dineway 0.2.0 → 0.2.2

package/dist/astro/routes/api/mcp.mjs

@@ -1,44 +1,267 @@
 import "../../../dialect-helpers-fk43GbDb.mjs";
 import "../../../base64-F8-DUraK.mjs";
-import "../../../types-Dq1qT19x.mjs";
-import "../../../loader-CjWqjweO.mjs";
+import "../../../types-Bshd_6wQ.mjs";
+import "../../../loader-WHf22FwU.mjs";
 import "../../../object-cache-D51qOseS.mjs";
-import "../../../content-Bh4BDjv8.mjs";
-import "../../../media-DMj0grzC.mjs";
+import "../../../content-Cbl8HbIR.mjs";
+import "../../../media-B4m-cnmj.mjs";
 import "../../../options-DQPTH5n0.mjs";
-import "../../../site-activity-Dy3FROs0.mjs";
-import { t as ReviewRequestRepository } from "../../../review-requests-DUyEmtmG.mjs";
-import { a as ASSIGNMENT_STATUSES, i as ASSIGNMENT_PRIORITIES, l as HITL_REQUEST_PRIORITIES, r as ASSIGNMENT_ACTOR_TYPES, t as HitlRequestService, u as HITL_REQUEST_STATUSES } from "../../../hitl-Hw1RmWOq.mjs";
-import "../../../request-cache-D9GQBxMP.mjs";
-import { a as ContextRepository, i as parseSiteBriefingScope, r as formatSiteBriefingText, t as SiteBriefingAssembler } from "../../../briefing-CawZ59CY.mjs";
-import { t as SITE_CONTEXT_TYPES } from "../../../context-types-DqTo6C79.mjs";
-import "../../../content-refresh-CgutSUfO.mjs";
-import "../../../fts-manager-Crzypjqu.mjs";
-import "../../../registry-CtyVedcN.mjs";
-import "../../../settings-BbqgHWpU.mjs";
-import { n as VERSION } from "../../../version-BTvfRGc6.mjs";
-import "../../../query-jaAmw8E1.mjs";
-import "../../../zod-generator-B7TMjyFJ.mjs";
-import "../../../schema-DXdYj4R3.mjs";
-import { t as apiError } from "../../../error-CytFlgcd.mjs";
-import { Cn as contentBylineInputSchema, P as settingsUpdateBody, _n as bylineCreateBody, cn as contentSeoInput, xn as bylineUpdateBody } from "../../../redirects-CA-xylPG.mjs";
-import "../../../byline-fields-DOJO16Gm.mjs";
-import "../../../status-DANd8ERo.mjs";
+import "../../../site-activity-BVK40wCy.mjs";
+import { t as ReviewRequestRepository } from "../../../review-requests-CObSuTYU.mjs";
+import { a as HITL_REQUEST_STATUSES, i as HITL_REQUEST_PRIORITIES, o as HitlRequestRepository, r as ReleasePayloadBuilder, t as PublicationAuthorizationError } from "../../../publication-authorization-BVQ5rCAF.mjs";
+import { C as ASSIGNMENT_STATUSES, S as ASSIGNMENT_PRIORITIES, _ as toPublicContextDiff, a as EntityResolver, b as HitlRequestService, d as SettingsHitlPayloadBuilder, g as RiskPolicyEvaluator, h as SchemaHitlPayloadBuilder, i as ActorExpertiseService, n as AssignmentService, r as HandoffSnapshotStore, t as WorkflowHitlCoordinator, v as toPublicContextEntry, x as ASSIGNMENT_ACTOR_TYPES, y as toPublicContextEntryPage } from "../../../site-context-CzaEGizi.mjs";
+import "../../../request-cache-CBFjCwSt.mjs";
+import { a as ContextRepository, i as parseSiteBriefingScope, r as formatSiteBriefingText, t as SiteBriefingAssembler } from "../../../briefing-GFhLTLJo.mjs";
+import { t as SITE_CONTEXT_TYPES } from "../../../context-types-eBuMDAg-.mjs";
+import "../../../content-refresh-BmkilU5M.mjs";
+import "../../../fts-manager-Zo9uhGel.mjs";
+import "../../../registry-SEJqFliS.mjs";
+import { a as getSiteSettingsWithDb } from "../../../settings-SVDAB7_W.mjs";
+import { t as ReviewPayloadBuilder } from "../../../review-payload-BysRWpxS.mjs";
+import { n as VERSION } from "../../../version-DEAV9k58.mjs";
+import "../../../query-DNczixZr.mjs";
+import "../../../zod-generator-Cr3SiHsc.mjs";
+import "../../../schema-Dk_N31V4.mjs";
+import { t as DinewaySecretsError } from "../../../secrets-CpGpyGcO.mjs";
+import { t as IntegrationCredentialStore } from "../../../store-CCfMD6nw.mjs";
+import { t as apiError } from "../../../error-BW9f_ynq.mjs";
+import { Cn as contentBylineInputSchema, P as settingsUpdateBody, _n as bylineCreateBody, cn as contentSeoInput, xn as bylineUpdateBody } from "../../../redirects-E_B6hvuz.mjs";
+import "../../../byline-fields-yT4herdN.mjs";
+import "../../../status-BN40hMpr.mjs";
 import "../../../api/schemas/index.mjs";
-import { i as hasScope } from "../../../api-tokens-2r7OWi_I.mjs";
-import { r as registerPluginMcpRegistry, t as createReviewedPluginMcpCommandExecutor } from "../../../mcp-reviewed-executor-TwVbMzG6.mjs";
-import { t as resolveActorIdentity } from "../../../actor-CrObAPV0.mjs";
-import { d as logSchemaActivity, o as logContentActivity, p as logSiteActivitySafely, r as contentMcpToolSource, t as activityChangedKeys, x as schemaMcpToolSource } from "../../../activity-events-y6eT8UW6.mjs";
-import "../../../utils-CMDhr5Xd.mjs";
-import "../../../search-DSaLgEFI.mjs";
-import { n as convertDataForWrite, t as convertDataForRead } from "../../../portable-text-dA_UlJwW.mjs";
