dineway 0.2.0 → 0.2.1

package/dist/media/local-runtime.d.mts

@@ -1,14 +1,13 @@
-import "../runtime-BOeiQsCv.mjs";
-import { t as Database } from "../types-DU0bU2Wu.mjs";
-import "../types-C8XW6L19.mjs";
-import { d as Storage } from "../types-POH8PQZh.mjs";
-import "../types-Rc3gQqqw.mjs";
-import { h as MediaProviderItem, o as CreateMediaProviderFn } from "../placeholder-uvNRZBX9.mjs";
-import "../runner-1tC2tIRV.mjs";
-import "../index-D4y6NGiy.mjs";
-import "../byline-fields-CUvbslGc.mjs";
-import "../types-CDpH6MA4.mjs";
-import "../validate-CZvb-BKB.mjs";
+import "../types-DwoUifGE.mjs";
+import { t as Database } from "../types-DuQn1G7-.mjs";
+import { h as MediaProviderItem, o as CreateMediaProviderFn } from "../placeholder-DkWkXfDI.mjs";
+import "../runner-D6hzs8L9.mjs";
+import "../index-DcnOCD1e.mjs";
+import "../types-g0zMtraY.mjs";
+import { d as Storage } from "../types-wFu80FrO.mjs";
+import "../validate-CbVFoJgc.mjs";
+import "../byline-fields-Ckeqd1OY.mjs";
+import "../types-Cw0PeCT_.mjs";
 import "../index.mjs";
 import { Kysely } from "kysely";
 

package/dist/media/local-runtime.mjs

@@ -1,6 +1,6 @@
 import "../base64-F8-DUraK.mjs";
-import "../types-Dq1qT19x.mjs";
-import { t as MediaRepository } from "../media-DMj0grzC.mjs";
+import "../types-ChxYDRvx.mjs";
+import { t as MediaRepository } from "../media-CVMOoywq.mjs";
 
 //#region src/media/local-runtime.ts
 /**

package/dist/{media-DMj0grzC.mjs → media-CVMOoywq.mjs}

@@ -1,4 +1,4 @@
-import { i as encodeCursor, r as decodeCursor } from "./types-Dq1qT19x.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-ChxYDRvx.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 

package/dist/{media-allowlist-BlVCSzHx.mjs → media-allowlist-zDNJmXCo.mjs}

@@ -1,4 +1,4 @@
-import { r as parseAllowedMimeTypes } from "./mime-CA7Lgovc.mjs";
+import { r as parseAllowedMimeTypes } from "./mime-C0vOHFm7.mjs";
 
 //#region src/api/handlers/media-allowlist.ts
 /**

package/dist/{menus-xvsnVZXw.mjs → menus-CCG2z5um.mjs}

@@ -1,11 +1,11 @@
 import { t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
-import { r as getDb } from "./loader-CjWqjweO.mjs";
+import { r as getDb } from "./loader-aWkkc1_o.mjs";
 import { n as cachedQuery, t as CacheNamespace } from "./object-cache-D51qOseS.mjs";
-import { t as CommentRepository } from "./comment-DlA4iChg.mjs";
-import { r as requestCached } from "./request-cache-D9GQBxMP.mjs";
-import { i as resolveLocaleChain, r as resolveLocale } from "./resolve-Cb6Dbz-C.mjs";
-import { n as sanitizeHref } from "./url-CpyFDFpO.mjs";
-import { t as CommentReactionRepository } from "./comment-reaction-DfFao1ST.mjs";
+import { t as CommentRepository } from "./comment-DFALgsJD.mjs";
+import { r as requestCached } from "./request-cache-CBFjCwSt.mjs";
+import { i as resolveLocaleChain, r as resolveLocale } from "./resolve-DE71WcL9.mjs";
+import { n as sanitizeHref } from "./url-EMAguGVk.mjs";
+import { t as CommentReactionRepository } from "./comment-reaction-C37bf99u.mjs";
 import { sql } from "kysely";
 
 //#region src/comments/ranking.ts

package/dist/{menus-TaW1gKnk.mjs → menus-CmyIkRG5.mjs}

@@ -1,7 +1,7 @@
-import { a as __exportAll } from "./runner-DB7CRfOF.mjs";
+import { a as __exportAll } from "./runner-BgmttQmD.mjs";
 import { n as getI18nConfig } from "./config-CVssduLe.mjs";
 import { c as invalidateMenuObjectCache } from "./object-cache-D51qOseS.mjs";
-import { t as withTransaction } from "./transaction-C2EOMTJA.mjs";
+import { t as withTransaction } from "./transaction-0LEAAy8R.mjs";
 import { ulid } from "ulidx";
 
 //#region src/database/repositories/menu.ts

package/dist/{oauth-authorization-DiaGvRVz.mjs → oauth-authorization-B9H7X85L.mjs}

