dineway 0.2.0 → 0.2.2

package/dist/types-C8XW6L19.d.mts

@@ -1,1468 +0,0 @@
-import { d as FieldType } from "./types-DW_-sFyz.mjs";
-import { t as Database } from "./types-DU0bU2Wu.mjs";
-import { d as Storage } from "./types-POH8PQZh.mjs";
-import { Kysely } from "kysely";
-import { z } from "astro/zod";
-import { Permission, RoleLevel } from "@dineway-ai/auth";
-import "react/jsx-runtime";
-import { AnySchema } from "@modelcontextprotocol/sdk/server/zod-compat.js";
-import { JSX } from "astro/jsx-runtime";
-
-//#region ../blocks/dist/validation-b1zbwCOE.d.ts
-//#region src/types.d.ts
-interface ConfirmDialog {
-  title: string;
-  text: string;
-  confirm: string;
-  deny: string;
-  style?: "danger";
-}
-interface ButtonElement {
-  type: "button";
-  action_id: string;
-  label: string;
-  style?: "primary" | "danger" | "secondary";
-  value?: unknown;
-  confirm?: ConfirmDialog;
-}
-interface TextInputElement {
-  type: "text_input";
-  action_id: string;
-  label: string;
-  placeholder?: string;
-  initial_value?: string;
-  multiline?: boolean;
-}
-interface NumberInputElement {
-  type: "number_input";
-  action_id: string;
-  label: string;
-  initial_value?: number;
-  min?: number;
-  max?: number;
-}
-interface SelectElement {
-  type: "select";
-  action_id: string;
-  label: string;
-  options: Array<{
-    label: string;
-    value: string;
-  }>;
-  initial_value?: string;
-  /** Plugin route that returns `{ items: Array<{ id, name }> }` to populate options dynamically */
-  optionsRoute?: string;
-}
-interface ToggleElement {
-  type: "toggle";
-  action_id: string;
-  label: string;
-  description?: string;
-  initial_value?: boolean;
-}
-interface SecretInputElement {
-  type: "secret_input";
-  action_id: string;
-  label: string;
-  placeholder?: string;
-  has_value?: boolean;
-}
-interface CheckboxElement {
-  type: "checkbox";
-  action_id: string;
-  label: string;
-  options: Array<{
-    label: string;
-    value: string;
-  }>;
-  initial_value?: string[];
-}
-interface DateInputElement {
-  type: "date_input";
-  action_id: string;
-  label: string;
-  initial_value?: string;
-  placeholder?: string;
-}
-interface ComboboxElement {
-  type: "combobox";
-  action_id: string;
-  label: string;
-  options: Array<{
-    label: string;
-    value: string;
-  }>;
-  initial_value?: string;
-  placeholder?: string;
-}
-interface RadioElement {
-  type: "radio";
-  action_id: string;
-  label: string;
-  options: Array<{
-    label: string;
-    value: string;
-  }>;
-  initial_value?: string;
-}
-interface MediaPickerElement {
-  type: "media_picker";
-  action_id: string;
-  label: string;
-  mime_type_filter?: string;
-  initial_value?: string;
-  placeholder?: string;
-}
-type RepeaterSubField = TextInputElement | NumberInputElement | SelectElement | ToggleElement;
-interface RepeaterElement {
-  type: "repeater";
-  action_id: string;
-  label: string;
-  item_label?: string;
-  fields: RepeaterSubField[];
-  min_items?: number;
-  max_items?: number;
-  initial_value?: Array<Record<string, unknown>>;
-}
-type Element = ButtonElement | TextInputElement | NumberInputElement | SelectElement | ToggleElement | SecretInputElement | CheckboxElement | DateInputElement | ComboboxElement | RadioElement | MediaPickerElement | RepeaterElement;
-//#endregion
-//#region src/plugins/types.d.ts
-/**
- * Plugin capabilities determine what APIs are available in context
- */
-type PluginCapability = "network:request" | "network:request:unrestricted" | "content:read" | "content:write" | "media:read" | "media:write" | "users:read" | "email:send" | "hooks.email-transport:register" | "hooks.email-events:register" | "hooks.page-fragments:register";
-type AccessConstraints = Record<string, unknown>;
-/**
- * Structured plugin trust contract.
- *
- * This is the manifest-facing access shape. `capabilities` and `allowedHosts`
- * remain the runtime enforcement currency and are derived from this at bundle
- * parse boundaries when `declaredAccess` is present.