-import { _ as ReviewPayloadBuilder, a as EntityResolver, b as toPublicContextEntryPage, d as SettingsHitlPayloadBuilder, g as RiskPolicyEvaluator, h as SchemaHitlPayloadBuilder, i as ActorExpertiseService, n as AssignmentService, r as HandoffSnapshotStore, t as WorkflowHitlCoordinator, v as toPublicContextDiff, y as toPublicContextEntry } from "../../../site-context-DQiL8Fl5.mjs";
+import { i as hasScope } from "../../../api-tokens-D4tcY8R6.mjs";
+import { r as registerPluginMcpRegistry, t as createReviewedPluginMcpCommandExecutor } from "../../../mcp-reviewed-executor-DnlF7mIL.mjs";
+import { n as resolveActorIdentity } from "../../../actor-DA7yL9Yp.mjs";
+import "../../../activity-BDMlkpYY.mjs";
+import { d as logSchemaActivity, o as logContentActivity, p as logSiteActivitySafely, r as contentMcpToolSource, t as activityChangedKeys, x as schemaMcpToolSource } from "../../../activity-events-DEYmJhWd.mjs";
+import "../../../utils-B7gemXz5.mjs";
+import "../../../search-BXEQepxL.mjs";
+import { n as convertDataForWrite, t as convertDataForRead } from "../../../portable-text-BASHceim.mjs";
+import { f as readStoredForgewayAccount, n as DinewayToolsService, p as refreshForgewayAccountCredentials, s as createForgewayAccountClient, t as DinewayToolsError, u as normalizeForgewayApiUrl } from "../../../service-CY0aH6eI.mjs";
 import { z } from "zod";
 import { Role, canActOnOwn, hasPermission } from "@dineway-ai/auth";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ErrorCode, McpError } from "@modelcontextprotocol/sdk/types.js";
+import { ForgewayClient } from "@forgeway/sdk";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 
+//#region src/dineway-tools/runtime.ts
+async function createDinewayToolsRuntimeService(options = {}) {
+	const platformApiUrl = normalizeForgewayApiUrl(options.platformApiUrl ?? readEnv("DINEWAY_API_BASE_URL", "DINEWAY_FORGEWAY_API_URL", "FORGEWAY_API_URL"));
+	const accessToken = options.accessToken ?? readEnv("DINEWAY_FORGEWAY_ACCESS_TOKEN");
+	if (accessToken) return new DinewayToolsService(createForgewayAccountClient(platformApiUrl, accessToken).integration);
+	const apiKey = options.apiKey ?? readEnv("DINEWAY_API_KEY", "FORGEWAY_API_KEY");
+	if (apiKey) return new DinewayToolsService(new ForgewayClient({
+		baseUrl: platformApiUrl,
+		isServerMode: true,
+		headers: { "X-API-Key": apiKey },
+		auth: { detectOAuthCallback: false }
+	}).integration);
+	const stored = await readStoredForgewayAccount({ platformApiUrl });
+	if (!stored) throw new DinewayToolsError("Dineway Tools requires a Forgeway account or DINEWAY_API_KEY in this runtime.", "FORGEWAY_ACCOUNT_REQUIRED");
+	const refreshed = await refreshForgewayAccountCredentials(stored);
+	return new DinewayToolsService(createForgewayAccountClient(refreshed.platformApiUrl, refreshed.accessToken).integration);
+}
+function readEnv(...names) {
+	const meta = import.meta.env ?? {};
+	const proc = typeof process !== "undefined" && process.env ? process.env : {};
+	for (const name of names) {
+		const value = meta[name] ?? proc[name];
+		if (value) return value;
+	}
+}
+
+//#endregion
+//#region src/mcp/dineway-tools.ts
+const readAnnotations = {
+	readOnlyHint: true,
+	destructiveHint: false,
+	idempotentHint: true,
+	openWorldHint: true
+};
+const runAnnotations = {
+	readOnlyHint: false,
+	destructiveHint: true,
+	idempotentHint: false,
+	openWorldHint: true
+};
+const stopAnnotations = {
+	readOnlyHint: false,
+	destructiveHint: true,
+	idempotentHint: true,
+	openWorldHint: true
+};
+const billingModeSchema = z.enum(["site_byok", "hosted"]).default("site_byok").describe("Billing mode. Defaults to site_byok; hosted credits are used only when explicitly selected.");
+const jsonValueSchema = z.json();
+const jsonObjectSchema = z.record(z.string(), jsonValueSchema);
+const endpointInputSchema = z.object({
+	body: jsonValueSchema.optional(),
+	query_params: jsonObjectSchema.optional(),
+	path_params: jsonObjectSchema.optional(),
+	header_params: jsonObjectSchema.optional(),
+	body_type: z.string().trim().min(1).optional()
+}).strict();
+async function serviceOrThrow(options) {
+	const service = options.service ?? await options.resolveService?.();
+	if (!service) throw new DinewayToolsError("Dineway Tools is unavailable in this runtime.", "TOOLS_UNAVAILABLE");
+	return service;
+}
+function result(data) {
+	const structuredContent = isRecord(data) ? data : { result: data };
+	return {
+		content: [{
+			type: "text",
+			text: JSON.stringify(data, null, 2)
+		}],
+		structuredContent
+	};
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function errorResult$1(error) {
+	return {
+		content: [{
+			type: "text",
+			text: error instanceof DinewayToolsError || error instanceof DinewaySecretsError ? error.message : "Dineway Tools request failed. Check the endpoint input and try again."
