dineway 0.2.0 → 0.2.2

package/dist/plugins/adapt-sandbox-entry.mjs

@@ -1,4 +1,4 @@
-import { n as PLUGIN_CAPABILITIES, t as HOOK_NAMES } from "../manifest-schema-BxVPYMJR.mjs";
+import { n as PLUGIN_CAPABILITIES, t as HOOK_NAMES } from "../manifest-schema-DKa3ZaJL.mjs";
 
 //#region src/plugins/adapt-sandbox-entry.ts
 /**
@@ -90,6 +90,7 @@ function adaptSandboxEntry(definition, descriptor) {
 	if (capabilities.includes("content:write") && !capabilities.includes("content:read")) capabilities.push("content:read");
 	if (capabilities.includes("media:write") && !capabilities.includes("media:read")) capabilities.push("media:read");
 	if (capabilities.includes("network:request:unrestricted") && !capabilities.includes("network:request")) capabilities.push("network:request");
+	if (capabilities.includes("network:request:development-loopback") && !capabilities.includes("network:request:unrestricted")) throw new Error(`Plugin "${pluginId}" must also declare "network:request:unrestricted" when using "network:request:development-loopback".`);
 	const rawStorage = descriptor.storage ?? {};
 	const storage = {};
 	for (const [name, config] of Object.entries(rawStorage)) storage[name] = {
@@ -107,6 +108,7 @@ function adaptSandboxEntry(definition, descriptor) {
 		capabilities,
 		allowedHosts,
 		storage,
+		migrations: {},
 		hooks: resolvedHooks,
 		routes: resolvedRoutes,
 		mcp: {

