dineway 0.2.0 → 0.2.1

package/dist/astro/routes/api/mcp.mjs

@@ -1,44 +1,359 @@
 import "../../../dialect-helpers-fk43GbDb.mjs";
 import "../../../base64-F8-DUraK.mjs";
-import "../../../types-Dq1qT19x.mjs";
-import "../../../loader-CjWqjweO.mjs";
+import "../../../types-ChxYDRvx.mjs";
+import "../../../loader-aWkkc1_o.mjs";
 import "../../../object-cache-D51qOseS.mjs";
-import "../../../content-Bh4BDjv8.mjs";
-import "../../../media-DMj0grzC.mjs";
+import "../../../content-DJcAYFhz.mjs";
+import "../../../media-CVMOoywq.mjs";
 import "../../../options-DQPTH5n0.mjs";
-import "../../../site-activity-Dy3FROs0.mjs";
-import { t as ReviewRequestRepository } from "../../../review-requests-DUyEmtmG.mjs";
-import { a as ASSIGNMENT_STATUSES, i as ASSIGNMENT_PRIORITIES, l as HITL_REQUEST_PRIORITIES, r as ASSIGNMENT_ACTOR_TYPES, t as HitlRequestService, u as HITL_REQUEST_STATUSES } from "../../../hitl-Hw1RmWOq.mjs";
-import "../../../request-cache-D9GQBxMP.mjs";
-import { a as ContextRepository, i as parseSiteBriefingScope, r as formatSiteBriefingText, t as SiteBriefingAssembler } from "../../../briefing-CawZ59CY.mjs";
-import { t as SITE_CONTEXT_TYPES } from "../../../context-types-DqTo6C79.mjs";
-import "../../../content-refresh-CgutSUfO.mjs";
-import "../../../fts-manager-Crzypjqu.mjs";
-import "../../../registry-CtyVedcN.mjs";
-import "../../../settings-BbqgHWpU.mjs";
-import { n as VERSION } from "../../../version-BTvfRGc6.mjs";
-import "../../../query-jaAmw8E1.mjs";
-import "../../../zod-generator-B7TMjyFJ.mjs";
-import "../../../schema-DXdYj4R3.mjs";
-import { t as apiError } from "../../../error-CytFlgcd.mjs";
-import { Cn as contentBylineInputSchema, P as settingsUpdateBody, _n as bylineCreateBody, cn as contentSeoInput, xn as bylineUpdateBody } from "../../../redirects-CA-xylPG.mjs";
-import "../../../byline-fields-DOJO16Gm.mjs";
-import "../../../status-DANd8ERo.mjs";
+import "../../../site-activity-h8smOlYI.mjs";
+import { t as ReviewRequestRepository } from "../../../review-requests-CTWGnWUt.mjs";
+import { a as HITL_REQUEST_STATUSES, i as HITL_REQUEST_PRIORITIES, o as HitlRequestRepository, r as ReleasePayloadBuilder, t as PublicationAuthorizationError } from "../../../publication-authorization-RKiHXKtq.mjs";
+import { C as ASSIGNMENT_STATUSES, S as ASSIGNMENT_PRIORITIES, _ as toPublicContextDiff, a as EntityResolver, b as HitlRequestService, d as SettingsHitlPayloadBuilder, g as RiskPolicyEvaluator, h as SchemaHitlPayloadBuilder, i as ActorExpertiseService, n as AssignmentService, r as HandoffSnapshotStore, t as WorkflowHitlCoordinator, v as toPublicContextEntry, x as ASSIGNMENT_ACTOR_TYPES, y as toPublicContextEntryPage } from "../../../site-context-B8T1kpUP.mjs";
+import "../../../request-cache-CBFjCwSt.mjs";
+import { a as ContextRepository, i as parseSiteBriefingScope, r as formatSiteBriefingText, t as SiteBriefingAssembler } from "../../../briefing-0rf-su3-.mjs";
+import { t as SITE_CONTEXT_TYPES } from "../../../context-types-eBuMDAg-.mjs";
+import "../../../content-refresh-B4ZCmxgd.mjs";
+import "../../../fts-manager-ewTGohf4.mjs";
+import "../../../registry-BYYyb2tF.mjs";
+import { a as getSiteSettingsWithDb } from "../../../settings-BECcAIRH.mjs";
+import { t as ReviewPayloadBuilder } from "../../../review-payload-BysRWpxS.mjs";
+import { n as VERSION } from "../../../version-C3iVRuaF.mjs";
+import "../../../query-C2U5u5_p.mjs";
+import "../../../zod-generator-C7AsLpSB.mjs";
+import "../../../schema-DUtnZxjZ.mjs";
+import { t as apiError } from "../../../error-CSVaQNZy.mjs";
+import { Cn as contentBylineInputSchema, P as settingsUpdateBody, _n as bylineCreateBody, cn as contentSeoInput, xn as bylineUpdateBody } from "../../../redirects-Bhpm8bRe.mjs";
+import "../../../byline-fields-WN7RQT4q.mjs";
+import "../../../status-NqWOSFAD.mjs";
 import "../../../api/schemas/index.mjs";
-import { i as hasScope } from "../../../api-tokens-2r7OWi_I.mjs";
-import { r as registerPluginMcpRegistry, t as createReviewedPluginMcpCommandExecutor } from "../../../mcp-reviewed-executor-TwVbMzG6.mjs";
-import { t as resolveActorIdentity } from "../../../actor-CrObAPV0.mjs";
-import { d as logSchemaActivity, o as logContentActivity, p as logSiteActivitySafely, r as contentMcpToolSource, t as activityChangedKeys, x as schemaMcpToolSource } from "../../../activity-events-y6eT8UW6.mjs";
-import "../../../utils-CMDhr5Xd.mjs";
-import "../../../search-DSaLgEFI.mjs";
-import { n as convertDataForWrite, t as convertDataForRead } from "../../../portable-text-dA_UlJwW.mjs";
-import { _ as ReviewPayloadBuilder, a as EntityResolver, b as toPublicContextEntryPage, d as SettingsHitlPayloadBuilder, g as RiskPolicyEvaluator, h as SchemaHitlPayloadBuilder, i as ActorExpertiseService, n as AssignmentService, r as HandoffSnapshotStore, t as WorkflowHitlCoordinator, v as toPublicContextDiff, y as toPublicContextEntry } from "../../../site-context-DQiL8Fl5.mjs";
+import { i as hasScope } from "../../../api-tokens-Ypaly90d.mjs";
+import { r as registerPluginMcpRegistry, t as createReviewedPluginMcpCommandExecutor } from "../../../mcp-reviewed-executor-Dn52L_yY.mjs";
+import { n as resolveActorIdentity } from "../../../actor-0QJ1Gbtf.mjs";
+import "../../../activity-DUaz_w7p.mjs";
+import { d as logSchemaActivity, o as logContentActivity, p as logSiteActivitySafely, r as contentMcpToolSource, t as activityChangedKeys, x as schemaMcpToolSource } from "../../../activity-events-CJDvE2uc.mjs";
+import "../../../utils-D1SrKGtP.mjs";
+import "../../../search-DUKgZUlm.mjs";
+import { n as SeoProviderEvidenceService, t as ForgewaySeoGatewayClient } from "../../../forgeway-seo-client-G5ddhVHd.mjs";
+import { n as convertDataForWrite, t as convertDataForRead } from "../../../portable-text-BASHceim.mjs";
 import { z } from "zod";
 import { Role, canActOnOwn, hasPermission } from "@dineway-ai/auth";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ErrorCode, McpError } from "@modelcontextprotocol/sdk/types.js";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 
+//#region src/mcp/seo-provider-tools.ts
+const annotations = {
+	readOnlyHint: true,
+	destructiveHint: false,
+	idempotentHint: false,
+	openWorldHint: true
+};