- */
-interface DeclaredAccess {
-  content?: {
-    read?: AccessConstraints;
-    write?: AccessConstraints;
-  };
-  media?: {
-    read?: AccessConstraints;
-    write?: AccessConstraints;
-  };
-  network?: {
-    request?: {
-      allowedHosts?: string[];
-    };
-  };
-  email?: {
-    send?: AccessConstraints;
-    events?: AccessConstraints;
-    transport?: AccessConstraints;
-  };
-  page?: {
-    fragments?: AccessConstraints;
-  };
-  users?: {
-    read?: AccessConstraints;
-  };
-}
-/**
- * Storage collection declaration in plugin definition
- */
-interface StorageCollectionConfig {
-  /**
-   * Fields to index for querying.
-   * Each entry can be a single field name or an array for composite indexes.
-   */
-  indexes: Array<string | string[]>;
-  /**
-   * Fields with unique constraints.
-   * Each entry can be a single field name or an array for composite unique indexes.
-   * Unique indexes are also queryable (no need to duplicate in `indexes`).
-   */
-  uniqueIndexes?: Array<string | string[]>;
-}
-/**
- * Plugin storage configuration
- */
-type PluginStorageConfig = Record<string, StorageCollectionConfig>;
-/**
- * Query filter operators
- */
-interface RangeFilter {
-  gt?: number | string;
-  gte?: number | string;
-  lt?: number | string;
-  lte?: number | string;
-}
-interface InFilter {
-  in: Array<string | number>;
-}
-interface StartsWithFilter {
-  startsWith: string;
-}
-/**
- * Where clause value types
- */
-type WhereValue = string | number | boolean | null | RangeFilter | InFilter | StartsWithFilter;
-/**
- * Where clause for storage queries
- */
-type WhereClause = Record<string, WhereValue>;
-/**
- * Query options for storage.query()
- */
-interface QueryOptions {
-  where?: WhereClause;
-  orderBy?: Record<string, "asc" | "desc">;
-  limit?: number;
-  cursor?: string;
-}
-/**
- * Paginated result (used by storage.query, content.list, media.list)
- */
-interface PaginatedResult<T> {
-  items: T[];
-  cursor?: string;
-  hasMore: boolean;
-}
-/**
- * Storage collection interface - the API exposed to plugins
- * No async iterators - all operations return promises with pagination
- */
-interface StorageCollection<T = unknown> {
-  get(id: string): Promise<T | null>;
-  put(id: string, data: T): Promise<void>;
-  delete(id: string): Promise<boolean>;
-  exists(id: string): Promise<boolean>;
-  getMany(ids: string[]): Promise<Map<string, T>>;
-  putMany(items: Array<{
-    id: string;
-    data: T;
-  }>): Promise<void>;
-  deleteMany(ids: string[]): Promise<number>;
-  query(options?: QueryOptions): Promise<PaginatedResult<{
-    id: string;
-    data: T;
-  }>>;
-  count(where?: WhereClause): Promise<number>;
-}
-/**
- * Plugin storage context - typed based on declared collections
- */
-type PluginStorage<T extends PluginStorageConfig> = { [K in keyof T]: StorageCollection };
-/**
- * KV store interface - unified replacement for settings + options
- *
- * Convention:
- * - `settings:*` - User-configurable preferences (shown in admin UI)
- * - `state:*` - Internal plugin state (not shown to users)
- */
-interface KVAccess {
-  get<T>(key: string): Promise<T | null>;
-  set(key: string, value: unknown): Promise<void>;
-  delete(key: string): Promise<boolean>;
-  list(prefix?: string): Promise<Array<{
-    key: string;
-    value: unknown;
-  }>>;
-}
-/**
- * SEO metadata for a content item, as stored in the core SEO panel.
- *
- * Only present on items in collections with `has_seo = 1`. For collections
- * without SEO enabled, `ContentItem.seo` is `undefined`.
- */
-interface ContentItemSeo {
-  title: string | null;
-  description: string | null;
-  image: string | null;
-  canonical: string | null;
-  noIndex: boolean;
-}
-/**
- * SEO input accepted by content write operations.
- *
- * All fields are optional — only fields that are present overwrite existing
- * values. An empty object is treated as a no-op.
