expectString(value, label);
+}
+function expectStringArray(value, label) {
+	if (!Array.isArray(value) || value.some((item) => typeof item !== "string")) throw new Error(`Expected ${label} to be an array of strings.`);
+	return value;
+}
+function isWhereValue(value) {
+	if (value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean") return true;
+	if (!isRecord(value)) return false;
+	if ("in" in value) return Array.isArray(value.in) && value.in.every((item) => typeof item === "string" || typeof item === "number");
+	if ("startsWith" in value) return typeof value.startsWith === "string";
+	return [
+		"gt",
+		"gte",
+		"lt",
+		"lte"
+	].some((key) => key in value) && Object.entries(value).every(([key, item]) => {
+		if (![
+			"gt",
+			"gte",
+			"lt",
+			"lte"
+		].includes(key)) return false;
+		return item === void 0 || typeof item === "string" || typeof item === "number";
+	});
+}
+function isWhereClause(value) {
+	return isRecord(value) && Object.values(value).every(isWhereValue);
+}
+function isOrderByRecord(value) {
+	return isRecord(value) && Object.values(value).every((item) => item === "asc" || item === "desc");
+}
+function isQueryOptions(value) {
+	if (!isRecord(value)) return false;
+	if ("where" in value && value.where !== void 0 && !isWhereClause(value.where)) return false;
+	if ("orderBy" in value && value.orderBy !== void 0 && !isOrderByRecord(value.orderBy)) return false;
+	if ("limit" in value && value.limit !== void 0 && typeof value.limit !== "number") return false;
+	if ("cursor" in value && value.cursor !== void 0 && typeof value.cursor !== "string") return false;
+	return true;
+}
+function isContentListOptions(value) {
+	if (!isRecord(value)) return false;
+	if ("where" in value && value.where !== void 0 && !isContentListWhere(value.where)) return false;
+	if ("limit" in value && value.limit !== void 0 && typeof value.limit !== "number") return false;
+	if ("cursor" in value && value.cursor !== void 0 && typeof value.cursor !== "string") return false;
+	if ("orderBy" in value && value.orderBy !== void 0 && !isOrderByRecord(value.orderBy)) return false;
+	return true;
+}
+function isContentListWhere(value) {
+	if (!isRecord(value)) return false;
+	return Object.entries(value).every(([key, item]) => {
+		if (key !== "status" && key !== "locale") return false;
+		return item === void 0 || typeof item === "string";
+	});
+}
+function isContentWriteInput(value) {
+	return isRecord(value);
+}
+function isMediaListOptions(value) {
+	if (!isRecord(value)) return false;
+	if ("limit" in value && value.limit !== void 0 && typeof value.limit !== "number") return false;
+	if ("cursor" in value && value.cursor !== void 0 && typeof value.cursor !== "string") return false;
+	if ("mimeType" in value && value.mimeType !== void 0 && typeof value.mimeType !== "string") return false;
+	return true;
+}
+function isStoragePutManyItems(value) {
+	return Array.isArray(value) && value.every((item) => isRecord(item) && typeof item.id === "string" && "data" in item);
+}
+function isUserListOptions(value) {
+	if (!isRecord(value)) return false;
+	if ("role" in value && value.role !== void 0 && typeof value.role !== "number") return false;
+	if ("limit" in value && value.limit !== void 0 && typeof value.limit !== "number") return false;
+	if ("cursor" in value && value.cursor !== void 0 && typeof value.cursor !== "string") return false;
+	return true;
+}
+function isCronScheduleOptions(value) {
+	return isRecord(value) && typeof value.schedule === "string" && (value.data === void 0 || isRecord(value.data));
+}
+function isSandboxEmailMessage(value) {
+	if (!isRecord(value)) return false;
+	if (typeof value.to !== "string" || typeof value.subject !== "string" || typeof value.text !== "string") return false;
+	return value.html === void 0 || typeof value.html === "string";
+}
+function isLogLevel(value) {