+const forceRefreshInput = { force_refresh: z.boolean().optional().describe("Bypass the managed provider cache") };
+const dataForSeoCommonInput = {
+	location_code: z.number().int().min(1).max(1e7).optional(),
+	language_code: z.string().trim().min(1).max(20).optional(),
+	device: z.enum(["desktop", "mobile"]).optional(),
+	...forceRefreshInput
+};
+function serviceOrThrow(service) {
+	if (!service) throw new Error("Dineway hosted SEO provider evidence is unavailable in this runtime.");
+	return service;
+}
+function jsonResult$1(data) {
+	return { content: [{
+		type: "text",
+		text: JSON.stringify(data, null, 2)
+	}] };
+}
+function errorResult$1(error) {
+	return {
+		content: [{
+			type: "text",
+			text: error instanceof Error ? error.message : "SEO provider evidence request failed."
+		}],
+		isError: true
+	};
+}
+function registerSeoProviderTools(server, options) {
+	server.registerTool("seo_firecrawl_scrape", {
+		title: "Scrape URL with Firecrawl",
+		description: "Fetch bounded managed-provider evidence for one HTTP(S) URL. Returns raw evidence without interpretation or persistence.",
+		inputSchema: z.object({
+			url: z.string().trim().min(1).max(2048),
+			formats: z.array(z.string().trim().min(1).max(50)).min(1).max(10).optional(),
+			only_main_content: z.boolean().optional(),
+			timeout_ms: z.number().int().min(1e3).max(12e4).optional(),
+			...forceRefreshInput
+		}),
+		annotations
+	}, async (args, extra) => {
+		options.authorize(extra);
+		try {
+			return jsonResult$1(await serviceOrThrow(options.service).firecrawlScrape({
+				url: args.url,
+				formats: args.formats,
+				onlyMainContent: args.only_main_content,
+				timeoutMs: args.timeout_ms,
+				forceRefresh: args.force_refresh
+			}));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("seo_firecrawl_map", {
+		title: "Map URLs with Firecrawl",
+		description: "Discover a bounded URL map for one HTTP(S) origin through the managed provider bridge.",
+		inputSchema: z.object({
+			url: z.string().trim().min(1).max(2048),
+			search: z.string().trim().min(1).max(500).optional(),
+			sitemap: z.enum([
+				"skip",
+				"include",
+				"only"
+			]).optional(),
+			limit: z.number().int().min(1).max(1e3).optional(),
+			include_subdomains: z.boolean().optional(),
+			ignore_query_parameters: z.boolean().optional(),
+			...forceRefreshInput
+		}),
+		annotations
+	}, async (args, extra) => {
+		options.authorize(extra);
+		try {
+			return jsonResult$1(await serviceOrThrow(options.service).firecrawlMap({
+				url: args.url,
+				search: args.search,
+				sitemap: args.sitemap,
+				limit: args.limit,
+				includeSubdomains: args.include_subdomains,
+				ignoreQueryParameters: args.ignore_query_parameters,
+				forceRefresh: args.force_refresh
+			}));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("seo_firecrawl_crawl_start", {
+		title: "Start Firecrawl Crawl",
+		description: "Start one bounded managed crawl and return the raw provider task payload. Does not create a Dineway workflow task.",
+		inputSchema: z.object({
+			url: z.string().trim().min(1).max(2048),
+			limit: z.number().int().min(1).max(1e3).optional(),
+			max_discovery_depth: z.number().int().min(0).max(20).optional(),
+			allow_external_links: z.boolean().optional(),
+			allow_subdomains: z.boolean().optional(),
+			scrape_formats: z.array(z.string().trim().min(1).max(50)).min(1).max(10).optional(),
+			...forceRefreshInput
+		}),
+		annotations
+	}, async (args, extra) => {
+		options.authorize(extra);
+		try {
+			return jsonResult$1(await serviceOrThrow(options.service).firecrawlCrawlStart({
+				url: args.url,
+				limit: args.limit,
+				maxDiscoveryDepth: args.max_discovery_depth,
+				allowExternalLinks: args.allow_external_links,
+				allowSubdomains: args.allow_subdomains,
+				scrapeFormats: args.scrape_formats,
+				forceRefresh: args.force_refresh
+			}));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("seo_firecrawl_crawl_status", {
+		title: "Get Firecrawl Crawl Status",
+		description: "Read the raw status of one managed crawl by its provider crawl ID.",
+		inputSchema: z.object({ id: z.string().trim().min(1).max(500) }),
+		annotations
+	}, async (args, extra) => {
+		options.authorize(extra);
+		try {
+			return jsonResult$1(await serviceOrThrow(options.service).firecrawlCrawlStatus({ id: args.id }));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("seo_firecrawl_search", {
+		title: "Search with Firecrawl",
+		description: "Return bounded raw web-search evidence through the managed provider bridge.",
+		inputSchema: z.object({
+			query: z.string().trim().min(1).max(1e3),
+			limit: z.number().int().min(1).max(1e3).optional(),
+			scrape: z.boolean().optional(),
+			...forceRefreshInput
+		}),
+		annotations
+	}, async (args, extra) => {
+		options.authorize(extra);
+		try {
+			return jsonResult$1(await serviceOrThrow(options.service).firecrawlSearch({
+				query: args.query,
+				limit: args.limit,
+				scrape: args.scrape,
+				forceRefresh: args.force_refresh
+			}));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("seo_dataforseo_serp", {
+		title: "Get Organic SERP Evidence",
+		description: "Return bounded raw Google organic SERP evidence for one keyword.",
+		inputSchema: z.object({
+			keyword: z.string().trim().min(1).max(1e3),
+			depth: z.number().int().min(1).max(100).optional(),
+			...dataForSeoCommonInput
+		}),
+		annotations
+	}, async (args, extra) => {
+		options.authorize(extra);
+		try {
+			return jsonResult$1(await serviceOrThrow(options.service).dataForSeoSerp({
+				keyword: args.keyword,
+				depth: args.depth,
+				locationCode: args.location_code,
+				languageCode: args.language_code,
+				device: args.device,
+				forceRefresh: args.force_refresh
+			}));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("seo_dataforseo_maps", {
+		title: "Get Maps SERP Evidence",
+		description: "Return bounded raw Google Maps SERP evidence for one keyword.",
+		inputSchema: z.object({
+			keyword: z.string().trim().min(1).max(1e3),
+			depth: z.number().int().min(1).max(100).optional(),
+			...dataForSeoCommonInput
+		}),
+		annotations
+	}, async (args, extra) => {
+		options.authorize(extra);
+		try {
+			return jsonResult$1(await serviceOrThrow(options.service).dataForSeoMaps({