+		}],
+		isError: true
+	};
+}
+async function credentialFor(provider, billingMode, extra, options) {
+	if (billingMode === "hosted") return void 0;
+	const credential = await options.resolveCredential(provider, options.getContext(extra));
+	if (!credential) throw new DinewayToolsError(`No site BYOK credential is configured for provider ${provider}. Configure it in Settings > Integrations or explicitly select hosted billing.`, "SITE_BYOK_CREDENTIAL_MISSING");
+	return credential;
+}
+function mapInput(input) {
+	if (!input) return {};
+	return {
+		body: input.body,
+		queryParams: input.query_params,
+		pathParams: input.path_params,
+		headerParams: input.header_params,
+		bodyType: input.body_type
+	};
+}
+function registerDinewayTools(server, options) {
+	server.registerTool("tools_discover", {
+		title: "Discover Dineway Tools",
+		description: "Search hundreds of Forgeway integration endpoints using natural language. Use inspect before run.",
+		inputSchema: z.object({
+			query: z.string().trim().min(1).max(500),
+			limit: z.number().int().min(1).max(100).default(10),
+			min_score: z.number().min(0).max(1).optional()
+		}),
+		annotations: readAnnotations
+	}, async (args, extra) => {
+		options.authorizeRead(extra);
+		try {
+			return result(await (await serviceOrThrow(options)).discover({
+				query: args.query,
+				limit: args.limit,
+				minScore: args.min_score
+			}));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("tools_inspect", {
+		title: "Inspect a Dineway Tool",
+		description: "Inspect one integration endpoint's input schema, output shape, risk policy, and credit price before running it.",
+		inputSchema: z.object({
+			provider: z.string().trim().min(1).max(100),
+			endpoint: z.string().trim().min(1).max(500)
+		}),
+		annotations: readAnnotations
+	}, async (args, extra) => {
+		options.authorizeRead(extra);
+		try {
+			return result(await (await serviceOrThrow(options)).inspect(args));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("tools_run", {
+		title: "Run a Dineway Tool",
+		description: "Start one inspected integration endpoint. Site BYOK is the safe default; hosted credits require explicit selection.",
+		inputSchema: z.object({
+			provider: z.string().trim().min(1).max(100),
+			endpoint: z.string().trim().min(1).max(500),
+			input: endpointInputSchema.optional(),
+			billing_mode: billingModeSchema,
+			force_refresh: z.boolean().default(false),
+			confirm_side_effect: z.boolean().default(false),
+			idempotency_key: z.string().trim().min(1).max(500).optional()
+		}),
+		annotations: runAnnotations
+	}, async (args, extra) => {
+		options.authorizeRun(extra);
+		try {
+			if (args.confirm_side_effect && !args.idempotency_key) throw new DinewayToolsError("An idempotency key is required when confirming an endpoint with side effects.", "IDEMPOTENCY_KEY_REQUIRED");
+			const credential = await credentialFor(args.provider, args.billing_mode, extra, options);
+			return result(await (await serviceOrThrow(options)).run({
+				provider: args.provider,
+				endpoint: args.endpoint,
+				input: mapInput(args.input),
+				credential,
+				forceRefresh: args.force_refresh,
+				confirmSideEffect: args.confirm_side_effect
+			}, { idempotencyKey: args.idempotency_key }));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("tools_get_run", {
+		title: "Get a Dineway Tools Run",
+		description: "Read the current state and result of one integration run.",
+		inputSchema: z.object({ run_id: z.string().uuid() }),
+		annotations: readAnnotations
+	}, async (args, extra) => {
+		options.authorizeRead(extra);
+		try {
+			return result(await (await serviceOrThrow(options)).getRun(args.run_id));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("tools_list_runs", {
+		title: "List Dineway Tools Runs",
+		description: "List recent integration runs with cursor pagination.",
+		inputSchema: z.object({
+			limit: z.number().int().min(1).max(100).default(20),
+			cursor: z.string().trim().min(1).optional()
+		}),
+		annotations: readAnnotations
+	}, async (args, extra) => {
+		options.authorizeRead(extra);
+		try {
+			return result(await (await serviceOrThrow(options)).listRuns(args));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+	server.registerTool("tools_stop_run", {
+		title: "Stop a Dineway Tools Run",
+		description: "Stop one cancellable integration run. Site BYOK is the safe default; hosted credits require explicit selection.",
+		inputSchema: z.object({
+			run_id: z.string().uuid(),
+			billing_mode: billingModeSchema
+		}),
+		annotations: stopAnnotations
+	}, async (args, extra) => {
+		options.authorizeRun(extra);
+		try {
+			const service = await serviceOrThrow(options);
+			const credential = await credentialFor((await service.getRun(args.run_id)).provider, args.billing_mode, extra, options);
+			return result(await service.stopRun(args.run_id, { credential }));
+		} catch (error) {
+			return errorResult$1(error);
+		}
+	});
+}
+
+//#endregion
 //#region src/mcp/server.ts
 const COLLECTION_SLUG_PATTERN = /^[a-z][a-z0-9_]*$/;
 const ENTITY_RESOLVE_TYPES = [
@@ -109,7 +332,7 @@ function getDineway(extra) {
 }
 async function getCollectionFields(dineway, collection) {
 	try {
-		const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+		const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 		return (await new SchemaRegistry(dineway.db).getCollectionWithFields(collection))?.fields ?? null;
 	} catch {
 		return null;
@@ -126,7 +349,7 @@ async function applyReadMarkdown(dineway, collection, items) {
 	for (const item of items) if (item.data && typeof item.data === "object") item.data = convertDataForRead(item.data, fields, false);
 }
 async function invalidateBylines() {
-	const { invalidateBylineCache } = await import("../../../bylines-y4LO-dTj.mjs").then((n) => n.t);
+	const { invalidateBylineCache } = await import("../../../bylines-kixFoaRV.mjs").then((n) => n.t);
 	invalidateBylineCache();
 }
 function canReadDrafts(extra) {
@@ -304,27 +527,83 @@ function allowedEntityResolveTypes(payload, requestedTypes) {
 	if (disallowed.length > 0) throw new McpError(ErrorCode.InvalidRequest, `Insufficient scope or role for entity types: ${disallowed.join(", ")}`);
 	return requestedTypes;
 }
-function contentPublishReviewRequired(extra) {
-	const payload = getExtra(extra);
-	const actor = resolveActorIdentity(actorLocals(payload));
-	return new RiskPolicyEvaluator({
-		db: payload.dineway.db,
-		handlers: payload.dineway
-	}).requiresContentPublishReview(actor);
+function contentPublicationService(payload) {
+	return payload.dineway.createPublicationAuthorizationService();
 }
-async function requireApprovedContentPublishReview(extra, collection, id, reviewRequestId) {
-	const payload = getExtra(extra);
+function contentPublicationError(error) {
+	return error instanceof PublicationAuthorizationError ? errorResult(`[${error.code}] ${error.message}`) : errorResult(error);
+}
+async function ensureContentReleaseRequest(payload, input) {
 	const actor = resolveActorIdentity(actorLocals(payload));