@@ -1,8 +1,8 @@
-import { t as withTransaction } from "./transaction-C2EOMTJA.mjs";
-import { a as hashApiToken, n as TOKEN_PREFIXES, r as generatePrefixedToken, t as ALL_VALID_SCOPES } from "./api-tokens-2r7OWi_I.mjs";
-import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-BMsUnIAw.mjs";
-import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "./oauth-clients-Dl9E8dEM.mjs";
-import { t as lookupUserRoleAndStatus } from "./oauth-user-lookup-Ygw4bNyt.mjs";
+import { t as withTransaction } from "./transaction-0LEAAy8R.mjs";
+import { a as hashApiToken, n as TOKEN_PREFIXES, r as generatePrefixedToken, t as ALL_VALID_SCOPES } from "./api-tokens-Ypaly90d.mjs";
+import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-GVhUgzEs.mjs";
+import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "./oauth-clients-Dwl32-Uj.mjs";
+import { t as lookupUserRoleAndStatus } from "./oauth-user-lookup-CMehAaKs.mjs";
 import { clampScopes, computeS256Challenge, secureCompare } from "@dineway-ai/auth";
 import { generateCodeVerifier } from "arctic";
 

package/dist/{oauth-clients-Dl9E8dEM.mjs → oauth-clients-Dwl32-Uj.mjs}

@@ -1,5 +1,5 @@
-import { s as validateScopes } from "./api-tokens-2r7OWi_I.mjs";
-import { o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-BMsUnIAw.mjs";
+import { s as validateScopes } from "./api-tokens-Ypaly90d.mjs";
+import { o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-GVhUgzEs.mjs";
 
 //#region src/api/oauth/redirect-uri.ts
 /**

package/dist/object-cache/memory.d.mts

@@ -1,4 +1,4 @@
-import { t as CreateObjectCacheBackendFn } from "../types-DF7ZuGGk.mjs";
+import { t as CreateObjectCacheBackendFn } from "../types-BLQCz46p.mjs";
 
 //#region src/object-cache/memory.d.ts
 /**

package/dist/output-DhBe5_Pi.mjs

@@ -0,0 +1,68 @@
+import { consola as consola$1 } from "consola";
+
+//#region src/cli/output.ts
+/**
+* Redirect consola output to stderr so it doesn't pollute JSON on stdout.
+*
+* Call this early in any command that uses `output()` with `--json`.
+* Safe to call multiple times — only applies the redirect once.
+*/
+function configureOutputMode(args) {
+	if (args.json || !process.stdout.isTTY) {
+		consola$1.options.stdout = process.stderr;
+		consola$1.options.stderr = process.stderr;
+	}
+}
+/**
+* Output data as JSON or pretty-printed.
+*
+* If stdout is not a TTY or --json is set, outputs JSON.
+* Otherwise, outputs a formatted representation.
+*/
+function output(data, args) {
+	if (args.json || !process.stdout.isTTY) process.stdout.write(JSON.stringify(data, null, 2) + "\n");
+	else prettyPrint(data);
+}
+function prettyPrint(data, indent = 0) {
+	if (data === null || data === void 0) {
+		consola$1.log("(empty)");
+		return;
+	}
+	if (Array.isArray(data)) {
+		if (data.length === 0) {
+			consola$1.log("(no items)");
+			return;
+		}
+		for (const item of data) {
+			prettyPrint(item, indent);
+			if (indent === 0) consola$1.log("---");
+		}
+		return;
+	}
+	if (typeof data === "object") {
+		const obj = Object(data);
+		if ("items" in obj && Array.isArray(obj.items)) {
+			prettyPrint(obj.items, indent);
+			if (typeof obj.nextCursor === "string") consola$1.log(`\nNext cursor: ${obj.nextCursor}`);
+			return;
+		}
+		const prefix = "  ".repeat(indent);
+		for (const [key, value] of Object.entries(obj)) {
+			if (value === null || value === void 0) continue;
+			if (typeof value === "object" && !Array.isArray(value)) {
+				consola$1.log(`${prefix}${key}:`);
+				prettyPrint(value, indent + 1);
+			} else if (Array.isArray(value)) consola$1.log(`${prefix}${key}: [${value.length} items]`);
+			else {
+				const str = typeof value === "string" ? value : JSON.stringify(value);
+				const display = str.length > 80 ? str.slice(0, 77) + "..." : str;
+				consola$1.log(`${prefix}${key}: ${display}`);
+			}
+		}
+		return;
+	}
+	consola$1.log(typeof data === "string" ? data : JSON.stringify(data));
+}
+
+//#endregion
+export { output as n, configureOutputMode as t };