+				keyword: args.keyword,
+				depth: args.depth,
+				locationCode: args.location_code,
+				languageCode: args.language_code,
+				device: args.device,
+				forceRefresh: args.force_refresh
+			}));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("seo_dataforseo_keywords", {
+		title: "Get Keyword Evidence",
+		description: "Return bounded raw keyword suggestions for one seed keyword.",
+		inputSchema: z.object({
+			keyword: z.string().trim().min(1).max(1e3),
+			limit: z.number().int().min(1).max(1e3).optional(),
+			...dataForSeoCommonInput
+		}),
+		annotations
+	}, async (args, extra) => {
+		options.authorize(extra);
+		try {
+			return jsonResult$1(await serviceOrThrow(options.service).dataForSeoKeywords({
+				keyword: args.keyword,
+				limit: args.limit,
+				locationCode: args.location_code,
+				languageCode: args.language_code,
+				device: args.device,
+				forceRefresh: args.force_refresh
+			}));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("seo_dataforseo_competitors", {
+		title: "Get Competitor Domain Evidence",
+		description: "Return bounded raw competitor-domain evidence for one target domain.",
+		inputSchema: z.object({
+			domain: z.string().trim().min(1).max(253),
+			limit: z.number().int().min(1).max(1e3).optional(),
+			...dataForSeoCommonInput
+		}),
+		annotations
+	}, async (args, extra) => {
+		options.authorize(extra);
+		try {
+			return jsonResult$1(await serviceOrThrow(options.service).dataForSeoCompetitors({
+				domain: args.domain,
+				limit: args.limit,
+				locationCode: args.location_code,
+				languageCode: args.language_code,
+				device: args.device,
+				forceRefresh: args.force_refresh
+			}));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("seo_dataforseo_ai_scrape", {
+		title: "Get Managed AI Result Evidence",
+		description: "Return raw managed AI-result evidence for one keyword. This does not replace direct user-account observations.",
+		inputSchema: z.object({
+			keyword: z.string().trim().min(1).max(1e3),
+			platform: z.enum([
+				"chat_gpt",
+				"gemini",
+				"perplexity"
+			]).optional(),
+			...dataForSeoCommonInput
+		}),
+		annotations
+	}, async (args, extra) => {
+		options.authorize(extra);
+		try {
+			return jsonResult$1(await serviceOrThrow(options.service).dataForSeoAiScrape({
+				keyword: args.keyword,
+				platform: args.platform,
+				locationCode: args.location_code,
+				languageCode: args.language_code,
+				device: args.device,
+				forceRefresh: args.force_refresh
+			}));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("seo_dataforseo_ai_mentions", {
+		title: "Get Managed AI Mention Evidence",
+		description: "Return bounded raw managed mention evidence for a domain, keyword, or both. This does not generate visibility conclusions.",
+		inputSchema: z.object({
+			domain: z.string().trim().min(1).max(253).optional(),
+			keyword: z.string().trim().min(1).max(1e3).optional(),
+			platform: z.enum(["google", "chat_gpt"]).optional(),
+			limit: z.number().int().min(1).max(1e3).optional(),
+			...dataForSeoCommonInput
+		}),
+		annotations
+	}, async (args, extra) => {
+		options.authorize(extra);
+		try {
+			return jsonResult$1(await serviceOrThrow(options.service).dataForSeoAiMentions({
+				domain: args.domain,
+				keyword: args.keyword,
+				platform: args.platform,
+				limit: args.limit,
+				locationCode: args.location_code,
+				languageCode: args.language_code,
+				device: args.device,
+				forceRefresh: args.force_refresh
+			}));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+}
+
+//#endregion
 //#region src/mcp/server.ts
 const COLLECTION_SLUG_PATTERN = /^[a-z][a-z0-9_]*$/;
 const ENTITY_RESOLVE_TYPES = [
@@ -109,7 +424,7 @@ function getDineway(extra) {
 }
 async function getCollectionFields(dineway, collection) {
 	try {
-		const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+		const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
 		return (await new SchemaRegistry(dineway.db).getCollectionWithFields(collection))?.fields ?? null;
 	} catch {
 		return null;
@@ -126,7 +441,7 @@ async function applyReadMarkdown(dineway, collection, items) {
 	for (const item of items) if (item.data && typeof item.data === "object") item.data = convertDataForRead(item.data, fields, false);
 }
 async function invalidateBylines() {
-	const { invalidateBylineCache } = await import("../../../bylines-y4LO-dTj.mjs").then((n) => n.t);
+	const { invalidateBylineCache } = await import("../../../bylines-CmZFCMr0.mjs").then((n) => n.t);
 	invalidateBylineCache();
 }
 function canReadDrafts(extra) {
@@ -304,27 +619,83 @@ function allowedEntityResolveTypes(payload, requestedTypes) {
 	if (disallowed.length > 0) throw new McpError(ErrorCode.InvalidRequest, `Insufficient scope or role for entity types: ${disallowed.join(", ")}`);
 	return requestedTypes;
 }
-function contentPublishReviewRequired(extra) {
-	const payload = getExtra(extra);
-	const actor = resolveActorIdentity(actorLocals(payload));
-	return new RiskPolicyEvaluator({
-		db: payload.dineway.db,
-		handlers: payload.dineway
-	}).requiresContentPublishReview(actor);
+function contentPublicationService(payload) {
+	return payload.dineway.createPublicationAuthorizationService();
 }
-async function requireApprovedContentPublishReview(extra, collection, id, reviewRequestId) {
-	const payload = getExtra(extra);
+function contentPublicationError(error) {
+	return error instanceof PublicationAuthorizationError ? errorResult(`[${error.code}] ${error.message}`) : errorResult(error);
+}
+async function ensureContentReleaseRequest(payload, input) {
 	const actor = resolveActorIdentity(actorLocals(payload));
-	const decision = await new RiskPolicyEvaluator({
-		db: payload.dineway.db,
-		handlers: payload.dineway
-	}).evaluateContentPublishReview({
-		actor,
-		collection,
-		id,
-		reviewRequestId
+	const settings = await getSiteSettingsWithDb(payload.dineway.db);
+	const release = await new ReleasePayloadBuilder({
+		handlers: payload.dineway,
+		reviewRequests: new ReviewRequestRepository(payload.dineway.db)
+	}).buildContentReleasePayload({
+		collection: input.collection,
+		id: input.id,
+		operation: input.operation,