-	const decision = await new RiskPolicyEvaluator({
-		db: payload.dineway.db,
-		handlers: payload.dineway
-	}).evaluateContentPublishReview({
-		actor,
-		collection,
-		id,
-		reviewRequestId
+	const settings = await getSiteSettingsWithDb(payload.dineway.db);
+	const release = await new ReleasePayloadBuilder({
+		handlers: payload.dineway,
+		reviewRequests: new ReviewRequestRepository(payload.dineway.db)
+	}).buildContentReleasePayload({
+		collection: input.collection,
+		id: input.id,
+		operation: input.operation,
+		editorialReviewRequestId: input.editorialReviewRequestId,
+		publishedAt: input.publishedAt,
+		scheduledAt: input.scheduledAt,
+		siteTimezone: settings.timezone?.trim() || "UTC"
+	});
+	const repository = new HitlRequestRepository(payload.dineway.db);
+	const existing = (await repository.list({
+		scope: release.scope,
+		statuses: ["pending", "approved"],
+		actionType: release.actionType,
+		targetRefType: "content",
+		targetRefId: release.entryId,
+		requestedByActorType: actor.actorType,
+		requestedByActorId: actor.actorId,
+		limit: 100
+	})).items.find((request) => request.metadata.actionHash === release.actionHash);
+	if (existing) return {
+		created: false,
+		request: existing
+	};
+	const request = await repository.create({
+		scope: release.scope,
+		actionType: release.actionType,
+		title: `${input.operation === "publish" ? "Publish" : "Schedule"} ${release.collection}/${release.entryId}`,
+		summary: `Authorize exact ${input.operation} release for reviewed Draft`,
+		riskReason: "Agent-authenticated content release requires explicit approval.",
+		reviewPayload: release.releasePayload,
+		targetRefType: "content",
+		targetRefId: release.entryId,
+		requestedByActorType: actor.actorType,
+		requestedByActorId: actor.actorId,
+		requestedAuthMetadata: actor.authMetadata,
+		metadata: {
+			actionHash: release.actionHash,
+			editorialReviewRequestId: release.editorialReviewRequestId,
+			operation: release.operation,
+			scheduledAt: release.scheduledAt,
+			publishedAt: release.publishedAt
+		}
+	});
+	await logSiteActivitySafely(payload.dineway.db, actorLocals(payload), {
+		actionType: "hitl.submitted",
+		subjectType: "hitl_request",
+		subjectId: request.id,
+		scope: request.scope,
+		sourceType: "mcp_tool",
+		sourceName: "content_release_request",
+		resultStatus: "pending",
+		summary: `Submitted release request for ${release.actionType}`,
+		detail: {
+			collection: release.collection,
+			entryId: release.entryId,
+			operation: release.operation,
+			editorialReviewRequestId: release.editorialReviewRequestId,
+			actionHash: release.actionHash
+		}
 	});
-	if (!decision.allowed) throw new McpError(ErrorCode.InvalidRequest, decision.message);
+	return {
+		created: true,
+		request
+	};
 }
 async function ensureWorkflowHitlRequest(extra, action) {
 	const payload = getExtra(extra);
@@ -460,6 +739,20 @@ function createMcpServer(options = {}) {
 		name: "dineway",
 		version: VERSION
 	}, { capabilities: { logging: {} } });
+	registerDinewayTools(server, {
+		service: options.dinewayToolsService,
+		resolveService: options.resolveDinewayToolsService,
+		authorizeRead: (extra) => {
+			requireScope(extra, "tools:read");
+			requireRole(extra, Role.AUTHOR);
+		},
+		authorizeRun: (extra) => {
+			requireScope(extra, "tools:run");
+			requireRole(extra, Role.AUTHOR);
+		},
+		getContext: (extra) => getDineway(extra),
+		resolveCredential: async (provider, dineway) => await options.resolveDinewayToolsCredential?.(provider, dineway) ?? null
+	});
 	server.registerTool("site_briefing_get", {
 		title: "Get Site Briefing",
 		description: "Build a read-only Site Context Engine briefing for a site, collection, content item, plugin, taxonomy, or menu scope. The briefing includes inherited scopes, authorized schema, recent activity, active plugin capabilities, curated settings/SEO, and forward-compatible context/review/staleness sections.",
@@ -889,7 +1182,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_create", {
 		title: "Create Assignment",
-		description: experimentalWorkflowDescription("Create a workflow assignment attached to a Dineway scope. Assignments are durable human-agent handoffs and must use explicit lifecycle transitions instead of ad hoc status patches."),
+		description: "Create a workflow assignment attached to a Dineway scope. Assignments are durable human-agent handoffs and must use explicit lifecycle transitions instead of ad hoc status patches.",
 		inputSchema: z.object({
 			scope: z.string().describe("Assignment scope string."),
 			assignment_type: z.string().describe("Workflow-specific assignment type label."),
@@ -941,7 +1234,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_get", {
 		title: "Get Assignment",
-		description: experimentalWorkflowDescription("Fetch one workflow assignment by id."),
+		description: "Fetch one workflow assignment by id.",
 		inputSchema: z.object({ id: z.string().describe("Assignment id.") }),
 		annotations: { readOnlyHint: true }
 	}, async (args, extra) => {
@@ -956,7 +1249,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_list", {
 		title: "List Assignments",
-		description: experimentalWorkflowDescription("List workflow assignments visible to the current actor. Non-editor actors are automatically limited to assignments they assigned or were assigned."),
+		description: "List workflow assignments visible to the current actor. Non-editor actors are automatically limited to assignments they assigned or were assigned.",
 		inputSchema: z.object({
 			scope: z.string().optional().describe("Optional exact scope filter."),
 			statuses: z.array(z.enum(ASSIGNMENT_STATUSES)).optional().describe("Optional assignment status filters."),
@@ -990,7 +1283,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_accept", {
 		title: "Accept Assignment",
-		description: experimentalWorkflowDescription("Accept a pending workflow assignment."),
+		description: "Accept a pending workflow assignment.",
 		inputSchema: z.object({ id: z.string().describe("Assignment id.") })
 	}, async (args, extra) => {
 		requireWorkflowWrite(extra);
@@ -1022,7 +1315,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_start", {
 		title: "Start Assignment",
-		description: experimentalWorkflowDescription("Move an assignment into in_progress. When the assignment is currently blocked, this acts as the validated resume transition."),
+		description: "Move an assignment into in_progress. When the assignment is currently blocked, this acts as the validated resume transition.",
 		inputSchema: z.object({ id: z.string().describe("Assignment id.") })
 	}, async (args, extra) => {
 		requireWorkflowWrite(extra);
@@ -1054,7 +1347,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_complete", {
 		title: "Complete Assignment",
-		description: experimentalWorkflowDescription("Mark a workflow assignment complete."),
+		description: "Mark a workflow assignment complete.",
 		inputSchema: z.object({
 			id: z.string().describe("Assignment id."),
 			completion_note: z.string().optional().describe("Optional completion note.")