package/dist/page/index.d.mts

@@ -1,6 +1,12 @@
-import "../types-DU0bU2Wu.mjs";
-import { A as PageMetadataContribution, D as PageFragmentContribution, vt as PublicPageContext } from "../types-C8XW6L19.mjs";
-import { a as generateSiteSeoContributions, c as ResolvedPageMetadata, d as renderPageMetadata, f as resolvePageMetadata, h as createPublicPageContext, i as generateBaseSeoContributions, l as createSha256CspHash, m as CreatePublicPageContextInput, n as buildWebSiteJsonLd, o as renderFragments, p as safeJsonLdSerialize, r as cleanJsonLd, s as resolveFragments, t as buildBlogPostingJsonLd, u as escapeHtmlAttr } from "../jsonld-Dq0gsnOH.mjs";
+import { D as PageMetadataContribution, gt as PublicPageContext, w as PageFragmentContribution } from "../types-DwoUifGE.mjs";
+import "../types-DuQn1G7-.mjs";
+import "../runner-D6hzs8L9.mjs";
+import "../index-DcnOCD1e.mjs";
+import "../types-g0zMtraY.mjs";
+import "../validate-CbVFoJgc.mjs";
+import "../byline-fields-Ckeqd1OY.mjs";
+import "../types-Cw0PeCT_.mjs";
+import { a as generateSiteSeoContributions, c as ResolvedPageMetadata, d as renderPageMetadata, f as resolvePageMetadata, h as createPublicPageContext, i as generateBaseSeoContributions, l as createSha256CspHash, m as CreatePublicPageContextInput, n as buildWebSiteJsonLd, o as renderFragments, p as safeJsonLdSerialize, r as cleanJsonLd, s as resolveFragments, t as buildBlogPostingJsonLd, u as escapeHtmlAttr } from "../jsonld-DzKbhRZ4.mjs";
 
 //#region src/page/index.d.ts
 /**

package/dist/page/index.mjs

@@ -1,4 +1,4 @@
-import { a as cleanJsonLd, c as createSha256CspHash, d as resolvePageMetadata, f as safeJsonLdSerialize, i as buildWebSiteJsonLd, l as escapeHtmlAttr, n as generateSiteSeoContributions, o as renderFragments, p as createPublicPageContext, r as buildBlogPostingJsonLd, s as resolveFragments, t as generateBaseSeoContributions, u as renderPageMetadata } from "../seo-contributions-C1EnikHB.mjs";
+import { a as cleanJsonLd, c as createSha256CspHash, d as resolvePageMetadata, f as safeJsonLdSerialize, i as buildWebSiteJsonLd, l as escapeHtmlAttr, n as generateSiteSeoContributions, o as renderFragments, p as createPublicPageContext, r as buildBlogPostingJsonLd, s as resolveFragments, t as generateBaseSeoContributions, u as renderPageMetadata } from "../seo-contributions-GnCuL1ML.mjs";
 
 //#region src/page/index.ts
 /**

package/dist/{parse-CbymENaR.mjs → parse-i15EFSAE.mjs}

@@ -1,4 +1,4 @@
-import { t as apiError } from "./error-CytFlgcd.mjs";
+import { t as apiError } from "./error-CSVaQNZy.mjs";
 import { z } from "zod";
 
 //#region src/api/parse.ts

package/dist/plugin-utils.d.mts

@@ -1,13 +1,12 @@
-import "./runtime-BOeiQsCv.mjs";
-import "./types-DU0bU2Wu.mjs";
-import "./types-C8XW6L19.mjs";
-import "./types-Rc3gQqqw.mjs";
-import "./runner-1tC2tIRV.mjs";
-import "./index-D4y6NGiy.mjs";
+import "./types-DwoUifGE.mjs";
+import "./types-DuQn1G7-.mjs";
+import "./runner-D6hzs8L9.mjs";
+import "./index-DcnOCD1e.mjs";
+import "./types-g0zMtraY.mjs";
+import "./validate-CbVFoJgc.mjs";
+import "./byline-fields-Ckeqd1OY.mjs";
+import "./types-Cw0PeCT_.mjs";
 import { DinewayHandlers } from "./astro/types.mjs";
-import "./byline-fields-CUvbslGc.mjs";
-import "./types-CDpH6MA4.mjs";
-import "./validate-CZvb-BKB.mjs";
 
 //#region src/plugin-utils.d.ts
 type PublicPluginApiRouteHandler = DinewayHandlers["handlePublicPluginApiRoute"];

package/dist/plugins/adapt-sandbox-entry.d.mts

@@ -1,12 +1,11 @@
-import { n as PluginDescriptor } from "../runtime-BOeiQsCv.mjs";
-import "../types-DU0bU2Wu.mjs";
-import { Dt as StandardPluginDefinition, xt as ResolvedPlugin } from "../types-C8XW6L19.mjs";
-import "../types-Rc3gQqqw.mjs";
-import "../runner-1tC2tIRV.mjs";
-import "../index-D4y6NGiy.mjs";
-import "../byline-fields-CUvbslGc.mjs";
-import "../types-CDpH6MA4.mjs";
-import "../validate-CZvb-BKB.mjs";
+import { io as PluginDescriptor, vt as ResolvedPlugin, wt as StandardPluginDefinition } from "../types-DwoUifGE.mjs";
+import "../types-DuQn1G7-.mjs";
+import "../runner-D6hzs8L9.mjs";
+import "../index-DcnOCD1e.mjs";
+import "../types-g0zMtraY.mjs";
+import "../validate-CbVFoJgc.mjs";
+import "../byline-fields-Ckeqd1OY.mjs";
+import "../types-Cw0PeCT_.mjs";
 