+	return value === "debug" || value === "info" || value === "warn" || value === "error";
+}
+function expectOptional(value, label, guard) {
+	if (value === void 0) return;
+	if (!guard(value)) throw new Error(`Expected ${label} to match the required shape.`);
+	return value;
+}
+function expectValue(value, label, guard) {
+	if (!guard(value)) throw new Error(`Expected ${label} to match the required shape.`);
+	return value;
+}
+var NodeSandboxRunner = class {
+	limits;
+	activeWorkers = /* @__PURE__ */ new Set();
+	emailSend = null;
+	constructor(options) {
+		this.options = options;
+		this.limits = normalizeLimits(options.limits);
+	}
+	isAvailable() {
+		return true;
+	}
+	async load(manifest, code) {
+		const plugin = new NodeSandboxedPlugin(manifest, code, this.options, this.limits, () => this.emailSend, this.activeWorkers);
+		await plugin.validateLoad();
+		return plugin;
+	}
+	setEmailSend(callback) {
+		this.emailSend = callback;
+	}
+	async terminateAll() {
+		await Promise.allSettled(Array.from(this.activeWorkers, (worker) => worker.terminate()));
+		this.activeWorkers.clear();
+	}
+};
+var NodeSandboxedPlugin = class {
+	id;
+	resolvedPlugin;
+	pluginUrl;
+	wrapperCode;
+	pluginWorkers = /* @__PURE__ */ new Set();
+	constructor(manifest, code, options, limits, getEmailSend, sharedActiveWorkers) {
+		this.manifest = manifest;
+		this.options = options;
+		this.limits = limits;
+		this.getEmailSend = getEmailSend;
+		this.sharedActiveWorkers = sharedActiveWorkers;
+		this.id = `${manifest.id}:${manifest.version}`;
+		this.resolvedPlugin = createResolvedPluginFromManifest(manifest);
+		this.pluginUrl = codeToDataUrl(rewriteDinewayImport(code));
+		this.wrapperCode = generateSandboxWrapper(manifest, {
+			pluginModuleSpecifier: this.pluginUrl,
+			runtimeGlobal: DEFAULT_RUNTIME_GLOBAL,
+			site: this.options.siteInfo
+		});
+	}
+	async invokeHook(hookName, event) {
+		return this.invokeInWorker({
+			kind: "hook",
+			name: hookName,
+			event
+		});
+	}
+	async invokeRoute(routeName, input, request) {
+		return this.invokeInWorker({
+			kind: "route",
+			name: routeName,
+			input,
+			request
+		});
+	}
+	async terminate() {
+		await Promise.allSettled(Array.from(this.pluginWorkers, (worker) => worker.terminate()));
+		this.pluginWorkers.clear();
+	}
+	async validateLoad() {
+		await this.invokeInWorker({ kind: "bootstrap" });
+	}
+	createPluginContext() {
+		return createPluginContext({
+			db: this.options.db,
+			storage: this.options.mediaStorage,
+			getUploadUrl: this.manifest.capabilities.includes("media:write") ? createSandboxUploadUrlStub() : void 0,
+			cronReschedule: this.options.cronReschedule,
+			siteInfo: this.options.siteInfo
+		}, this.resolvedPlugin);
+	}
+	async handleBridgeCall(method, args, state) {
+		const ctx = this.createPluginContext();
+		const stringArg = (index, label) => expectString(args[index], `${String(method)} ${label}`);
+		const optionalStringArg = (index, label) => expectOptionalString(args[index], `${String(method)} ${label}`);
+		switch (method) {
+			case "kvGet": return ctx.kv.get(stringArg(0, "key"));
+			case "kvSet": return ctx.kv.set(stringArg(0, "key"), args[1]);
+			case "kvDelete": return ctx.kv.delete(stringArg(0, "key"));
+			case "kvList": return ctx.kv.list(optionalStringArg(0, "prefix"));
+			case "storageGet": return requireStorageCollection(ctx.storage, stringArg(0, "collection")).get(stringArg(1, "id"));
+			case "storagePut": return requireStorageCollection(ctx.storage, stringArg(0, "collection")).put(stringArg(1, "id"), args[2]);
+			case "storageDelete": return requireStorageCollection(ctx.storage, stringArg(0, "collection")).delete(stringArg(1, "id"));
+			case "storageQuery": return requireStorageCollection(ctx.storage, stringArg(0, "collection")).query(expectOptional(args[1], `${String(method)} options`, isQueryOptions));