+		editorialReviewRequestId: input.editorialReviewRequestId,
+		publishedAt: input.publishedAt,
+		scheduledAt: input.scheduledAt,
+		siteTimezone: settings.timezone?.trim() || "UTC"
+	});
+	const repository = new HitlRequestRepository(payload.dineway.db);
+	const existing = (await repository.list({
+		scope: release.scope,
+		statuses: ["pending", "approved"],
+		actionType: release.actionType,
+		targetRefType: "content",
+		targetRefId: release.entryId,
+		requestedByActorType: actor.actorType,
+		requestedByActorId: actor.actorId,
+		limit: 100
+	})).items.find((request) => request.metadata.actionHash === release.actionHash);
+	if (existing) return {
+		created: false,
+		request: existing
+	};
+	const request = await repository.create({
+		scope: release.scope,
+		actionType: release.actionType,
+		title: `${input.operation === "publish" ? "Publish" : "Schedule"} ${release.collection}/${release.entryId}`,
+		summary: `Authorize exact ${input.operation} release for reviewed Draft`,
+		riskReason: "Agent-authenticated content release requires explicit approval.",
+		reviewPayload: release.releasePayload,
+		targetRefType: "content",
+		targetRefId: release.entryId,
+		requestedByActorType: actor.actorType,
+		requestedByActorId: actor.actorId,
+		requestedAuthMetadata: actor.authMetadata,
+		metadata: {
+			actionHash: release.actionHash,
+			editorialReviewRequestId: release.editorialReviewRequestId,
+			operation: release.operation,
+			scheduledAt: release.scheduledAt,
+			publishedAt: release.publishedAt
+		}
 	});
-	if (!decision.allowed) throw new McpError(ErrorCode.InvalidRequest, decision.message);
+	await logSiteActivitySafely(payload.dineway.db, actorLocals(payload), {
+		actionType: "hitl.submitted",
+		subjectType: "hitl_request",
+		subjectId: request.id,
+		scope: request.scope,
+		sourceType: "mcp_tool",
+		sourceName: "content_release_request",
+		resultStatus: "pending",
+		summary: `Submitted release request for ${release.actionType}`,
+		detail: {
+			collection: release.collection,
+			entryId: release.entryId,
+			operation: release.operation,
+			editorialReviewRequestId: release.editorialReviewRequestId,
+			actionHash: release.actionHash
+		}
+	});
+	return {
+		created: true,
+		request
+	};
 }
 async function ensureWorkflowHitlRequest(extra, action) {
 	const payload = getExtra(extra);
@@ -460,6 +831,13 @@ function createMcpServer(options = {}) {
 		name: "dineway",
 		version: VERSION
 	}, { capabilities: { logging: {} } });
+	registerSeoProviderTools(server, {
+		service: options.seoProviderService,
+		authorize: (extra) => {
+			requireScope(extra, "seo:read");
+			requireRole(extra, Role.AUTHOR);
+		}
+	});
 	server.registerTool("site_briefing_get", {
 		title: "Get Site Briefing",
 		description: "Build a read-only Site Context Engine briefing for a site, collection, content item, plugin, taxonomy, or menu scope. The briefing includes inherited scopes, authorized schema, recent activity, active plugin capabilities, curated settings/SEO, and forward-compatible context/review/staleness sections.",
@@ -889,7 +1267,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_create", {
 		title: "Create Assignment",
-		description: experimentalWorkflowDescription("Create a workflow assignment attached to a Dineway scope. Assignments are durable human-agent handoffs and must use explicit lifecycle transitions instead of ad hoc status patches."),
+		description: "Create a workflow assignment attached to a Dineway scope. Assignments are durable human-agent handoffs and must use explicit lifecycle transitions instead of ad hoc status patches.",
 		inputSchema: z.object({
 			scope: z.string().describe("Assignment scope string."),
 			assignment_type: z.string().describe("Workflow-specific assignment type label."),
@@ -941,7 +1319,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_get", {
 		title: "Get Assignment",
-		description: experimentalWorkflowDescription("Fetch one workflow assignment by id."),
+		description: "Fetch one workflow assignment by id.",
 		inputSchema: z.object({ id: z.string().describe("Assignment id.") }),
 		annotations: { readOnlyHint: true }
 	}, async (args, extra) => {
@@ -956,7 +1334,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_list", {
 		title: "List Assignments",
-		description: experimentalWorkflowDescription("List workflow assignments visible to the current actor. Non-editor actors are automatically limited to assignments they assigned or were assigned."),
+		description: "List workflow assignments visible to the current actor. Non-editor actors are automatically limited to assignments they assigned or were assigned.",
 		inputSchema: z.object({
 			scope: z.string().optional().describe("Optional exact scope filter."),
 			statuses: z.array(z.enum(ASSIGNMENT_STATUSES)).optional().describe("Optional assignment status filters."),
@@ -990,7 +1368,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_accept", {
 		title: "Accept Assignment",
-		description: experimentalWorkflowDescription("Accept a pending workflow assignment."),
+		description: "Accept a pending workflow assignment.",
 		inputSchema: z.object({ id: z.string().describe("Assignment id.") })
 	}, async (args, extra) => {
 		requireWorkflowWrite(extra);
@@ -1022,7 +1400,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_start", {
 		title: "Start Assignment",
-		description: experimentalWorkflowDescription("Move an assignment into in_progress. When the assignment is currently blocked, this acts as the validated resume transition."),
+		description: "Move an assignment into in_progress. When the assignment is currently blocked, this acts as the validated resume transition.",
 		inputSchema: z.object({ id: z.string().describe("Assignment id.") })
 	}, async (args, extra) => {
 		requireWorkflowWrite(extra);
@@ -1054,7 +1432,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_complete", {
 		title: "Complete Assignment",
-		description: experimentalWorkflowDescription("Mark a workflow assignment complete."),
+		description: "Mark a workflow assignment complete.",
 		inputSchema: z.object({
 			id: z.string().describe("Assignment id."),
 			completion_note: z.string().optional().describe("Optional completion note.")