 //#region src/plugins/adapt-sandbox-entry.d.ts
 /**

package/dist/plugins/adapt-sandbox-entry.mjs

@@ -1,4 +1,4 @@
-import { n as PLUGIN_CAPABILITIES, t as HOOK_NAMES } from "../manifest-schema-BxVPYMJR.mjs";
+import { n as PLUGIN_CAPABILITIES, t as HOOK_NAMES } from "../manifest-schema-uA6pRFXi.mjs";
 
 //#region src/plugins/adapt-sandbox-entry.ts
 /**
@@ -90,6 +90,7 @@ function adaptSandboxEntry(definition, descriptor) {
 	if (capabilities.includes("content:write") && !capabilities.includes("content:read")) capabilities.push("content:read");
 	if (capabilities.includes("media:write") && !capabilities.includes("media:read")) capabilities.push("media:read");
 	if (capabilities.includes("network:request:unrestricted") && !capabilities.includes("network:request")) capabilities.push("network:request");
+	if (capabilities.includes("network:request:development-loopback") && !capabilities.includes("network:request:unrestricted")) throw new Error(`Plugin "${pluginId}" must also declare "network:request:unrestricted" when using "network:request:development-loopback".`);
 	const rawStorage = descriptor.storage ?? {};
 	const storage = {};
 	for (const [name, config] of Object.entries(rawStorage)) storage[name] = {
@@ -107,6 +108,7 @@ function adaptSandboxEntry(definition, descriptor) {
 		capabilities,
 		allowedHosts,
 		storage,
+		migrations: {},
 		hooks: resolvedHooks,
 		routes: resolvedRoutes,
 		mcp: {