+			case "storageCount": return requireStorageCollection(ctx.storage, stringArg(0, "collection")).count(expectOptional(args[1], `${String(method)} where`, isWhereClause));
+			case "storageGetMany": return requireStorageCollection(ctx.storage, stringArg(0, "collection")).getMany(expectStringArray(args[1], `${String(method)} ids`)).then((items) => Array.from(items, ([id, data]) => ({
+				id,
+				data
+			})));
+			case "storagePutMany": return requireStorageCollection(ctx.storage, stringArg(0, "collection")).putMany(expectValue(args[1], `${String(method)} items`, isStoragePutManyItems));
+			case "storageDeleteMany": return requireStorageCollection(ctx.storage, stringArg(0, "collection")).deleteMany(expectStringArray(args[1], `${String(method)} ids`));
+			case "contentGet": return ctx.content?.get(stringArg(0, "collection"), stringArg(1, "id")) ?? null;
+			case "contentList": return ctx.content?.list(stringArg(0, "collection"), expectOptional(args[1], `${String(method)} options`, isContentListOptions)) ?? null;
+			case "contentCreate": return requireWriteContentAccess(ctx.content).create(stringArg(0, "collection"), expectValue(args[1], `${String(method)} data`, isContentWriteInput));
+			case "contentUpdate": return requireWriteContentAccess(ctx.content).update(stringArg(0, "collection"), stringArg(1, "id"), expectValue(args[2], `${String(method)} data`, isContentWriteInput));
+			case "contentDelete": return requireWriteContentAccess(ctx.content).delete(stringArg(0, "collection"), stringArg(1, "id"));
+			case "mediaGet": return ctx.media?.get(stringArg(0, "id")) ?? null;
+			case "mediaList": return ctx.media?.list(expectOptional(args[0], `${String(method)} options`, isMediaListOptions)) ?? null;
+			case "mediaUpload": return requireWriteMediaAccess(ctx.media).upload(stringArg(0, "filename"), stringArg(1, "contentType"), toArrayBuffer(args[2]));
+			case "mediaDelete": return requireWriteMediaAccess(ctx.media).delete(stringArg(0, "id"));
+			case "httpFetch": {
+				const http = requireHttpAccess(ctx.http);
+				state.subrequests += 1;
+				if (state.subrequests > this.limits.subrequests) throw new Error(`Sandbox subrequest limit exceeded (${this.limits.subrequests} per invocation).`);
+				return createSerializedHttpResponse(await http.fetch(stringArg(0, "url"), expectOptional(args[1], `${String(method)} init`, isRecord)));
+			}
+			case "userGet": return requireUserAccess(ctx.users).get(stringArg(0, "id"));
+			case "userGetByEmail": return requireUserAccess(ctx.users).getByEmail(stringArg(0, "email"));
+			case "userList": return requireUserAccess(ctx.users).list(expectOptional(args[0], `${String(method)} options`, isUserListOptions));
+			case "cronSchedule": return requireCronAccess(ctx.cron).schedule(stringArg(0, "name"), expectValue(args[1], `${String(method)} options`, isCronScheduleOptions));
+			case "cronCancel": return requireCronAccess(ctx.cron).cancel(stringArg(0, "name"));
+			case "cronList": return requireCronAccess(ctx.cron).list();
+			case "emailSend": {
+				const callback = this.getEmailSend();
+				if (!callback) throw new Error("Email sending is not configured for sandboxed plugins.");
+				return callback(expectValue(args[0], `${String(method)} message`, isSandboxEmailMessage), this.manifest.id);
+			}
+			case "log": {
+				const level = expectValue(args[0], `${String(method)} level`, isLogLevel);
+				const message = stringArg(1, "message");
+				const data = args[2];
+				const fn = ctx.log[level];
+				return fn(message, data);
+			}
+			default: {
+				const unknownMethod = method;
+				throw new Error(`Unsupported sandbox bridge method: ${String(unknownMethod)}`);
+			}
+		}
+	}
+	async invokeInWorker(invocation) {
+		const state = { subrequests: 0 };
+		return new Promise((resolve, reject) => {
+			const worker = new Worker(WORKER_SOURCE, {
+				eval: true,