@@ -1091,7 +1469,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_decline", {
 		title: "Decline Assignment",
-		description: experimentalWorkflowDescription("Decline a workflow assignment."),
+		description: "Decline a workflow assignment.",
 		inputSchema: z.object({
 			id: z.string().describe("Assignment id."),
 			reason: z.string().optional().describe("Optional decline reason.")
@@ -1128,7 +1506,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_block", {
 		title: "Block Assignment",
-		description: experimentalWorkflowDescription("Mark a workflow assignment blocked and record why."),
+		description: "Mark a workflow assignment blocked and record why.",
 		inputSchema: z.object({
 			id: z.string().describe("Assignment id."),
 			reason: z.string().optional().describe("Optional blocking reason.")
@@ -1165,7 +1543,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_cancel", {
 		title: "Cancel Assignment",
-		description: experimentalWorkflowDescription("Cancel a workflow assignment that should no longer continue."),
+		description: "Cancel a workflow assignment that should no longer continue.",
 		inputSchema: z.object({
 			id: z.string().describe("Assignment id."),
 			reason: z.string().optional().describe("Optional cancellation reason.")
@@ -1408,7 +1786,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("agent_handoff_capture", {
 		title: "Capture Agent Handoff",
-		description: experimentalWorkflowDescription("Capture the current agent objective, reasoning, findings, touched objects, and pending actions before pausing or handing work off."),
+		description: "Capture the current agent objective, reasoning, findings, touched objects, and pending actions before pausing or handing work off.",
 		inputSchema: z.object({
 			scope: z.string().describe("Scope string: site, collection:{slug}, content:{collection}:{id}, or plugin:{id}."),
 			objective: z.string().min(1).describe("Current objective or outcome the agent was pursuing."),
@@ -1513,7 +1891,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("agent_handoff_resume", {
 		title: "Resume Agent Handoff",
-		description: experimentalWorkflowDescription("Resume from a stored handoff snapshot and return a deterministic diff of activity, context, and review changes since capture time."),
+		description: "Resume from a stored handoff snapshot and return a deterministic diff of activity, context, and review changes since capture time.",
 		inputSchema: z.object({
 			snapshot_id: z.string().describe("Handoff snapshot id returned by agent_handoff_capture."),
 			activity_limit: z.number().int().min(1).max(100).optional().describe("Maximum activity rows to include in the diff. Defaults to 25."),
@@ -1619,7 +1997,7 @@ function createMcpServer(options = {}) {
 			collection: z.string().describe("Collection slug (e.g. 'posts', 'pages')"),
 			data: z.record(z.string(), z.unknown()).describe("Field values as key-value pairs matching the collection schema"),
 			slug: z.string().optional().describe("URL slug (auto-generated from title if omitted)"),
-			status: z.enum(["draft", "published"]).optional().describe("Initial status (default 'draft'). Requires publish permission."),
+			status: z.literal("draft").optional().describe("Initial status. Content creation is draft-only."),
 			locale: z.string().optional().describe("Locale for this content (e.g. 'fr'). Defaults to default locale."),
 			translationOf: z.string().optional().describe("ID of the content item this is a translation of. Links items in the same translation group."),
 			bylines: z.array(contentBylineInputSchema).optional().describe("Bylines to credit. Each entry references an existing byline by id, with an optional roleLabel. The first entry becomes the primary byline.")
@@ -1637,35 +2015,6 @@ function createMcpServer(options = {}) {
 			requireOwnership(extra, extractContentAuthorId(source.data), "content:edit_own", "content:edit_any");
 		}
 		const data = await convertWriteData(dineway, args.collection, args.data);
-		if (args.status === "published") {
-			if (!hasPermission({
-				id: userId,
-				role: getExtra(extra).userRole
-			}, "content:publish_own")) throw new McpError(ErrorCode.InvalidRequest, "Insufficient permissions: publishing requires content:publish_own");
-			if (contentPublishReviewRequired(extra)) throw new McpError(ErrorCode.InvalidRequest, "Token-authenticated content creation with immediate publish is review-gated. Create a draft first, submit review_request_submit, resolve it as approved, then call content_publish with review_request_id.");
-			const result = await dineway.handleContentCreate(args.collection, {
-				data,
-				slug: args.slug,
-				authorId: userId,
-				locale: args.locale,
-				translationOf: args.translationOf,
-				bylines: args.bylines
-			});
-			if (!result.success) return unwrap(result);
-			const itemId = extractContentId(result.data);
-			if (itemId) {
-				await logMcpContentActivity(dineway, locals, args.collection, itemId, "created", "content_create", {
-					changedFields: activityChangedKeys(args.data),
-					slugProvided: args.slug !== void 0,
-					locale: args.locale ?? null,
-					translationOf: args.translationOf ?? null
-				});
-				const publishResult = await dineway.handleContentPublish(args.collection, itemId);
-				if (publishResult.success) await logMcpContentActivity(dineway, locals, args.collection, itemId, "published", "content_create");
-				return unwrap(publishResult);
-			}
-			return unwrap(result);
-		}
 		const result = await dineway.handleContentCreate(args.collection, {
 			data,
 			slug: args.slug,
@@ -1694,15 +2043,14 @@ function createMcpServer(options = {}) {
 			locale: z.string().optional().describe("Locale to scope slug lookup. Only affects slug resolution; IDs are globally unique."),
 			data: z.record(z.string(), z.unknown()).optional().describe("Field values to update (only include changed fields)"),
 			slug: z.string().optional().describe("New URL slug"),
-			status: z.enum(["draft", "published"]).optional().describe("New status. Setting to 'published' requires publish permission. Setting to 'draft' unpublishes the item and also requires publish permission."),
+			status: z.literal("draft").optional().describe("Set to 'draft' to unpublish the item. Publishing uses content_publish."),
 			seo: contentSeoInput.optional().describe("Per-content SEO metadata. Only valid for collections with SEO enabled."),
 			bylines: z.array(contentBylineInputSchema).optional().describe("Replace the byline list for this item. The first entry becomes the primary byline."),
 			publishedAt: z.iso.datetime({
 				offset: true,
 				message: "must be an ISO 8601 datetime"
 			}).nullish().describe("Override the publication timestamp. Requires content:publish_any permission. Pass null to clear."),
-			_rev: z.string().optional().describe("Revision token from content_get for conflict detection"),
-			review_request_id: z.string().optional().describe("Approved review request id required for token-authenticated content.publish actions.")