package/dist/{plugins-BolVa-tl.mjs → plugins-CPA2PtfY.mjs}

@@ -1,12 +1,12 @@
 import { r as validatePluginIdentifier, t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
 import { i as encodeBase64url, n as decodeBase64url } from "./base64-F8-DUraK.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-CxBt-GxR.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-ChGNDY8r.mjs";
 import { t as OptionsRepository } from "./options-DQPTH5n0.mjs";
-import { n as createPluginContext, t as PluginContextFactory } from "./context-C5W3G18y.mjs";
-import { t as extractRequestMeta } from "./request-meta-CUypToDJ.mjs";
-import { r as setCronTasksEnabled } from "./cron-cKcNTix_.mjs";
-import { i as parseEncryptionKeys, t as DinewaySecretsError } from "./secrets-CDZo2k8L.mjs";
-import { sql } from "kysely";
+import { n as createPluginContext, t as PluginContextFactory } from "./context-fSCYLL3c.mjs";
+import { t as extractRequestMeta } from "./request-meta-CFe1tW2M.mjs";
+import { r as setCronTasksEnabled } from "./cron-B1SL_lsb.mjs";
+import { i as parseEncryptionKeys, t as DinewaySecretsError } from "./secrets-ZV5rd8yV.mjs";
+import { Migrator, sql } from "kysely";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { ulid } from "ulidx";
 import { z } from "astro/zod";
@@ -1249,14 +1249,17 @@ function defineNativePlugin(definition) {
 	const SIMPLE_ID = /^[a-z0-9-]+$/;
 	const SCOPED_ID = /^@[a-z0-9-]+\/[a-z0-9-]+$/;
 	const SEMVER_PATTERN = /^\d+\.\d+\.\d+/;
-	const { id, version, capabilities = [], allowedHosts = [], hooks = {}, routes = {}, admin = {} } = definition;
+	const MIGRATION_NAME_PATTERN = /^\d{3}_[a-z][a-z0-9_]*$/;
+	const { id, version, capabilities = [], allowedHosts = [], migrations = {}, hooks = {}, routes = {}, publicationReleasePolicies = [], admin = {} } = definition;
 	const mcp = resolveMcp(definition.mcp, id);
 	const storage = definition.storage ?? {};
+	const normalizedMigrations = Object.fromEntries(Object.entries(migrations).toSorted(([left], [right]) => left.localeCompare(right)));
 	if (!SIMPLE_ID.test(id) && !SCOPED_ID.test(id)) throw new Error(`Invalid plugin id "${id}". Must be lowercase alphanumeric with dashes (e.g., "my-plugin" or "@scope/my-plugin").`);
 	if (!SEMVER_PATTERN.test(version)) throw new Error(`Invalid plugin version "${version}". Must be semver format (e.g., "1.0.0").`);
 	const validCapabilities = new Set([
 		"network:request",
 		"network:request:unrestricted",
+		"network:request:development-loopback",
 		"content:read",
 		"content:write",
 		"media:read",
@@ -1268,30 +1271,47 @@ function defineNativePlugin(definition) {
 		"hooks.page-fragments:register"
 	]);
 	for (const cap of capabilities) if (!validCapabilities.has(cap)) throw new Error(`Invalid capability "${cap}" in plugin "${id}".`);
+	for (const [name, migration] of Object.entries(normalizedMigrations)) {
+		if (!MIGRATION_NAME_PATTERN.test(name)) throw new Error(`Invalid migration name "${name}" in plugin "${id}". Use NNN_descriptive_name.`);
+		if (typeof migration.up !== "function") throw new Error(`Plugin "${id}" migration "${name}" requires an up function.`);
+		if (migration.down !== void 0 && typeof migration.down !== "function") throw new Error(`Plugin "${id}" migration "${name}" has an invalid down function.`);
+	}
 	const normalizedCapabilities = [...capabilities];
 	if (capabilities.includes("content:write") && !capabilities.includes("content:read")) normalizedCapabilities.push("content:read");
 	if (capabilities.includes("media:write") && !capabilities.includes("media:read")) normalizedCapabilities.push("media:read");
 	if (capabilities.includes("network:request:unrestricted") && !capabilities.includes("network:request")) normalizedCapabilities.push("network:request");
+	if (capabilities.includes("network:request:development-loopback") && !capabilities.includes("network:request:unrestricted")) throw new Error(`Plugin "${id}" must also declare "network:request:unrestricted" when using "network:request:development-loopback".`);
 	for (const [routeName, route] of Object.entries(routes)) {
 		if (route.body !== void 0 && route.body !== "json" && route.body !== "raw") throw new Error(`Plugin "${id}" route "${routeName}" has an invalid body mode.`);
 		if (route.body === "raw" && route.input) throw new Error(`Plugin "${id}" raw-body route "${routeName}" cannot declare an input schema.`);
 		if (route.body !== "raw" && route.maxBodyBytes !== void 0) throw new Error(`Plugin "${id}" JSON route "${routeName}" cannot declare a raw body-size limit.`);
 		if (route.body === "raw" && route.maxBodyBytes !== void 0 && (!Number.isSafeInteger(route.maxBodyBytes) || route.maxBodyBytes < 1 || route.maxBodyBytes > MAX_PLUGIN_RAW_BODY_LIMIT_BYTES)) throw new Error(`Plugin "${id}" raw-body route "${routeName}" has an invalid body-size limit.`);
 		if (route.public === true && route.authorization) throw new Error(`Plugin "${id}" public route "${routeName}" cannot declare private authorization.`);
+		if (route.apiTokenPolicy && (route.public === true || !route.authorization)) throw new Error(`Plugin "${id}" route "${routeName}" API-token policy requires private authorization.`);
+		if (route.apiTokenPolicy?.effect === "write" && (route.apiTokenPolicy.idempotencyField.trim().length === 0 || !route.input)) throw new Error(`Plugin "${id}" route "${routeName}" API-token write policy requires a parsed input schema and idempotency field.`);
 		if (route.authorization && (route.authorization.anyOfTokenScopes.length === 0 || route.authorization.anyOfTokenScopes.some((scope) => scope.trim().length === 0))) throw new Error(`Plugin "${id}" route "${routeName}" requires at least one valid token scope.`);
 		const restaurantPermission = route.authorization?.restaurantPermission;
 		if (restaurantPermission !== void 0 && (restaurantPermission.trim().length === 0 || typeof route.resolveTarget !== "function" || typeof route.authorizeTarget !== "function")) throw new Error(`Plugin "${id}" route "${routeName}" requires a restaurant target resolver and authorizer.`);
 		if (!restaurantPermission && (route.resolveTarget || route.authorizeTarget)) throw new Error(`Plugin "${id}" route "${routeName}" cannot declare target authorization without a restaurant permission.`);
 	}
+	const resolvedHooks = resolveHooks(hooks, id);
+	const releasePolicyIds = /* @__PURE__ */ new Set();
+	for (const policy of publicationReleasePolicies) {
+		if (!policy.id.trim()) throw new Error(`Plugin "${id}" publication release policy requires an ID.`);
+		if (releasePolicyIds.has(policy.id)) throw new Error(`Plugin "${id}" has duplicate publication release policy "${policy.id}".`);
+		releasePolicyIds.add(policy.id);
+	}
 	return {
 		id,
 		version,
 		capabilities: normalizedCapabilities,
 		allowedHosts,
 		storage,
-		hooks: resolveHooks(hooks, id),
+		migrations: Object.freeze(normalizedMigrations),
+		hooks: resolvedHooks,
 		routes,
 		mcp,
+		publicationReleasePolicies: [...publicationReleasePolicies].toSorted((left, right) => left.id.localeCompare(right.id)),
 		admin
 	};
 }
@@ -1418,6 +1438,69 @@ function resolveHook(hook, pluginId) {
 	};
 }
 