@@ -1091,7 +1384,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_decline", {
 		title: "Decline Assignment",
-		description: experimentalWorkflowDescription("Decline a workflow assignment."),
+		description: "Decline a workflow assignment.",
 		inputSchema: z.object({
 			id: z.string().describe("Assignment id."),
 			reason: z.string().optional().describe("Optional decline reason.")
@@ -1128,7 +1421,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_block", {
 		title: "Block Assignment",
-		description: experimentalWorkflowDescription("Mark a workflow assignment blocked and record why."),
+		description: "Mark a workflow assignment blocked and record why.",
 		inputSchema: z.object({
 			id: z.string().describe("Assignment id."),
 			reason: z.string().optional().describe("Optional blocking reason.")
@@ -1165,7 +1458,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("assignment_cancel", {
 		title: "Cancel Assignment",
-		description: experimentalWorkflowDescription("Cancel a workflow assignment that should no longer continue."),
+		description: "Cancel a workflow assignment that should no longer continue.",
 		inputSchema: z.object({
 			id: z.string().describe("Assignment id."),
 			reason: z.string().optional().describe("Optional cancellation reason.")
@@ -1408,7 +1701,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("agent_handoff_capture", {
 		title: "Capture Agent Handoff",
-		description: experimentalWorkflowDescription("Capture the current agent objective, reasoning, findings, touched objects, and pending actions before pausing or handing work off."),
+		description: "Capture the current agent objective, reasoning, findings, touched objects, and pending actions before pausing or handing work off.",
 		inputSchema: z.object({
 			scope: z.string().describe("Scope string: site, collection:{slug}, content:{collection}:{id}, or plugin:{id}."),
 			objective: z.string().min(1).describe("Current objective or outcome the agent was pursuing."),
@@ -1513,7 +1806,7 @@ function createMcpServer(options = {}) {
 	});
 	server.registerTool("agent_handoff_resume", {
 		title: "Resume Agent Handoff",
-		description: experimentalWorkflowDescription("Resume from a stored handoff snapshot and return a deterministic diff of activity, context, and review changes since capture time."),
+		description: "Resume from a stored handoff snapshot and return a deterministic diff of activity, context, and review changes since capture time.",
 		inputSchema: z.object({
 			snapshot_id: z.string().describe("Handoff snapshot id returned by agent_handoff_capture."),
 			activity_limit: z.number().int().min(1).max(100).optional().describe("Maximum activity rows to include in the diff. Defaults to 25."),
@@ -1619,7 +1912,7 @@ function createMcpServer(options = {}) {
 			collection: z.string().describe("Collection slug (e.g. 'posts', 'pages')"),
 			data: z.record(z.string(), z.unknown()).describe("Field values as key-value pairs matching the collection schema"),
 			slug: z.string().optional().describe("URL slug (auto-generated from title if omitted)"),
-			status: z.enum(["draft", "published"]).optional().describe("Initial status (default 'draft'). Requires publish permission."),
+			status: z.literal("draft").optional().describe("Initial status. Content creation is draft-only."),
 			locale: z.string().optional().describe("Locale for this content (e.g. 'fr'). Defaults to default locale."),
 			translationOf: z.string().optional().describe("ID of the content item this is a translation of. Links items in the same translation group."),
 			bylines: z.array(contentBylineInputSchema).optional().describe("Bylines to credit. Each entry references an existing byline by id, with an optional roleLabel. The first entry becomes the primary byline.")
@@ -1637,35 +1930,6 @@ function createMcpServer(options = {}) {
 			requireOwnership(extra, extractContentAuthorId(source.data), "content:edit_own", "content:edit_any");
 		}
 		const data = await convertWriteData(dineway, args.collection, args.data);
-		if (args.status === "published") {
-			if (!hasPermission({
-				id: userId,
-				role: getExtra(extra).userRole
-			}, "content:publish_own")) throw new McpError(ErrorCode.InvalidRequest, "Insufficient permissions: publishing requires content:publish_own");
-			if (contentPublishReviewRequired(extra)) throw new McpError(ErrorCode.InvalidRequest, "Token-authenticated content creation with immediate publish is review-gated. Create a draft first, submit review_request_submit, resolve it as approved, then call content_publish with review_request_id.");
-			const result = await dineway.handleContentCreate(args.collection, {
-				data,
-				slug: args.slug,
-				authorId: userId,
-				locale: args.locale,
-				translationOf: args.translationOf,
-				bylines: args.bylines
-			});
-			if (!result.success) return unwrap(result);
-			const itemId = extractContentId(result.data);
-			if (itemId) {
-				await logMcpContentActivity(dineway, locals, args.collection, itemId, "created", "content_create", {
-					changedFields: activityChangedKeys(args.data),
-					slugProvided: args.slug !== void 0,
-					locale: args.locale ?? null,
-					translationOf: args.translationOf ?? null
-				});
-				const publishResult = await dineway.handleContentPublish(args.collection, itemId);
-				if (publishResult.success) await logMcpContentActivity(dineway, locals, args.collection, itemId, "published", "content_create");
-				return unwrap(publishResult);
-			}
-			return unwrap(result);
-		}
 		const result = await dineway.handleContentCreate(args.collection, {
 			data,
 			slug: args.slug,
@@ -1694,15 +1958,14 @@ function createMcpServer(options = {}) {
 			locale: z.string().optional().describe("Locale to scope slug lookup. Only affects slug resolution; IDs are globally unique."),
 			data: z.record(z.string(), z.unknown()).optional().describe("Field values to update (only include changed fields)"),
 			slug: z.string().optional().describe("New URL slug"),
-			status: z.enum(["draft", "published"]).optional().describe("New status. Setting to 'published' requires publish permission. Setting to 'draft' unpublishes the item and also requires publish permission."),
+			status: z.literal("draft").optional().describe("Set to 'draft' to unpublish the item. Publishing uses content_publish."),
 			seo: contentSeoInput.optional().describe("Per-content SEO metadata. Only valid for collections with SEO enabled."),
 			bylines: z.array(contentBylineInputSchema).optional().describe("Replace the byline list for this item. The first entry becomes the primary byline."),
 			publishedAt: z.iso.datetime({
 				offset: true,
 				message: "must be an ISO 8601 datetime"
 			}).nullish().describe("Override the publication timestamp. Requires content:publish_any permission. Pass null to clear."),
-			_rev: z.string().optional().describe("Revision token from content_get for conflict detection"),
-			review_request_id: z.string().optional().describe("Approved review request id required for token-authenticated content.publish actions.")