+			_rev: z.string().optional().describe("Revision token from content_get for conflict detection")
 		})
 	}, async (args, extra) => {
 		requireScope(extra, "content:write");
@@ -1723,34 +2071,6 @@ function createMcpServer(options = {}) {
 		}
 		const hasInlineUpdates = args.data || args.slug || args.seo !== void 0 || args.bylines !== void 0 || args.publishedAt !== void 0;
 		const data = args.data ? await convertWriteData(dineway, args.collection, args.data) : args.data;
-		if (args.status === "published") {
-			requireOwnership(extra, ownerId, "content:publish_own", "content:publish_any");
-			if (contentPublishReviewRequired(extra) && hasInlineUpdates) throw new McpError(ErrorCode.InvalidRequest, "Token-authenticated publish with inline content changes is review-gated. Save the draft first, submit review_request_submit, resolve it as approved, then publish with review_request_id.");
-			if (hasInlineUpdates) {
-				const updateResult = await dineway.handleContentUpdate(args.collection, resolvedId, {
-					data,
-					slug: args.slug,
-					authorId: userId,
-					locale: args.locale,
-					seo: args.seo,
-					bylines: args.bylines,
-					publishedAt: args.publishedAt,
-					_rev: args._rev
-				});
-				if (!updateResult.success) return unwrap(updateResult);
-				await logMcpContentActivity(dineway, locals, args.collection, resolvedId, "updated", "content_update", {
-					changedFields: activityChangedKeys(args.data),
-					slugChanged: args.slug !== void 0,
-					seoChanged: args.seo !== void 0,
-					bylinesChanged: args.bylines !== void 0,
-					publishedAtChanged: args.publishedAt !== void 0
-				});
-			}
-			await requireApprovedContentPublishReview(extra, args.collection, resolvedId, args.review_request_id);
-			const publishResult = await dineway.handleContentPublish(args.collection, resolvedId);
-			if (publishResult.success) await logMcpContentActivity(dineway, locals, args.collection, resolvedId, "published", "content_update", { reviewRequestId: args.review_request_id ?? null });
-			return unwrap(publishResult);
-		}
 		if (args.status === "draft") {
 			requireOwnership(extra, ownerId, "content:publish_own", "content:publish_any");
 			if (hasInlineUpdates) {
@@ -1859,6 +2179,43 @@ function createMcpServer(options = {}) {
 		if (result.success) await logMcpContentActivity(ec, locals, args.collection, resolvedId, "permanently_deleted", "content_permanent_delete");
 		return unwrap(result);
 	});
+	server.registerTool("content_release_request", {
+		title: "Request Content Release Authorization",
+		description: "Create or reuse an exact HITL request for publishing or scheduling an approved Draft. The server derives the action hash from current content, review, time, Site Settings, and policies.",
+		inputSchema: z.object({
+			collection: z.string().describe("Collection slug"),
+			id: z.string().describe("Content item ID or slug"),
+			operation: z.enum(["publish", "schedule"]).describe("Release operation"),
+			review_request_id: z.string().describe("Approved editorial Review Request bound to the exact Draft"),
+			publishedAt: z.iso.datetime({
+				offset: true,
+				message: "must be an ISO 8601 datetime"
+			}).optional().describe("Optional publication timestamp for a publish release"),
+			scheduledAt: z.iso.datetime({
+				offset: true,
+				message: "must be an ISO 8601 datetime"
+			}).optional().describe("Required exact publication time for a schedule release")
+		}).strict()
+	}, async (args, extra) => {
+		requireScope(extra, "content:write");
+		requireRole(extra, Role.AUTHOR);
+		const payload = getExtra(extra);
+		const existing = await payload.dineway.handleContentGet(args.collection, args.id);
+		if (!existing.success) return unwrap(existing);
+		requireOwnership(extra, extractContentAuthorId(existing.data), "content:publish_own", "content:publish_any");
+		try {
+			return jsonResult(await ensureContentReleaseRequest(payload, {
+				collection: args.collection,
+				id: extractContentId(existing.data) ?? args.id,
+				operation: args.operation,
+				editorialReviewRequestId: args.review_request_id,
+				publishedAt: args.publishedAt,
+				scheduledAt: args.scheduledAt
+			}));
+		} catch (error) {
+			return contentPublicationError(error);
+		}
+	});
 	server.registerTool("content_publish", {
 		title: "Publish Content",
 		description: "Publish a content item, making it live on the site. Creates a published revision from the current draft. Further edits create a new draft without affecting the live version until re-published. Pass `publishedAt` to backdate imported or historical content; this requires content:publish_any.",
@@ -1869,7 +2226,8 @@ function createMcpServer(options = {}) {
 				offset: true,
 				message: "must be an ISO 8601 datetime"
 			}).optional().describe("Override publication timestamp. Requires content:publish_any permission."),
-			review_request_id: z.string().optional().describe("Approved review request id required for token-authenticated publish actions.")
+			review_request_id: z.string().describe("Approved editorial Review Request bound to the exact Draft."),
+			release_authorization_id: z.string().optional().describe("Approved exact release HITL request required for token actors.")