package/dist/{plugins-BolVa-tl.mjs → plugins-B7-4Okii.mjs}

@@ -1,12 +1,12 @@
 import { r as validatePluginIdentifier, t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
 import { i as encodeBase64url, n as decodeBase64url } from "./base64-F8-DUraK.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-CxBt-GxR.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-DX_b8_4Z.mjs";
 import { t as OptionsRepository } from "./options-DQPTH5n0.mjs";
-import { n as createPluginContext, t as PluginContextFactory } from "./context-C5W3G18y.mjs";
-import { t as extractRequestMeta } from "./request-meta-CUypToDJ.mjs";
-import { r as setCronTasksEnabled } from "./cron-cKcNTix_.mjs";
-import { i as parseEncryptionKeys, t as DinewaySecretsError } from "./secrets-CDZo2k8L.mjs";
-import { sql } from "kysely";
+import { n as createPluginContext, t as PluginContextFactory } from "./context-DT0tIsfw.mjs";
+import { i as parseEncryptionKeys, t as DinewaySecretsError } from "./secrets-CpGpyGcO.mjs";
+import { t as extractRequestMeta } from "./request-meta-DHFIzWcf.mjs";
+import { r as setCronTasksEnabled } from "./cron-D_c3WUPN.mjs";
+import { Migrator, sql } from "kysely";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { ulid } from "ulidx";
 import { z } from "astro/zod";
@@ -1249,14 +1249,17 @@ function defineNativePlugin(definition) {
 	const SIMPLE_ID = /^[a-z0-9-]+$/;
 	const SCOPED_ID = /^@[a-z0-9-]+\/[a-z0-9-]+$/;
 	const SEMVER_PATTERN = /^\d+\.\d+\.\d+/;
-	const { id, version, capabilities = [], allowedHosts = [], hooks = {}, routes = {}, admin = {} } = definition;
+	const MIGRATION_NAME_PATTERN = /^\d{3}_[a-z][a-z0-9_]*$/;
+	const { id, version, capabilities = [], allowedHosts = [], migrations = {}, hooks = {}, routes = {}, publicationReleasePolicies = [], admin = {} } = definition;
 	const mcp = resolveMcp(definition.mcp, id);
 	const storage = definition.storage ?? {};
+	const normalizedMigrations = Object.fromEntries(Object.entries(migrations).toSorted(([left], [right]) => left.localeCompare(right)));
 	if (!SIMPLE_ID.test(id) && !SCOPED_ID.test(id)) throw new Error(`Invalid plugin id "${id}". Must be lowercase alphanumeric with dashes (e.g., "my-plugin" or "@scope/my-plugin").`);
 	if (!SEMVER_PATTERN.test(version)) throw new Error(`Invalid plugin version "${version}". Must be semver format (e.g., "1.0.0").`);
 	const validCapabilities = new Set([
 		"network:request",
 		"network:request:unrestricted",
+		"network:request:development-loopback",
 		"content:read",
 		"content:write",
 		"media:read",
@@ -1268,30 +1271,47 @@ function defineNativePlugin(definition) {
 		"hooks.page-fragments:register"
 	]);
 	for (const cap of capabilities) if (!validCapabilities.has(cap)) throw new Error(`Invalid capability "${cap}" in plugin "${id}".`);
+	for (const [name, migration] of Object.entries(normalizedMigrations)) {
+		if (!MIGRATION_NAME_PATTERN.test(name)) throw new Error(`Invalid migration name "${name}" in plugin "${id}". Use NNN_descriptive_name.`);
+		if (typeof migration.up !== "function") throw new Error(`Plugin "${id}" migration "${name}" requires an up function.`);
+		if (migration.down !== void 0 && typeof migration.down !== "function") throw new Error(`Plugin "${id}" migration "${name}" has an invalid down function.`);
+	}
 	const normalizedCapabilities = [...capabilities];
 	if (capabilities.includes("content:write") && !capabilities.includes("content:read")) normalizedCapabilities.push("content:read");
 	if (capabilities.includes("media:write") && !capabilities.includes("media:read")) normalizedCapabilities.push("media:read");
 	if (capabilities.includes("network:request:unrestricted") && !capabilities.includes("network:request")) normalizedCapabilities.push("network:request");
+	if (capabilities.includes("network:request:development-loopback") && !capabilities.includes("network:request:unrestricted")) throw new Error(`Plugin "${id}" must also declare "network:request:unrestricted" when using "network:request:development-loopback".`);
 	for (const [routeName, route] of Object.entries(routes)) {
 		if (route.body !== void 0 && route.body !== "json" && route.body !== "raw") throw new Error(`Plugin "${id}" route "${routeName}" has an invalid body mode.`);
 		if (route.body === "raw" && route.input) throw new Error(`Plugin "${id}" raw-body route "${routeName}" cannot declare an input schema.`);
 		if (route.body !== "raw" && route.maxBodyBytes !== void 0) throw new Error(`Plugin "${id}" JSON route "${routeName}" cannot declare a raw body-size limit.`);
 		if (route.body === "raw" && route.maxBodyBytes !== void 0 && (!Number.isSafeInteger(route.maxBodyBytes) || route.maxBodyBytes < 1 || route.maxBodyBytes > MAX_PLUGIN_RAW_BODY_LIMIT_BYTES)) throw new Error(`Plugin "${id}" raw-body route "${routeName}" has an invalid body-size limit.`);
 		if (route.public === true && route.authorization) throw new Error(`Plugin "${id}" public route "${routeName}" cannot declare private authorization.`);
+		if (route.apiTokenPolicy && (route.public === true || !route.authorization)) throw new Error(`Plugin "${id}" route "${routeName}" API-token policy requires private authorization.`);
+		if (route.apiTokenPolicy?.effect === "write" && (route.apiTokenPolicy.idempotencyField.trim().length === 0 || !route.input)) throw new Error(`Plugin "${id}" route "${routeName}" API-token write policy requires a parsed input schema and idempotency field.`);
 		if (route.authorization && (route.authorization.anyOfTokenScopes.length === 0 || route.authorization.anyOfTokenScopes.some((scope) => scope.trim().length === 0))) throw new Error(`Plugin "${id}" route "${routeName}" requires at least one valid token scope.`);
 		const restaurantPermission = route.authorization?.restaurantPermission;
 		if (restaurantPermission !== void 0 && (restaurantPermission.trim().length === 0 || typeof route.resolveTarget !== "function" || typeof route.authorizeTarget !== "function")) throw new Error(`Plugin "${id}" route "${routeName}" requires a restaurant target resolver and authorizer.`);
 		if (!restaurantPermission && (route.resolveTarget || route.authorizeTarget)) throw new Error(`Plugin "${id}" route "${routeName}" cannot declare target authorization without a restaurant permission.`);
 	}
+	const resolvedHooks = resolveHooks(hooks, id);
+	const releasePolicyIds = /* @__PURE__ */ new Set();
+	for (const policy of publicationReleasePolicies) {
+		if (!policy.id.trim()) throw new Error(`Plugin "${id}" publication release policy requires an ID.`);
+		if (releasePolicyIds.has(policy.id)) throw new Error(`Plugin "${id}" has duplicate publication release policy "${policy.id}".`);
+		releasePolicyIds.add(policy.id);
+	}
 	return {
 		id,
 		version,
 		capabilities: normalizedCapabilities,
 		allowedHosts,
 		storage,
-		hooks: resolveHooks(hooks, id),
+		migrations: Object.freeze(normalizedMigrations),
+		hooks: resolvedHooks,
 		routes,
 		mcp,
+		publicationReleasePolicies: [...publicationReleasePolicies].toSorted((left, right) => left.id.localeCompare(right.id)),
 		admin
 	};
 }
@@ -1418,6 +1438,69 @@ function resolveHook(hook, pluginId) {
 	};
 }
 