+//#endregion
+//#region src/plugins/migrations.ts
+const LEADING_AT = /^@/;
+var StaticPluginMigrationProvider = class {
+	constructor(migrations) {
+		this.migrations = migrations;
+	}
+	async getMigrations() {
+		return this.migrations;
+	}
+};
+/**
+* Run migrations contributed by configured trusted native plugins.
+*
+* Each plugin receives isolated Kysely migration and lock tables. This keeps migration history valid
+* when another plugin is removed and lets different plugins safely reuse local migration names.
+*/
+async function runPluginMigrations(db, plugins) {
+	const applied = [];
+	for (const plugin of [...plugins].toSorted((left, right) => left.id.localeCompare(right.id))) {
+		if (Object.keys(plugin.migrations).length === 0) continue;
+		const tables = pluginMigrationTableNames(plugin.id);
+		const { error, results } = await new Migrator({
+			db,
+			provider: new StaticPluginMigrationProvider(plugin.migrations),
+			migrationTableName: tables.migrations,
+			migrationLockTableName: tables.lock
+		}).migrateToLatest();
+		const successful = results?.filter((result) => result.status === "Success").map((result) => result.migrationName) ?? [];
+		if (error) {
+			const failed = results?.find((result) => result.status === "Error")?.migrationName;
+			throw new Error(`Plugin migration failed for ${plugin.id}${failed ? ` (${failed})` : ""}: ${errorMessage(error)}`, { cause: error });
+		}
+		applied.push({
+			pluginId: plugin.id,
+			applied: successful
+		});
+	}
+	return applied;
+}
+function pluginMigrationTableNames(pluginId) {
+	const slug = pluginId.replace(LEADING_AT, "").replaceAll("/", "_").replaceAll("-", "_").slice(0, 20);
+	const suffix = fnv1a(pluginId);
+	return {
+		migrations: `_dineway_plugin_migration_${slug}_${suffix}`,
+		lock: `_dineway_plugin_migration_lock_${slug}_${suffix}`
+	};
+}
+function fnv1a(value) {
+	let hash = 2166136261;
+	for (let index = 0; index < value.length; index++) {
+		hash ^= value.charCodeAt(index);
+		hash = Math.imul(hash, 16777619);
+	}
+	return (hash >>> 0).toString(16).padStart(8, "0");
+}
+function errorMessage(error) {
+	if (!(error instanceof Error)) return JSON.stringify(error);
+	if (error.message) return error.message;
+	if (error.cause instanceof Error && error.cause.message) return error.cause.message;
+	return "unknown error";
+}
+
 //#endregion
 //#region src/plugins/hooks.ts
 /**
@@ -2696,7 +2779,8 @@ var PluginRouteHandler = class {
 			public: route.public === true,
 			body: route.body ?? "json",
 			...route.body === "raw" ? { maxBodyBytes: route.maxBodyBytes ?? DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES } : {},
-			authorization: route.authorization
+			authorization: route.authorization,
+			apiTokenPolicy: route.apiTokenPolicy
 		};
 	}
 };
@@ -3815,6 +3899,7 @@ function createResolvedPluginFromManifest(manifest) {
 		capabilities: normalizeCapabilities(manifest.capabilities),
 		allowedHosts: manifest.allowedHosts,
 		storage: manifest.storage,
+		migrations: {},
 		hooks: {},
 		routes: {},
 		mcp: {
@@ -4235,4 +4320,4 @@ function createNodeSandboxRunner(options) {
 }
 
 //#endregion
-export { prosemirrorToPortableText as C, RelationRepository as D, image as E, portableTextToProsemirror as S, reference as T, readBoundedPluginRouteBody as _, createNoopSandboxRunner as a, issueGuestAccessToken as b, PluginSecretStore as c, EmailPipeline as d, HookPipeline as f, DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES as g, definePlugin as h, SandboxNotAvailableError as i, PluginRouteError as l, resolveExclusiveHooks as m, createNodeSandboxRunner as n, PluginManager as o, createHookPipeline as p, NoopSandboxRunner as r, createPluginManager as s, NodeSandboxRunner as t, PluginRouteRegistry as u, GuestAccessTokenConfigurationError as v, portableText as w, verifyGuestAccessToken as x, hashGuestAccessToken as y };
+export { portableTextToProsemirror as C, image as D, reference as E, RelationRepository as O, verifyGuestAccessToken as S, portableText as T, DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES as _, createNoopSandboxRunner as a, hashGuestAccessToken as b, PluginSecretStore as c, EmailPipeline as d, HookPipeline as f, definePlugin as g, runPluginMigrations as h, SandboxNotAvailableError as i, PluginRouteError as l, resolveExclusiveHooks as m, createNodeSandboxRunner as n, PluginManager as o, createHookPipeline as p, NoopSandboxRunner as r, createPluginManager as s, NodeSandboxRunner as t, PluginRouteRegistry as u, readBoundedPluginRouteBody as v, prosemirrorToPortableText as w, issueGuestAccessToken as x, GuestAccessTokenConfigurationError as y };