- */
-interface ContentItemSeoInput {
-  title?: string | null;
-  description?: string | null;
-  image?: string | null;
-  canonical?: string | null;
-  noIndex?: boolean;
-}
-/**
- * Content item returned from content API
- */
-interface ContentItem {
-  id: string;
-  type: string;
-  slug: string | null;
-  status: string;
-  data: Record<string, unknown>;
-  /**
-   * SEO metadata, populated when the collection has SEO enabled
-   * (`has_seo = 1`). `undefined` for non-SEO collections.
-   */
-  seo?: ContentItemSeo;
-  createdAt: string;
-  updatedAt: string;
-  publishedAt: string | null;
-  locale: string | null;
-}
-/**
- * Content filters supported by the plugin content API.
- */
-interface ContentListWhere {
-  status?: string;
-  locale?: string;
-}
-/**
- * Content list options
- */
-interface ContentListOptions {
-  where?: ContentListWhere;
-  limit?: number;
-  cursor?: string;
-  orderBy?: Record<string, "asc" | "desc">;
-}
-/**
- * Input accepted by `content.create` / `content.update`.
- *
- * Most entries are field slugs mapped to their values. The reserved `seo`
- * key is extracted and routed to the core SEO panel (the `_dineway_seo`
- * table), matching the shape accepted by the REST API. Passing `seo` for a
- * collection that does not have SEO enabled throws a validation error.
- */
-type ContentWriteInput = Record<string, unknown> & {
-  seo?: ContentItemSeoInput;
-};
-/**
- * Content access interface - capability-gated
- */
-interface ContentAccess {
-  get(collection: string, id: string): Promise<ContentItem | null>;
-  list(collection: string, options?: ContentListOptions): Promise<PaginatedResult<ContentItem>>;
-  create?(collection: string, data: ContentWriteInput): Promise<ContentItem>;
-  update?(collection: string, id: string, data: ContentWriteInput): Promise<ContentItem>;
-  delete?(collection: string, id: string): Promise<boolean>;
-}
-/**
- * Full content access with write operations
- */
-interface ContentAccessWithWrite extends ContentAccess {
-  create(collection: string, data: ContentWriteInput): Promise<ContentItem>;
-  update(collection: string, id: string, data: ContentWriteInput): Promise<ContentItem>;
-  delete(collection: string, id: string): Promise<boolean>;
-}
-/**
- * Media item returned from media API
- */
-interface MediaItem {
-  id: string;
-  filename: string;
-  mimeType: string;
-  size: number | null;
-  url: string;
-  createdAt: string;
-}
-/**
- * Media list options
- */
-interface MediaListOptions {
-  limit?: number;
-  cursor?: string;
-  mimeType?: string;
-}
-/**
- * Media access interface - capability-gated
- */
-interface MediaAccess {
-  get(id: string): Promise<MediaItem | null>;
-  list(options?: MediaListOptions): Promise<PaginatedResult<MediaItem>>;
-  getUploadUrl?(filename: string, contentType: string): Promise<{
-    uploadUrl: string;
-    mediaId: string;
-  }>;
-  /**
-   * Upload media bytes directly. Preferred in sandboxed mode where
-   * plugins cannot make external requests to a presigned URL.
-   * Returns the created media item.
-   */
-  upload?(filename: string, contentType: string, bytes: ArrayBuffer): Promise<{
-    mediaId: string;
-    storageKey: string;
-    url: string;
-  }>;
-  delete?(id: string): Promise<boolean>;
-}
-/**
- * Full media access with write operations
- */
-interface MediaAccessWithWrite extends MediaAccess {
-  getUploadUrl(filename: string, contentType: string): Promise<{
-    uploadUrl: string;
-    mediaId: string;
-  }>;
-  upload(filename: string, contentType: string, bytes: ArrayBuffer): Promise<{
-    mediaId: string;
-    storageKey: string;
-    url: string;
-  }>;
-  delete(id: string): Promise<boolean>;
-}
-/**
- * HTTP client interface - requires network:request capability
- */
-interface HttpAccess {
-  fetch(url: string, init?: RequestInit): Promise<Response>;
-}
-/**
- * Logger interface - always available
- */
-interface LogAccess {
-  debug(message: string, data?: unknown): void;
-  info(message: string, data?: unknown): void;
-  warn(message: string, data?: unknown): void;
-  error(message: string, data?: unknown): void;
-}
-/**
- * Site information available to all plugins
- */
-interface SiteInfo {
-  /** Site name (from settings) */
-  name: string;
-  /** Site URL (from settings or request) */
-  url: string;
-  /** Site locale (from settings, defaults to "en") */
-  locale: string;
-}
-/**
- * Read-only user information exposed to plugins.