+			_rev: z.string().optional().describe("Revision token from content_get for conflict detection")
 		})
 	}, async (args, extra) => {
 		requireScope(extra, "content:write");
@@ -1723,34 +1986,6 @@ function createMcpServer(options = {}) {
 		}
 		const hasInlineUpdates = args.data || args.slug || args.seo !== void 0 || args.bylines !== void 0 || args.publishedAt !== void 0;
 		const data = args.data ? await convertWriteData(dineway, args.collection, args.data) : args.data;
-		if (args.status === "published") {
-			requireOwnership(extra, ownerId, "content:publish_own", "content:publish_any");
-			if (contentPublishReviewRequired(extra) && hasInlineUpdates) throw new McpError(ErrorCode.InvalidRequest, "Token-authenticated publish with inline content changes is review-gated. Save the draft first, submit review_request_submit, resolve it as approved, then publish with review_request_id.");
-			if (hasInlineUpdates) {
-				const updateResult = await dineway.handleContentUpdate(args.collection, resolvedId, {
-					data,
-					slug: args.slug,
-					authorId: userId,
-					locale: args.locale,
-					seo: args.seo,
-					bylines: args.bylines,
-					publishedAt: args.publishedAt,
-					_rev: args._rev
-				});
-				if (!updateResult.success) return unwrap(updateResult);
-				await logMcpContentActivity(dineway, locals, args.collection, resolvedId, "updated", "content_update", {
-					changedFields: activityChangedKeys(args.data),
-					slugChanged: args.slug !== void 0,
-					seoChanged: args.seo !== void 0,
-					bylinesChanged: args.bylines !== void 0,
-					publishedAtChanged: args.publishedAt !== void 0
-				});
-			}
-			await requireApprovedContentPublishReview(extra, args.collection, resolvedId, args.review_request_id);
-			const publishResult = await dineway.handleContentPublish(args.collection, resolvedId);
-			if (publishResult.success) await logMcpContentActivity(dineway, locals, args.collection, resolvedId, "published", "content_update", { reviewRequestId: args.review_request_id ?? null });
-			return unwrap(publishResult);
-		}
 		if (args.status === "draft") {
 			requireOwnership(extra, ownerId, "content:publish_own", "content:publish_any");
 			if (hasInlineUpdates) {
@@ -1859,6 +2094,43 @@ function createMcpServer(options = {}) {
 		if (result.success) await logMcpContentActivity(ec, locals, args.collection, resolvedId, "permanently_deleted", "content_permanent_delete");
 		return unwrap(result);
 	});
+	server.registerTool("content_release_request", {
+		title: "Request Content Release Authorization",
+		description: "Create or reuse an exact HITL request for publishing or scheduling an approved Draft. The server derives the action hash from current content, review, time, Site Settings, and policies.",
+		inputSchema: z.object({
+			collection: z.string().describe("Collection slug"),
+			id: z.string().describe("Content item ID or slug"),
+			operation: z.enum(["publish", "schedule"]).describe("Release operation"),
+			review_request_id: z.string().describe("Approved editorial Review Request bound to the exact Draft"),
+			publishedAt: z.iso.datetime({
+				offset: true,
+				message: "must be an ISO 8601 datetime"
+			}).optional().describe("Optional publication timestamp for a publish release"),
+			scheduledAt: z.iso.datetime({
+				offset: true,
+				message: "must be an ISO 8601 datetime"
+			}).optional().describe("Required exact publication time for a schedule release")
+		}).strict()
+	}, async (args, extra) => {
+		requireScope(extra, "content:write");
+		requireRole(extra, Role.AUTHOR);
+		const payload = getExtra(extra);
+		const existing = await payload.dineway.handleContentGet(args.collection, args.id);
+		if (!existing.success) return unwrap(existing);
+		requireOwnership(extra, extractContentAuthorId(existing.data), "content:publish_own", "content:publish_any");
+		try {
+			return jsonResult(await ensureContentReleaseRequest(payload, {
+				collection: args.collection,
+				id: extractContentId(existing.data) ?? args.id,
+				operation: args.operation,
+				editorialReviewRequestId: args.review_request_id,
+				publishedAt: args.publishedAt,
+				scheduledAt: args.scheduledAt
+			}));
+		} catch (error) {
+			return contentPublicationError(error);
+		}
+	});
 	server.registerTool("content_publish", {
 		title: "Publish Content",
 		description: "Publish a content item, making it live on the site. Creates a published revision from the current draft. Further edits create a new draft without affecting the live version until re-published. Pass `publishedAt` to backdate imported or historical content; this requires content:publish_any.",
@@ -1869,7 +2141,8 @@ function createMcpServer(options = {}) {
 				offset: true,
 				message: "must be an ISO 8601 datetime"
 			}).optional().describe("Override publication timestamp. Requires content:publish_any permission."),
-			review_request_id: z.string().optional().describe("Approved review request id required for token-authenticated publish actions.")
+			review_request_id: z.string().describe("Approved editorial Review Request bound to the exact Draft."),
+			release_authorization_id: z.string().optional().describe("Approved exact release HITL request required for token actors.")
 		})
 	}, async (args, extra) => {
 		requireScope(extra, "content:write");
@@ -1887,13 +2160,20 @@ function createMcpServer(options = {}) {
 				role: userRole
 			}, "content:publish_any")) return errorResult("[INSUFFICIENT_PERMISSIONS] Setting publishedAt requires content:publish_any permission");
 		}
-		await requireApprovedContentPublishReview(extra, args.collection, resolvedId, args.review_request_id);
-		const result = await ec.handleContentPublish(args.collection, resolvedId, { publishedAt: args.publishedAt });
-		if (result.success) await logMcpContentActivity(ec, locals, args.collection, resolvedId, "published", "content_publish", {
-			reviewRequestId: args.review_request_id ?? null,
-			publishedAt: args.publishedAt ?? null
-		});
-		return unwrap(result);
+		try {
+			return unwrap((await contentPublicationService(payload).publishAuthorizedContent({
+				actor: resolveActorIdentity(locals),
+				collection: args.collection,
+				id: resolvedId,
+				editorialReviewRequestId: args.review_request_id,
+				releaseHitlRequestId: args.release_authorization_id,
+				publishedAt: args.publishedAt,
+				sourceType: "mcp_tool",
+				sourceName: "content_publish"
+			})).result);
+		} catch (error) {
+			return contentPublicationError(error);
+		}
 	});
 	server.registerTool("content_unpublish", {
 		title: "Unpublish Content",
@@ -1922,7 +2202,9 @@ function createMcpServer(options = {}) {
 		inputSchema: z.object({
 			collection: z.string().describe("Collection slug"),
 			id: z.string().describe("Content item ID or slug"),
-			scheduledAt: z.string().describe("ISO 8601 datetime for publication (e.g. '2025-06-01T09:00:00Z')")
+			scheduledAt: z.string().describe("ISO 8601 datetime for publication (e.g. '2025-06-01T09:00:00Z')"),
+			review_request_id: z.string().describe("Approved editorial Review Request bound to the exact Draft."),
+			release_authorization_id: z.string().optional().describe("Approved exact release HITL request required for token actors.")