package/dist/portable-text-E79LyjGo.d.mts

@@ -0,0 +1,45 @@
+//#region src/client/portable-text.d.ts
+/**
+ * Portable Text <-> Markdown conversion layer.
+ *
+ * Three tiers of block handling:
+ *   Tier 1: Standard PT blocks <-> standard Markdown (headings, paragraphs, lists, etc.)
+ *   Tier 2: Dineway custom blocks <-> Markdown directives (future)
+ *   Tier 3: Unknown blocks <-> opaque HTML comment fences (preserved, not editable)
+ */
+/** Minimal Portable Text block shape */
+interface PortableTextBlock {
+  _type: string;
+  _key?: string;
+  style?: string;
+  level?: number;
+  listItem?: string;
+  markDefs?: MarkDef[];
+  children?: PortableTextSpan[];
+  [key: string]: unknown;
+}
+interface PortableTextSpan {
+  _type: string;
+  _key?: string;
+  text?: string;
+  marks?: string[];
+  [key: string]: unknown;
+}
+interface MarkDef {
+  _key: string;
+  _type: string;
+  href?: string;
+  [key: string]: unknown;
+}
+/**
+ * Convert Portable Text blocks to Markdown.
+ * Unknown block types are serialized as opaque fences.
+ */
+declare function portableTextToMarkdown(blocks: PortableTextBlock[]): string;
+/**
+ * Convert Markdown to Portable Text blocks.
+ * Opaque fences (<!--ec:block ... -->) are deserialized and spliced back in.
+ */
+declare function markdownToPortableText(markdown: string): PortableTextBlock[];
+//#endregion
+export { markdownToPortableText as n, portableTextToMarkdown as r, PortableTextBlock as t };

package/dist/{preview-vSVg6fwG.mjs → preview-BjedZm8G.mjs}

@@ -1,7 +1,7 @@
 import { n as loadBetterSqlite3, t as createDatabase } from "./connection-CiJWiWya.mjs";
 import { runWithContext } from "./request-context.mjs";
-import { a as verifyPreviewSignature, t as buildPreviewSignatureHeader } from "./sidecar-client-C3mqXg4C.mjs";
-import { t as generatePreviewToken } from "./tokens-1RK1n6ED.mjs";
+import { a as verifyPreviewSignature, t as buildPreviewSignatureHeader } from "./sidecar-client-Ctzfyyp-.mjs";
+import { t as generatePreviewToken } from "./tokens-BDQU29Vd.mjs";
 import { createHash } from "node:crypto";
 import { sql } from "kysely";
 import { ulid } from "ulidx";