- * Sensitive fields (password hashes, sessions, passkeys) are excluded.
- */
-interface UserInfo {
-  id: string;
-  email: string;
-  name: string | null;
-  role: number;
-  createdAt: string;
-}
-/**
- * User access interface - requires users:read capability
- */
-interface UserAccess {
-  /** Get a user by ID */
-  get(id: string): Promise<UserInfo | null>;
-  /** Get a user by email */
-  getByEmail(email: string): Promise<UserInfo | null>;
-  /** List users with optional filters */
-  list(opts?: {
-    role?: number;
-    limit?: number;
-    cursor?: string;
-  }): Promise<{
-    items: UserInfo[];
-    nextCursor?: string;
-  }>;
-}
-/**
- * The unified plugin context - same shape for all hooks and routes
- */
-interface PluginContext<TStorage extends PluginStorageConfig = PluginStorageConfig> {
-  /** Plugin metadata */
-  plugin: {
-    id: string;
-    version: string;
-  };
-  /** Storage collections - only if plugin declares storage */
-  storage: PluginStorage<TStorage>;
-  /** Key-value store for config and state */
-  kv: KVAccess;
-  /** Content access - only if content:read or content:write capability */
-  content?: ContentAccess | ContentAccessWithWrite;
-  /** Media access - only if media:read or media:write capability */
-  media?: MediaAccess | MediaAccessWithWrite;
-  /** HTTP client - only if network:request capability */
-  http?: HttpAccess;
-  /** Logger - always available */
-  log: LogAccess;
-  /** Site information - always available */
-  site: SiteInfo;
-  /** URL helper - generates absolute URLs from paths. Always available. */
-  url(path: string): string;
-  /** User access - only if users:read capability */
-  users?: UserAccess;
-  /** Cron task scheduling - always available, scoped to plugin */
-  cron?: CronAccess;
-  /** Email access - only if email:send capability and a provider is configured */
-  email?: EmailAccess;
-}
-/**
- * Cron access interface �� always available on plugin context, scoped to plugin.
- */
-interface CronAccess {
-  /** Schedule a recurring or one-shot task */
-  schedule(name: string, opts: {
-    schedule: string;
-    data?: Record<string, unknown>;
-  }): Promise<void>;
-  /** Cancel a scheduled task */
-  cancel(name: string): Promise<void>;
-  /** List this plugin's scheduled tasks */
-  list(): Promise<CronTaskInfo[]>;
-}
-/**
- * Task info returned from CronAccess.list()
- */
-interface CronTaskInfo {
-  name: string;
-  schedule: string;
-  nextRunAt: string;
-  lastRunAt: string | null;
-}
-/**
- * Event passed to the `cron` hook handler
- */
-interface CronEvent {
-  name: string;
-  data?: Record<string, unknown>;
-  scheduledAt: string;
-}
-/**
- * Cron hook handler type
- */
-type CronHandler = (event: CronEvent, ctx: PluginContext) => Promise<void>;
-/**
- * Email access interface — requires `email:send` capability.
- * Undefined when no `email:deliver` provider is configured.
- *
- * Related capabilities:
- * - `email:send` — grants ctx.email (this interface)
- * - `hooks.email-transport:register` — allows registering the `email:deliver` exclusive hook
- * - `hooks.email-events:register` — allows registering `email:beforeSend` / `email:afterSend` hooks
- */
-interface EmailAccess {
-  send(message: EmailMessage): Promise<void>;
-}
-/**
- * Email message shape
- */
-interface EmailMessage {
-  to: string;
-  subject: string;
-  text: string;
-  html?: string;
-}
-/**
- * Event passed to email:beforeSend hooks (middleware — transform, validate, cancel)
- */
-interface EmailBeforeSendEvent {
-  message: EmailMessage;
-  /** Where the email originated — "system" for auth emails, plugin ID for plugin emails */
-  source: string;
-}
-/**
- * Event passed to email:deliver hook (exclusive — exactly one provider delivers)
- */
-interface EmailDeliverEvent {
-  message: EmailMessage;
-  source: string;
-}
-/**
- * Event passed to email:afterSend hooks (logging, analytics, fire-and-forget)
- */
-interface EmailAfterSendEvent {
-  message: EmailMessage;
-  source: string;
-}
-/**
- * Handler type for email:beforeSend hooks.
- * Returns modified message, or false to cancel delivery.