 		})
 	}, async (args, extra) => {
 		requireScope(extra, "content:write");
@@ -1934,9 +2216,20 @@ function createMcpServer(options = {}) {
 		if (!existing.success) return unwrap(existing);
 		requireOwnership(extra, extractContentAuthorId(existing.data), "content:publish_own", "content:publish_any");
 		const resolvedId = extractContentId(existing.data) ?? args.id;
-		const result = await ec.handleContentSchedule(args.collection, resolvedId, args.scheduledAt);
-		if (result.success) await logMcpContentActivity(ec, locals, args.collection, resolvedId, "scheduled", "content_schedule", { scheduledAt: args.scheduledAt });
-		return unwrap(result);
+		try {
+			return unwrap((await contentPublicationService(payload).scheduleAuthorizedContent({
+				actor: resolveActorIdentity(locals),
+				collection: args.collection,
+				id: resolvedId,
+				editorialReviewRequestId: args.review_request_id,
+				releaseHitlRequestId: args.release_authorization_id,
+				scheduledAt: args.scheduledAt,
+				sourceType: "mcp_tool",
+				sourceName: "content_schedule"
+			})).result);
+		} catch (error) {
+			return contentPublicationError(error);
+		}
 	});
 	server.registerTool("content_unschedule", {
 		title: "Cancel Scheduled Publication",
@@ -1955,9 +2248,17 @@ function createMcpServer(options = {}) {
 		if (!existing.success) return unwrap(existing);
 		requireOwnership(extra, extractContentAuthorId(existing.data), "content:publish_own", "content:publish_any");
 		const resolvedId = extractContentId(existing.data) ?? args.id;
-		const result = await ec.handleContentUnschedule(args.collection, resolvedId);
-		if (result.success) await logMcpContentActivity(ec, locals, args.collection, resolvedId, "unscheduled", "content_unschedule");
-		return unwrap(result);
+		try {
+			return unwrap((await contentPublicationService(payload).unscheduleAuthorizedContent({
+				actor: resolveActorIdentity(locals),
+				collection: args.collection,
+				id: resolvedId,
+				sourceType: "mcp_tool",
+				sourceName: "content_unschedule"
+			})).result);
+		} catch (error) {
+			return contentPublicationError(error);
+		}
 	});
 	server.registerTool("content_compare", {
 		title: "Compare Live vs Draft",
@@ -2065,7 +2366,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 			return jsonResult({ items: await new SchemaRegistry(ec.db).listCollections() });
 		} catch (error) {
 			return errorResult(error);
@@ -2081,7 +2382,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 			const collection = await new SchemaRegistry(ec.db).getCollectionWithFields(args.slug);
 			if (!collection) return errorResult(`Collection '${args.slug}' not found`);
 			return jsonResult(collection);
@@ -2111,7 +2412,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 			const collection = await new SchemaRegistry(ec.db).createCollection({
 				slug: args.slug,
 				label: args.label,
@@ -2175,7 +2476,7 @@ function createMcpServer(options = {}) {
 					request
 				});
 			}
-			const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 			await new SchemaRegistry(ec.db).deleteCollection(args.slug, { force: args.force });
 			ec.invalidateManifest();
 			await logSchemaActivity(ec.db, locals, {
@@ -2239,7 +2540,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 			const field = await new SchemaRegistry(ec.db).createField(args.collection, {
 				slug: args.slug,
 				label: args.label,
@@ -2308,7 +2609,7 @@ function createMcpServer(options = {}) {
 					request
 				});
 			}
-			const { SchemaRegistry } = await import("../../../schema-DXdYj4R3.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 			await new SchemaRegistry(ec.db).deleteField(args.collection, args.fieldSlug);
 			ec.invalidateManifest();
 			await logSchemaActivity(ec.db, locals, {
@@ -2441,7 +2742,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { searchWithDb } = await import("../../../search-DSaLgEFI.mjs").then((n) => n.t);
+			const { searchWithDb } = await import("../../../search-BXEQepxL.mjs").then((n) => n.t);
 			return jsonResult(await searchWithDb(ec.db, args.query, {
 				collections: args.collections,
 				locale: args.locale,
@@ -2467,7 +2768,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-e51-fWRs.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-BJa1MyKB.mjs").then((n) => n.n);
 			return jsonResult(await new BylineRepository(ec.db).findMany({
 				search: args.search,
 				isGuest: args.isGuest,
@@ -2489,7 +2790,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-e51-fWRs.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-BJa1MyKB.mjs").then((n) => n.n);
 			const byline = await new BylineRepository(ec.db).findById(args.id);
 			if (!byline) return errorResult(`Byline '${args.id}' not found`);
 			return jsonResult(byline);
@@ -2507,7 +2808,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleBylineCreate } = await import("../../../bylines-CMQNCNFh.mjs").then((n) => n.t);
+			const { handleBylineCreate } = await import("../../../bylines-B53Saxdb.mjs").then((n) => n.t);
 			const result = await handleBylineCreate(ec.db, args);
 			if (result.success) await invalidateBylines();
 			return unwrap(result);
@@ -2527,7 +2828,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleBylineUpdate } = await import("../../../bylines-CMQNCNFh.mjs").then((n) => n.t);
+			const { handleBylineUpdate } = await import("../../../bylines-B53Saxdb.mjs").then((n) => n.t);
 			const { id, ...input } = args;
 			const result = await handleBylineUpdate(ec.db, id, input);
 			if (result.success) await invalidateBylines();
@@ -2546,7 +2847,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-e51-fWRs.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-BJa1MyKB.mjs").then((n) => n.n);
 			if (!await new BylineRepository(ec.db).delete(args.id)) return errorResult(`Byline '${args.id}' not found`);
 			await invalidateBylines();
 			return jsonResult({ deleted: args.id });
@@ -2563,7 +2864,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleBylineTranslations } = await import("../../../bylines-CMQNCNFh.mjs").then((n) => n.t);
+			const { handleBylineTranslations } = await import("../../../bylines-B53Saxdb.mjs").then((n) => n.t);
 			return unwrap(await handleBylineTranslations(ec.db, args.id));
 		} catch (error) {
 			return errorResult(error);
@@ -2578,7 +2879,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleTaxonomyList } = await import("../../../taxonomies-9s-v03H-.mjs").then((n) => n.l);