+				resourceLimits: { maxOldGenerationSizeMb: this.limits.memoryMb },
+				workerData: {
+					runtimeGlobal: DEFAULT_RUNTIME_GLOBAL,
+					bridgeMethods: ALL_BRIDGE_METHODS,
+					plugin: {
+						id: this.manifest.id,
+						version: this.manifest.version
+					},
+					site: this.options.siteInfo ?? {
+						name: "",
+						url: "",
+						locale: "en"
+					},
+					wrapperCode: this.wrapperCode,
+					invocation
+				}
+			});
+			this.pluginWorkers.add(worker);
+			this.sharedActiveWorkers.add(worker);
+			let settled = false;
+			let timedOut = false;
+			let cpuTimer;
+			const cleanup = () => {
+				clearTimeout(timeout);
+				if (cpuTimer) clearTimeout(cpuTimer);
+				this.pluginWorkers.delete(worker);
+				this.sharedActiveWorkers.delete(worker);
+				worker.removeAllListeners();
+			};
+			const finish = (fn) => {
+				if (settled) return;
+				settled = true;
+				cleanup();
+				worker.terminate();
+				fn();
+			};
+			const timeout = setTimeout(() => {
+				timedOut = true;
+				finish(() => {
+					reject(/* @__PURE__ */ new Error(`Sandbox invocation timed out after ${this.limits.wallTimeMs}ms.`));
+				});
+			}, this.limits.wallTimeMs);
+			const cpuPollIntervalMs = Math.max(5, Math.min(25, Math.floor(this.limits.cpuMs / 4)));
+			const scheduleCpuCheck = () => {
+				if (settled) return;
+				cpuTimer = setTimeout(() => {
+					try {
+						if (worker.performance.eventLoopUtilization().active > this.limits.cpuMs) {
+							finish(() => {
+								reject(/* @__PURE__ */ new Error(`Sandbox invocation exceeded CPU limit of ${this.limits.cpuMs}ms.`));
+							});
+							return;
+						}
+					} catch {
+						return;
+					}
+					scheduleCpuCheck();
+				}, cpuPollIntervalMs);
+			};
+			scheduleCpuCheck();
+			worker.on("message", (message) => {
+				if (message.type === "bridge") {
+					this.handleBridgeCall(message.method, message.args, state).then((value) => {
+						postWorkerMessage(worker, {
+							type: "bridge-result",
+							id: message.id,
+							value
+						});
+					}).catch((error) => {
+						postWorkerMessage(worker, {
+							type: "bridge-error",
+							id: message.id,
+							error: toErrorPayload(error)
+						});
+					});
+					return;
+				}
+				if (message.type === "result") {
+					finish(() => resolve(message.value));
+					return;
+				}
+				if (message.type === "error") finish(() => {
+					const error = new Error(message.error.message);
+					if (message.error.stack) error.stack = message.error.stack;
+					reject(error);
+				});
+			});
+			worker.once("error", (error) => {
+				finish(() => reject(error));
+			});
+			worker.once("exit", (code) => {
+				if (settled || timedOut) return;
+				finish(() => {
+					reject(/* @__PURE__ */ new Error(`Sandbox worker exited unexpectedly with code ${code}.`));
+				});
+			});
+		});
+	}
+};
+function createNodeSandboxRunner(options) {
+	return new NodeSandboxRunner(options);
+}
+
+//#endregion
+//#region src/plugins/types.ts
+/**
+* Check if a value is a StandardPluginDefinition (has hooks/routes but no id/version).
+*/
+function isStandardPluginDefinition(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const hasPluginShape = "hooks" in value || "routes" in value;
+	const hasNativeShape = "id" in value && "version" in value;
+	return hasPluginShape && !hasNativeShape;
+}
+
+//#endregion
+export { portableTextToProsemirror as _, SandboxNotAvailableError as a, reference as b, createPluginManager as c, EmailPipeline as d, HookPipeline as f, after as g, definePlugin as h, NoopSandboxRunner as i, PluginRouteError as l, resolveExclusiveHooks as m, NodeSandboxRunner as n, createNoopSandboxRunner as o, createHookPipeline as p, createNodeSandboxRunner as r, PluginManager as s, isStandardPluginDefinition as t, PluginRouteRegistry as u, prosemirrorToPortableText as v, image as x, portableText as y };