- */
-type EmailBeforeSendHandler = (event: EmailBeforeSendEvent, ctx: PluginContext) => Promise<EmailMessage | false>;
-/**
- * Handler type for email:deliver hooks (exclusive provider).
- */
-type EmailDeliverHandler = (event: EmailDeliverEvent, ctx: PluginContext) => Promise<void>;
-/**
- * Handler type for email:afterSend hooks (fire-and-forget).
- */
-type EmailAfterSendHandler = (event: EmailAfterSendEvent, ctx: PluginContext) => Promise<void>;
-/**
- * Collection comment settings (read from _dineway_collections)
- */
-interface CollectionCommentSettings {
-  commentsEnabled: boolean;
-  commentsModeration: "all" | "first_time" | "none";
-  commentsClosedAfterDays: number;
-  commentsAutoApproveUsers: boolean;
-}
-/**
- * Event passed to comment:beforeCreate hooks (middleware — transform, enrich, reject)
- */
-interface CommentBeforeCreateEvent {
-  comment: {
-    collection: string;
-    contentId: string;
-    parentId: string | null;
-    authorName: string;
-    authorEmail: string;
-    authorUserId: string | null;
-    body: string;
-    ipHash: string | null;
-    userAgent: string | null;
-  };
-  /** Metadata bag — plugins can attach signals for the moderator */
-  metadata: Record<string, unknown>;
-}
-/**
- * Event passed to comment:moderate hook (exclusive — decides initial status)
- */
-interface CommentModerateEvent {
-  comment: CommentBeforeCreateEvent["comment"];
-  metadata: Record<string, unknown>;
-  collectionSettings: CollectionCommentSettings;
-  /** Number of prior approved comments from this email address */
-  priorApprovedCount: number;
-}
-/**
- * Moderation decision returned by the comment:moderate handler
- */
-interface ModerationDecision {
-  status: "approved" | "pending" | "spam";
-  /** Optional reason for admin visibility */
-  reason?: string;
-}
-/**
- * Stored comment shape (full record with id, status, timestamps)
- */
-interface StoredComment {
-  id: string;
-  collection: string;
-  contentId: string;
-  parentId: string | null;
-  authorName: string;
-  authorEmail: string;
-  authorUserId: string | null;
-  body: string;
-  status: string;
-  moderationMetadata: Record<string, unknown> | null;
-  createdAt: string;
-  updatedAt: string;
-}
-/**
- * Event passed to comment:afterCreate hooks (fire-and-forget)
- */
-interface CommentAfterCreateEvent {
-  comment: StoredComment;
-  metadata: Record<string, unknown>;
-  /** The content item the comment is on */
-  content: {
-    id: string;
-    collection: string;
-    slug: string;
-    title?: string;
-  };
-  /** The content author (for notifications) */
-  contentAuthor?: {
-    id: string;
-    name: string | null;
-    email: string;
-  };
-}
-/**
- * Event passed to comment:afterModerate hooks (fire-and-forget, admin status change)
- */
-interface CommentAfterModerateEvent {
-  comment: StoredComment;
-  previousStatus: string;
-  newStatus: string;
-  /** The admin who moderated */
-  moderator: {
-    id: string;
-    name: string | null;
-  };
-}
-/**
- * Handler type for comment:beforeCreate hooks.
- * Returns modified event, or false to reject the comment.
- */
-type CommentBeforeCreateHandler = (event: CommentBeforeCreateEvent, ctx: PluginContext) => Promise<CommentBeforeCreateEvent | false | void>;
-/**
- * Handler type for comment:moderate hook (exclusive provider).
- */
-type CommentModerateHandler = (event: CommentModerateEvent, ctx: PluginContext) => Promise<ModerationDecision>;
-/**
- * Handler type for comment:afterCreate hooks (fire-and-forget).
- */
-type CommentAfterCreateHandler = (event: CommentAfterCreateEvent, ctx: PluginContext) => Promise<void>;
-/**
- * Handler type for comment:afterModerate hooks (fire-and-forget).
- */
-type CommentAfterModerateHandler = (event: CommentAfterModerateEvent, ctx: PluginContext) => Promise<void>;
-/**
- * Hook configuration
- */
-interface HookConfig<THandler> {
-  /** Explicit ordering - lower numbers run first (default: 100) */
-  priority?: number;
-  /** Max execution time in ms (default: 5000) */
-  timeout?: number;
-  /** Run after these plugins */
-  dependencies?: string[];
-  /** Error handling policy */
-  errorPolicy?: "continue" | "abort";
-  /**
-   * Mark this hook as exclusive — only one plugin can be the active provider.