 		})
 	}, async (args, extra) => {
 		requireScope(extra, "content:write");
@@ -1887,13 +2245,20 @@ function createMcpServer(options = {}) {
 				role: userRole
 			}, "content:publish_any")) return errorResult("[INSUFFICIENT_PERMISSIONS] Setting publishedAt requires content:publish_any permission");
 		}
-		await requireApprovedContentPublishReview(extra, args.collection, resolvedId, args.review_request_id);
-		const result = await ec.handleContentPublish(args.collection, resolvedId, { publishedAt: args.publishedAt });
-		if (result.success) await logMcpContentActivity(ec, locals, args.collection, resolvedId, "published", "content_publish", {
-			reviewRequestId: args.review_request_id ?? null,
-			publishedAt: args.publishedAt ?? null
-		});
-		return unwrap(result);
+		try {
+			return unwrap((await contentPublicationService(payload).publishAuthorizedContent({
+				actor: resolveActorIdentity(locals),
+				collection: args.collection,
+				id: resolvedId,
+				editorialReviewRequestId: args.review_request_id,
+				releaseHitlRequestId: args.release_authorization_id,
+				publishedAt: args.publishedAt,
+				sourceType: "mcp_tool",
+				sourceName: "content_publish"
+			})).result);
+		} catch (error) {
+			return contentPublicationError(error);
+		}
 	});
 	server.registerTool("content_unpublish", {
 		title: "Unpublish Content",
@@ -1922,7 +2287,9 @@ function createMcpServer(options = {}) {
 		inputSchema: z.object({
 			collection: z.string().describe("Collection slug"),
 			id: z.string().describe("Content item ID or slug"),
-			scheduledAt: z.string().describe("ISO 8601 datetime for publication (e.g. '2025-06-01T09:00:00Z')")
+			scheduledAt: z.string().describe("ISO 8601 datetime for publication (e.g. '2025-06-01T09:00:00Z')"),
+			review_request_id: z.string().describe("Approved editorial Review Request bound to the exact Draft."),
+			release_authorization_id: z.string().optional().describe("Approved exact release HITL request required for token actors.")
 		})
 	}, async (args, extra) => {
 		requireScope(extra, "content:write");
@@ -1934,9 +2301,20 @@ function createMcpServer(options = {}) {
 		if (!existing.success) return unwrap(existing);
 		requireOwnership(extra, extractContentAuthorId(existing.data), "content:publish_own", "content:publish_any");
 		const resolvedId = extractContentId(existing.data) ?? args.id;
-		const result = await ec.handleContentSchedule(args.collection, resolvedId, args.scheduledAt);
-		if (result.success) await logMcpContentActivity(ec, locals, args.collection, resolvedId, "scheduled", "content_schedule", { scheduledAt: args.scheduledAt });
-		return unwrap(result);
+		try {
+			return unwrap((await contentPublicationService(payload).scheduleAuthorizedContent({
+				actor: resolveActorIdentity(locals),
+				collection: args.collection,
+				id: resolvedId,
+				editorialReviewRequestId: args.review_request_id,
+				releaseHitlRequestId: args.release_authorization_id,
+				scheduledAt: args.scheduledAt,
+				sourceType: "mcp_tool",
+				sourceName: "content_schedule"
+			})).result);
+		} catch (error) {
+			return contentPublicationError(error);
+		}
 	});
 	server.registerTool("content_unschedule", {
 		title: "Cancel Scheduled Publication",
@@ -1955,9 +2333,17 @@ function createMcpServer(options = {}) {
 		if (!existing.success) return unwrap(existing);
 		requireOwnership(extra, extractContentAuthorId(existing.data), "content:publish_own", "content:publish_any");
 		const resolvedId = extractContentId(existing.data) ?? args.id;
-		const result = await ec.handleContentUnschedule(args.collection, resolvedId);
-		if (result.success) await logMcpContentActivity(ec, locals, args.collection, resolvedId, "unscheduled", "content_unschedule");
-		return unwrap(result);
+		try {
+			return unwrap((await contentPublicationService(payload).unscheduleAuthorizedContent({
+				actor: resolveActorIdentity(locals),
+				collection: args.collection,
+				id: resolvedId,
+				sourceType: "mcp_tool",
+				sourceName: "content_unschedule"
+			})).result);
+		} catch (error) {
+			return contentPublicationError(error);
+		}
 	});
 	server.registerTool("content_compare", {
 		title: "Compare Live vs Draft",
@@ -2065,7 +2451,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
 			return jsonResult({ items: await new SchemaRegistry(ec.db).listCollections() });
 		} catch (error) {
 			return errorResult(error);
@@ -2081,7 +2467,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
 			const collection = await new SchemaRegistry(ec.db).getCollectionWithFields(args.slug);
 			if (!collection) return errorResult(`Collection '${args.slug}' not found`);
 			return jsonResult(collection);
@@ -2111,7 +2497,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
 			const collection = await new SchemaRegistry(ec.db).createCollection({
 				slug: args.slug,
 				label: args.label,
@@ -2175,7 +2561,7 @@ function createMcpServer(options = {}) {
 					request
 				});
 			}
-			const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
 			await new SchemaRegistry(ec.db).deleteCollection(args.slug, { force: args.force });
 			ec.invalidateManifest();
 			await logSchemaActivity(ec.db, locals, {
@@ -2239,7 +2625,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
 			const field = await new SchemaRegistry(ec.db).createField(args.collection, {
 				slug: args.slug,
 				label: args.label,
@@ -2308,7 +2694,7 @@ function createMcpServer(options = {}) {
 					request
 				});
 			}
-			const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
 			await new SchemaRegistry(ec.db).deleteField(args.collection, args.fieldSlug);
 			ec.invalidateManifest();
 			await logSchemaActivity(ec.db, locals, {
@@ -2441,7 +2827,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { searchWithDb } = await import("../../../search-DSaLgEFI.mjs").then((n) => n.t);
+			const { searchWithDb } = await import("../../../search-DUKgZUlm.mjs").then((n) => n.t);
 			return jsonResult(await searchWithDb(ec.db, args.query, {
 				collections: args.collections,
 				locale: args.locale,
@@ -2467,7 +2853,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-e51-fWRs.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-7xR185Ly.mjs").then((n) => n.n);
 			return jsonResult(await new BylineRepository(ec.db).findMany({
 				search: args.search,
 				isGuest: args.isGuest,
@@ -2489,7 +2875,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-e51-fWRs.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-7xR185Ly.mjs").then((n) => n.n);
 			const byline = await new BylineRepository(ec.db).findById(args.id);
 			if (!byline) return errorResult(`Byline '${args.id}' not found`);
 			return jsonResult(byline);
@@ -2507,7 +2893,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleBylineCreate } = await import("../../../bylines-CMQNCNFh.mjs").then((n) => n.t);
+			const { handleBylineCreate } = await import("../../../bylines-C-EL6dh3.mjs").then((n) => n.t);
 			const result = await handleBylineCreate(ec.db, args);
 			if (result.success) await invalidateBylines();
 			return unwrap(result);
@@ -2527,7 +2913,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleBylineUpdate } = await import("../../../bylines-CMQNCNFh.mjs").then((n) => n.t);
+			const { handleBylineUpdate } = await import("../../../bylines-C-EL6dh3.mjs").then((n) => n.t);