+//#endregion
+//#region src/plugins/migrations.ts
+const LEADING_AT = /^@/;
+var StaticPluginMigrationProvider = class {
+	constructor(migrations) {
+		this.migrations = migrations;
+	}
+	async getMigrations() {
+		return this.migrations;
+	}
+};
+/**
+* Run migrations contributed by configured trusted native plugins.
+*
+* Each plugin receives isolated Kysely migration and lock tables. This keeps migration history valid
+* when another plugin is removed and lets different plugins safely reuse local migration names.
+*/
+async function runPluginMigrations(db, plugins) {
+	const applied = [];
+	for (const plugin of [...plugins].toSorted((left, right) => left.id.localeCompare(right.id))) {
+		if (Object.keys(plugin.migrations).length === 0) continue;
+		const tables = pluginMigrationTableNames(plugin.id);
+		const { error, results } = await new Migrator({
+			db,
+			provider: new StaticPluginMigrationProvider(plugin.migrations),
+			migrationTableName: tables.migrations,
+			migrationLockTableName: tables.lock
+		}).migrateToLatest();
+		const successful = results?.filter((result) => result.status === "Success").map((result) => result.migrationName) ?? [];
+		if (error) {
+			const failed = results?.find((result) => result.status === "Error")?.migrationName;
+			throw new Error(`Plugin migration failed for ${plugin.id}${failed ? ` (${failed})` : ""}: ${errorMessage(error)}`, { cause: error });
+		}
+		applied.push({
+			pluginId: plugin.id,
+			applied: successful
+		});
+	}
+	return applied;
+}
+function pluginMigrationTableNames(pluginId) {
+	const slug = pluginId.replace(LEADING_AT, "").replaceAll("/", "_").replaceAll("-", "_").slice(0, 20);
+	const suffix = fnv1a(pluginId);
+	return {
+		migrations: `_dineway_plugin_migration_${slug}_${suffix}`,
+		lock: `_dineway_plugin_migration_lock_${slug}_${suffix}`
+	};
+}
+function fnv1a(value) {
+	let hash = 2166136261;
+	for (let index = 0; index < value.length; index++) {
+		hash ^= value.charCodeAt(index);
+		hash = Math.imul(hash, 16777619);
+	}
+	return (hash >>> 0).toString(16).padStart(8, "0");
+}
+function errorMessage(error) {
+	if (!(error instanceof Error)) return JSON.stringify(error);
+	if (error.message) return error.message;
+	if (error.cause instanceof Error && error.cause.message) return error.cause.message;
+	return "unknown error";
+}
+
 //#endregion
 //#region src/plugins/hooks.ts
 /**
@@ -2696,7 +2779,8 @@ var PluginRouteHandler = class {
 			public: route.public === true,
 			body: route.body ?? "json",
 			...route.body === "raw" ? { maxBodyBytes: route.maxBodyBytes ?? DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES } : {},
-			authorization: route.authorization
+			authorization: route.authorization,
+			apiTokenPolicy: route.apiTokenPolicy
 		};
 	}
 };
@@ -3815,6 +3899,7 @@ function createResolvedPluginFromManifest(manifest) {
 		capabilities: normalizeCapabilities(manifest.capabilities),
 		allowedHosts: manifest.allowedHosts,
 		storage: manifest.storage,
+		migrations: {},
 		hooks: {},
 		routes: {},
 		mcp: {
@@ -4235,4 +4320,4 @@ function createNodeSandboxRunner(options) {
 }
 