package/dist/project-env-DKibmuP8.mjs

@@ -0,0 +1,95 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { readFile, writeFile } from "node:fs/promises";
+
+//#region src/cli/project-env.ts
+const DEFAULT_DINEWAY_URL = "http://localhost:4321";
+const ENV_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const LINE_SPLIT_PATTERN = /\r?\n/;
+const DINEWAY_LOCAL_STATE_GITIGNORE_COMMENT = "# Dineway local state";
+const DINEWAY_LOCAL_STATE_GITIGNORE_ENTRIES = [
+	".dineway/deploy.json",
+	".dineway/forgeway.json",
+	".dineway/types.ts",
+	".dineway/schema.json",
+	".dineway/uploads/"
+];
+const NEWLINE_PATTERN = /\r?\n/g;
+function parseDotenvValue(value) {
+	const trimmed = value.trim();
+	if (trimmed.startsWith("\"") && trimmed.endsWith("\"") || trimmed.startsWith("'") && trimmed.endsWith("'")) return trimmed.slice(1, -1);
+	return trimmed;
+}
+function parseDotenv(text) {
+	const env = {};
+	for (const line of text.split(LINE_SPLIT_PATTERN)) {
+		const trimmed = line.trim();
+		if (!trimmed || trimmed.startsWith("#")) continue;
+		const normalized = trimmed.startsWith("export ") ? trimmed.slice(7).trim() : trimmed;
+		const equalsIndex = normalized.indexOf("=");
+		if (equalsIndex <= 0) continue;
+		const key = normalized.slice(0, equalsIndex).trim();
+		if (!ENV_KEY_PATTERN.test(key)) continue;
+		env[key] = parseDotenvValue(normalized.slice(equalsIndex + 1));
+	}
+	return env;
+}
+function readProjectEnv(cwd = process.cwd()) {
+	const envPath = join(cwd, ".env");
+	if (!existsSync(envPath)) return {};
+	return parseDotenv(readFileSync(envPath, "utf-8"));
+}
+function getProjectEnvValue(name, cwd = process.cwd()) {
+	return process.env[name] ?? readProjectEnv(cwd)[name];
+}
+function resolveDinewayBaseUrl(url, cwd = process.cwd()) {
+	if (url && url !== DEFAULT_DINEWAY_URL) return url;
+	const projectEnv = readProjectEnv(cwd);
+	return process.env["DINEWAY_URL"] ?? process.env["DINEWAY_SITE_URL"] ?? projectEnv["DINEWAY_SITE_URL"] ?? projectEnv["DINEWAY_URL"] ?? url ?? DEFAULT_DINEWAY_URL;
+}
+function resolveDinewayToken(token, cwd = process.cwd()) {
+	return token ?? getProjectEnvValue("DINEWAY_TOKEN", cwd);
+}
+function formatEnvValue(value) {
+	return value.replace(NEWLINE_PATTERN, "");
+}
+async function upsertProjectEnv(cwd, values) {
+	const envPath = join(cwd, ".env");
+	const existing = await readFile(envPath, "utf-8").catch(() => "");
+	const lines = existing ? existing.split(LINE_SPLIT_PATTERN) : [];
+	const seen = /* @__PURE__ */ new Set();
+	const nextLines = lines.map((line) => {
+		const trimmed = line.trim();
+		const normalized = trimmed.startsWith("export ") ? trimmed.slice(7).trim() : trimmed;
+		const equalsIndex = normalized.indexOf("=");
+		if (equalsIndex <= 0) return line;
+		const key = normalized.slice(0, equalsIndex).trim();
+		const value = values[key];
+		if (!(key in values) || value === void 0) return line;
+		seen.add(key);
+		return `${key}=${formatEnvValue(value)}`;
+	});
+	for (const [key, value] of Object.entries(values)) {
+		if (value === void 0 || seen.has(key)) continue;
+		nextLines.push(`${key}=${formatEnvValue(value)}`);
+	}
+	await writeFile(envPath, `${nextLines.filter((line, index) => line || index < nextLines.length - 1).join("\n")}\n`, "utf-8");
+}
+async function ensureProjectGitignoreEntry(cwd, entry) {
+	const gitignorePath = join(cwd, ".gitignore");
+	const existing = await readFile(gitignorePath, "utf-8").catch(() => "");
+	if (existing.split(LINE_SPLIT_PATTERN).map((line) => line.trim()).includes(entry)) return;
+	await writeFile(gitignorePath, `${existing}${existing && !existing.endsWith("\n") ? "\n" : ""}${entry}\n`, "utf-8");
+}
+async function ensureProjectGitignoreDinewayLocalState(cwd) {
+	const gitignorePath = join(cwd, ".gitignore");
+	const existing = await readFile(gitignorePath, "utf-8").catch(() => "");
+	const lines = new Set(existing.split(LINE_SPLIT_PATTERN).map((line) => line.trim()));
+	const missingEntries = DINEWAY_LOCAL_STATE_GITIGNORE_ENTRIES.filter((entry) => !lines.has(entry));
+	if (missingEntries.length === 0) return;
+	const block = [DINEWAY_LOCAL_STATE_GITIGNORE_COMMENT, ...missingEntries].join("\n");
+	await writeFile(gitignorePath, `${existing}${existing.trim() ? existing.endsWith("\n") ? "\n" : "\n\n" : ""}${block}\n`, "utf-8");
+}
+
+//#endregion
+export { resolveDinewayBaseUrl as a, getProjectEnvValue as i, ensureProjectGitignoreDinewayLocalState as n, resolveDinewayToken as o, ensureProjectGitignoreEntry as r, upsertProjectEnv as s, DEFAULT_DINEWAY_URL as t };

package/dist/{provider-loader-MD8zAbnH.d.mts → provider-loader-DC2JdWeO.d.mts}

@@ -1,4 +1,4 @@
-import { f as MediaProvider } from "./placeholder-uvNRZBX9.mjs";
+import { f as MediaProvider } from "./placeholder-DkWkXfDI.mjs";
 
 //#region src/media/provider-loader.d.ts
 /**

package/dist/{public-url-gsp3oUbu.d.mts → public-url-DQJCnYi9.d.mts}

@@ -1,4 +1,4 @@
-import { t as DinewayConfig } from "./runtime-BOeiQsCv.mjs";
+import { ro as DinewayConfig } from "./types-DwoUifGE.mjs";
 
 //#region src/api/public-url.d.ts
 /**