 			const { id, ...input } = args;
 			const result = await handleBylineUpdate(ec.db, id, input);
 			if (result.success) await invalidateBylines();
@@ -2546,7 +2932,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-e51-fWRs.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-7xR185Ly.mjs").then((n) => n.n);
 			if (!await new BylineRepository(ec.db).delete(args.id)) return errorResult(`Byline '${args.id}' not found`);
 			await invalidateBylines();
 			return jsonResult({ deleted: args.id });
@@ -2563,7 +2949,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleBylineTranslations } = await import("../../../bylines-CMQNCNFh.mjs").then((n) => n.t);
+			const { handleBylineTranslations } = await import("../../../bylines-C-EL6dh3.mjs").then((n) => n.t);
 			return unwrap(await handleBylineTranslations(ec.db, args.id));
 		} catch (error) {
 			return errorResult(error);
@@ -2578,7 +2964,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleTaxonomyList } = await import("../../../taxonomies-9s-v03H-.mjs").then((n) => n.l);
+			const { handleTaxonomyList } = await import("../../../taxonomies-BiM9NtgW.mjs").then((n) => n.l);
 			return unwrap(await handleTaxonomyList(ec.db, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2598,12 +2984,12 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleTaxonomyList } = await import("../../../taxonomies-9s-v03H-.mjs").then((n) => n.l);
+			const { handleTaxonomyList } = await import("../../../taxonomies-BiM9NtgW.mjs").then((n) => n.l);
 			const listResult = await handleTaxonomyList(ec.db, { locale: args.locale });
 			if (!listResult.success) return unwrap(listResult);
 			if (!listResult.data.taxonomies.find((t) => t.name === args.taxonomy)) return errorResult(`Taxonomy '${args.taxonomy}' not found`);
-			const { TaxonomyRepository } = await import("../../../taxonomy-Dvsw6BOs.mjs").then((n) => n.n);
-			const { decodeCursor, encodeCursor } = await import("../../../types-Dq1qT19x.mjs").then((n) => n.a);
+			const { TaxonomyRepository } = await import("../../../taxonomy-0k_vRVsD.mjs").then((n) => n.n);
+			const { decodeCursor, encodeCursor } = await import("../../../types-ChxYDRvx.mjs").then((n) => n.a);
 			const repo = new TaxonomyRepository(ec.db);
 			const limit = Math.min(args.limit ?? 50, 100);
 			const terms = await repo.findByName(args.taxonomy, { locale: args.locale });
@@ -2652,7 +3038,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleTermCreate } = await import("../../../taxonomies-9s-v03H-.mjs").then((n) => n.l);
+			const { handleTermCreate } = await import("../../../taxonomies-BiM9NtgW.mjs").then((n) => n.l);
 			return unwrap(await handleTermCreate(ec.db, args.taxonomy, {
 				slug: args.slug,
 				label: args.label,
@@ -2682,7 +3068,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleTermUpdate } = await import("../../../taxonomies-9s-v03H-.mjs").then((n) => n.l);
+			const { handleTermUpdate } = await import("../../../taxonomies-BiM9NtgW.mjs").then((n) => n.l);
 			return unwrap(await handleTermUpdate(ec.db, args.taxonomy, args.termSlug, {
 				slug: args.slug,
 				label: args.label,
@@ -2707,7 +3093,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleTermDelete } = await import("../../../taxonomies-9s-v03H-.mjs").then((n) => n.l);
+			const { handleTermDelete } = await import("../../../taxonomies-BiM9NtgW.mjs").then((n) => n.l);
 			return unwrap(await handleTermDelete(ec.db, args.taxonomy, args.termSlug, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2722,7 +3108,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleTermTranslations } = await import("../../../taxonomies-9s-v03H-.mjs").then((n) => n.l);
+			const { handleTermTranslations } = await import("../../../taxonomies-BiM9NtgW.mjs").then((n) => n.l);
 			return unwrap(await handleTermTranslations(ec.db, args.id));
 		} catch (error) {
 			return errorResult(error);
@@ -2737,7 +3123,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuList } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuList } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
 			return unwrap(await handleMenuList(ec.db, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2755,7 +3141,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuGet } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuGet } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
 			return unwrap(await handleMenuGet(ec.db, args.name, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2770,7 +3156,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuTranslations } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuTranslations } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
 			return unwrap(await handleMenuTranslations(ec.db, args.id));
 		} catch (error) {
 			return errorResult(error);
@@ -2790,7 +3176,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuCreate } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuCreate } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
 			return unwrap(await handleMenuCreate(ec.db, {
 				name: args.name,
 				label: args.label,
@@ -2814,7 +3200,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuUpdate } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuUpdate } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
 			return unwrap(await handleMenuUpdate(ec.db, args.name, {
 				label: args.label,
 				locale: args.locale
@@ -2836,7 +3222,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuDelete } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuDelete } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
 			return unwrap(await handleMenuDelete(ec.db, args.name, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2871,7 +3257,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuSetItems } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuSetItems } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
 			return unwrap(await handleMenuSetItems(ec.db, args.name, args.items, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2918,7 +3304,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getDineway(extra);
 		try {
-			const { handleSettingsGet } = await import("../../../settings-i4VPP8bT.mjs").then((n) => n.r);
+			const { handleSettingsGet } = await import("../../../settings-EzADu-dd.mjs").then((n) => n.r);
 			return unwrap(await handleSettingsGet(ec.db, ec.storage));
 		} catch (error) {
 			return errorResult(error);
@@ -2955,7 +3341,7 @@ function createMcpServer(options = {}) {
 					request
 				});
 			}
-			const { handleSettingsUpdate } = await import("../../../settings-i4VPP8bT.mjs").then((n) => n.r);
+			const { handleSettingsUpdate } = await import("../../../settings-EzADu-dd.mjs").then((n) => n.r);
 			const result = await handleSettingsUpdate(ec.db, ec.storage, settingsInput);
 			if (!result.success) return unwrap(result);
 			await logSiteActivitySafely(ec.db, locals, {
@@ -3028,6 +3414,7 @@ const POST = async ({ request, locals }) => {
 	if (!dineway) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
 	if (!user) return apiError("UNAUTHORIZED", "Authentication required", 401);
 	const server = createMcpServer({
+		seoProviderService: new SeoProviderEvidenceService(new ForgewaySeoGatewayClient()),
 		pluginMcpRegistry: dineway.getPluginMcpRegistry(),
 		executePluginMcpCommand: createReviewedPluginMcpCommandExecutor()
 	});