 //#endregion
-export { prosemirrorToPortableText as C, RelationRepository as D, image as E, portableTextToProsemirror as S, reference as T, readBoundedPluginRouteBody as _, createNoopSandboxRunner as a, issueGuestAccessToken as b, PluginSecretStore as c, EmailPipeline as d, HookPipeline as f, DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES as g, definePlugin as h, SandboxNotAvailableError as i, PluginRouteError as l, resolveExclusiveHooks as m, createNodeSandboxRunner as n, PluginManager as o, createHookPipeline as p, NoopSandboxRunner as r, createPluginManager as s, NodeSandboxRunner as t, PluginRouteRegistry as u, GuestAccessTokenConfigurationError as v, portableText as w, verifyGuestAccessToken as x, hashGuestAccessToken as y };
+export { portableTextToProsemirror as C, image as D, reference as E, RelationRepository as O, verifyGuestAccessToken as S, portableText as T, DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES as _, createNoopSandboxRunner as a, hashGuestAccessToken as b, PluginSecretStore as c, EmailPipeline as d, HookPipeline as f, definePlugin as g, runPluginMigrations as h, SandboxNotAvailableError as i, PluginRouteError as l, resolveExclusiveHooks as m, createNodeSandboxRunner as n, PluginManager as o, createHookPipeline as p, NoopSandboxRunner as r, createPluginManager as s, NodeSandboxRunner as t, PluginRouteRegistry as u, readBoundedPluginRouteBody as v, prosemirrorToPortableText as w, issueGuestAccessToken as x, GuestAccessTokenConfigurationError as y };

package/dist/portable-text-Ehqj3I_y.d.mts

@@ -0,0 +1,45 @@
+//#region src/client/portable-text.d.ts
+/**
+ * Portable Text <-> Markdown conversion layer.
+ *
+ * Three tiers of block handling:
+ *   Tier 1: Standard PT blocks <-> standard Markdown (headings, paragraphs, lists, etc.)
+ *   Tier 2: Dineway custom blocks <-> Markdown directives (future)
+ *   Tier 3: Unknown blocks <-> opaque HTML comment fences (preserved, not editable)
+ */
+/** Minimal Portable Text block shape */
+interface PortableTextBlock {
+  _type: string;
+  _key?: string;
+  style?: string;
+  level?: number;
+  listItem?: string;
+  markDefs?: MarkDef[];
+  children?: PortableTextSpan[];
+  [key: string]: unknown;
+}
+interface PortableTextSpan {
+  _type: string;
+  _key?: string;
+  text?: string;
+  marks?: string[];
+  [key: string]: unknown;
+}
+interface MarkDef {
+  _key: string;
+  _type: string;
+  href?: string;
+  [key: string]: unknown;
+}
+/**
+ * Convert Portable Text blocks to Markdown.
+ * Unknown block types are serialized as opaque fences.
+ */
+declare function portableTextToMarkdown(blocks: PortableTextBlock[]): string;
+/**
+ * Convert Markdown to Portable Text blocks.
+ * Opaque fences (<!--ec:block ... -->) are deserialized and spliced back in.
+ */
+declare function markdownToPortableText(markdown: string): PortableTextBlock[];
+//#endregion
+export { markdownToPortableText as n, portableTextToMarkdown as r, PortableTextBlock as t };

package/dist/{preview-vSVg6fwG.mjs → preview-BMIReQGc.mjs}

@@ -1,7 +1,7 @@
 import { n as loadBetterSqlite3, t as createDatabase } from "./connection-CiJWiWya.mjs";
 import { runWithContext } from "./request-context.mjs";
-import { a as verifyPreviewSignature, t as buildPreviewSignatureHeader } from "./sidecar-client-C3mqXg4C.mjs";
-import { t as generatePreviewToken } from "./tokens-1RK1n6ED.mjs";
+import { a as verifyPreviewSignature, t as buildPreviewSignatureHeader } from "./sidecar-client-dt5fv23q.mjs";
+import { t as generatePreviewToken } from "./tokens-DIzhPT80.mjs";
 import { createHash } from "node:crypto";
 import { sql } from "kysely";
 import { ulid } from "ulidx";

package/dist/{provider-loader-MD8zAbnH.d.mts → provider-loader-BIbIiz0P.d.mts}

@@ -1,4 +1,4 @@
-import { f as MediaProvider } from "./placeholder-uvNRZBX9.mjs";
+import { f as MediaProvider } from "./placeholder-C6ZjZcmJ.mjs";
 
 //#region src/media/provider-loader.d.ts
 /**

package/dist/{public-url-gsp3oUbu.d.mts → public-url-DYISdY_R.d.mts}

@@ -1,4 +1,4 @@
-import { t as DinewayConfig } from "./runtime-BOeiQsCv.mjs";
+import { ro as DinewayConfig } from "./types-CJezJeNE.mjs";
 
 //#region src/api/public-url.d.ts
 /**