+			const { handleTaxonomyList } = await import("../../../taxonomies-DuhGjBa8.mjs").then((n) => n.l);
 			return unwrap(await handleTaxonomyList(ec.db, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2598,12 +2899,12 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleTaxonomyList } = await import("../../../taxonomies-9s-v03H-.mjs").then((n) => n.l);
+			const { handleTaxonomyList } = await import("../../../taxonomies-DuhGjBa8.mjs").then((n) => n.l);
 			const listResult = await handleTaxonomyList(ec.db, { locale: args.locale });
 			if (!listResult.success) return unwrap(listResult);
 			if (!listResult.data.taxonomies.find((t) => t.name === args.taxonomy)) return errorResult(`Taxonomy '${args.taxonomy}' not found`);
-			const { TaxonomyRepository } = await import("../../../taxonomy-Dvsw6BOs.mjs").then((n) => n.n);
-			const { decodeCursor, encodeCursor } = await import("../../../types-Dq1qT19x.mjs").then((n) => n.a);
+			const { TaxonomyRepository } = await import("../../../taxonomy-CCo2plmV.mjs").then((n) => n.n);
+			const { decodeCursor, encodeCursor } = await import("../../../types-Bshd_6wQ.mjs").then((n) => n.a);
 			const repo = new TaxonomyRepository(ec.db);
 			const limit = Math.min(args.limit ?? 50, 100);
 			const terms = await repo.findByName(args.taxonomy, { locale: args.locale });
@@ -2652,7 +2953,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleTermCreate } = await import("../../../taxonomies-9s-v03H-.mjs").then((n) => n.l);
+			const { handleTermCreate } = await import("../../../taxonomies-DuhGjBa8.mjs").then((n) => n.l);
 			return unwrap(await handleTermCreate(ec.db, args.taxonomy, {
 				slug: args.slug,
 				label: args.label,
@@ -2682,7 +2983,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleTermUpdate } = await import("../../../taxonomies-9s-v03H-.mjs").then((n) => n.l);
+			const { handleTermUpdate } = await import("../../../taxonomies-DuhGjBa8.mjs").then((n) => n.l);
 			return unwrap(await handleTermUpdate(ec.db, args.taxonomy, args.termSlug, {
 				slug: args.slug,
 				label: args.label,
@@ -2707,7 +3008,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleTermDelete } = await import("../../../taxonomies-9s-v03H-.mjs").then((n) => n.l);
+			const { handleTermDelete } = await import("../../../taxonomies-DuhGjBa8.mjs").then((n) => n.l);
 			return unwrap(await handleTermDelete(ec.db, args.taxonomy, args.termSlug, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2722,7 +3023,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleTermTranslations } = await import("../../../taxonomies-9s-v03H-.mjs").then((n) => n.l);
+			const { handleTermTranslations } = await import("../../../taxonomies-DuhGjBa8.mjs").then((n) => n.l);
 			return unwrap(await handleTermTranslations(ec.db, args.id));
 		} catch (error) {
 			return errorResult(error);
@@ -2737,7 +3038,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuList } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuList } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuList(ec.db, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2755,7 +3056,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuGet } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuGet } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuGet(ec.db, args.name, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2770,7 +3071,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuTranslations } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuTranslations } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuTranslations(ec.db, args.id));
 		} catch (error) {
 			return errorResult(error);
@@ -2790,7 +3091,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuCreate } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuCreate } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuCreate(ec.db, {
 				name: args.name,
 				label: args.label,
@@ -2814,7 +3115,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuUpdate } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuUpdate } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuUpdate(ec.db, args.name, {
 				label: args.label,
 				locale: args.locale
@@ -2836,7 +3137,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuDelete } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuDelete } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuDelete(ec.db, args.name, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2871,7 +3172,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuSetItems } = await import("../../../menus-TaW1gKnk.mjs").then((n) => n.d);
+			const { handleMenuSetItems } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuSetItems(ec.db, args.name, args.items, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2918,7 +3219,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getDineway(extra);
 		try {
-			const { handleSettingsGet } = await import("../../../settings-i4VPP8bT.mjs").then((n) => n.r);
+			const { handleSettingsGet } = await import("../../../settings-Dje-PHXo.mjs").then((n) => n.r);
 			return unwrap(await handleSettingsGet(ec.db, ec.storage));
 		} catch (error) {
 			return errorResult(error);
@@ -2955,7 +3256,7 @@ function createMcpServer(options = {}) {
 					request
 				});
 			}
-			const { handleSettingsUpdate } = await import("../../../settings-i4VPP8bT.mjs").then((n) => n.r);
+			const { handleSettingsUpdate } = await import("../../../settings-Dje-PHXo.mjs").then((n) => n.r);
 			const result = await handleSettingsUpdate(ec.db, ec.storage, settingsInput);
 			if (!result.success) return unwrap(result);
 			await logSiteActivitySafely(ec.db, locals, {
@@ -3027,7 +3328,13 @@ const POST = async ({ request, locals }) => {
 	const { dineway, user } = locals;
 	if (!dineway) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
 	if (!user) return apiError("UNAUTHORIZED", "Authentication required", 401);
+	let toolsService;
 	const server = createMcpServer({
+		resolveDinewayToolsService: () => {
+			toolsService ??= createDinewayToolsRuntimeService();
+			return toolsService;
+		},
+		resolveDinewayToolsCredential: (provider, handlers) => new IntegrationCredentialStore(handlers.db).resolveForRuntime(provider),
 		pluginMcpRegistry: dineway.getPluginMcpRegistry(),
 		executePluginMcpCommand: createReviewedPluginMcpCommandExecutor()
 	});