-   * Exclusive hooks skip the priority pipeline and dispatch only to the
-   * admin-selected provider. Used for email:deliver, search, image optimization, etc.
-   */
-  exclusive?: boolean;
-  /** The hook handler */
-  handler: THandler;
-}
-/**
- * Content hook event
- */
-interface ContentHookEvent {
-  content: Record<string, unknown>;
-  collection: string;
-  isNew: boolean;
-}
-/**
- * Content delete hook event
- */
-interface ContentDeleteEvent {
-  id: string;
-  collection: string;
-  permanent: boolean;
-}
-/**
- * Content state change hook event.
- */
-interface ContentStateChangeEvent {
-  content: Record<string, unknown>;
-  collection: string;
-}
-type ContentPublishStateChangeEvent = ContentStateChangeEvent;
-type ContentRestoreStateChangeEvent = ContentStateChangeEvent;
-type ContentScheduleStateChangeEvent = ContentStateChangeEvent;
-/**
- * Media hook event
- */
-interface MediaUploadEvent {
-  file: {
-    name: string;
-    type: string;
-    size: number;
-  };
-}
-/**
- * Media after upload event
- */
-interface MediaAfterUploadEvent {
-  media: MediaItem;
-}
-/**
- * Lifecycle hook event
- */
-interface LifecycleEvent {}
-/**
- * Uninstall hook event
- */
-interface UninstallEvent {
-  deleteData: boolean;
-}
-type ContentBeforeSaveHandler = (event: ContentHookEvent, ctx: PluginContext) => Promise<Record<string, unknown> | void>;
-type ContentAfterSaveHandler = (event: ContentHookEvent, ctx: PluginContext) => Promise<void>;
-type ContentBeforeDeleteHandler = (event: ContentDeleteEvent, ctx: PluginContext) => Promise<boolean | void>;
-type ContentAfterDeleteHandler = (event: ContentDeleteEvent, ctx: PluginContext) => Promise<void>;
-type ContentAfterPublishHandler = (event: ContentPublishStateChangeEvent, ctx: PluginContext) => Promise<void>;
-type ContentAfterUnpublishHandler = (event: ContentPublishStateChangeEvent, ctx: PluginContext) => Promise<void>;
-type ContentAfterRestoreHandler = (event: ContentRestoreStateChangeEvent, ctx: PluginContext) => Promise<void>;
-type ContentAfterScheduleHandler = (event: ContentScheduleStateChangeEvent, ctx: PluginContext) => Promise<void>;
-type ContentAfterUnscheduleHandler = (event: ContentScheduleStateChangeEvent, ctx: PluginContext) => Promise<void>;
-type MediaBeforeUploadHandler = (event: MediaUploadEvent, ctx: PluginContext) => Promise<{
-  name: string;
-  type: string;
-  size: number;
-} | void>;
-type MediaAfterUploadHandler = (event: MediaAfterUploadEvent, ctx: PluginContext) => Promise<void>;
-type LifecycleHandler = (event: LifecycleEvent, ctx: PluginContext) => Promise<void>;
-type UninstallHandler = (event: UninstallEvent, ctx: PluginContext) => Promise<void>;
-/** Placement targets for page fragment contributions */
-type PagePlacement = "head" | "body:start" | "body:end";
-/**
- * A single breadcrumb trail item. Used by `PublicPageContext.breadcrumbs`
- * so themes can publish breadcrumb trails that SEO plugins consume.
- */
-interface BreadcrumbItem {
-  /** Display name for this crumb (e.g. "Home", "Blog", "My Post"). */
-  name: string;
-  /** Absolute or root-relative URL for this crumb. */
-  url: string;
-}
-/**
- * Describes the page being rendered. Passed to page hooks so plugins
- * can decide what to contribute without fetching content themselves.
- */
-interface PublicPageContext {
-  url: string;
-  path: string;
-  locale: string | null;
-  kind: "content" | "custom";
-  pageType: string;
-  /** Full document title for the rendered page */
-  title: string | null;
-  /** Page-only title for OG/Twitter/JSON-LD headline output */
-  pageTitle?: string | null;
-  description: string | null;
-  canonical: string | null;
-  image: string | null;
-  content?: {
-    collection: string;
-    id: string;
-    slug: string | null;
-  };
-  /** SEO meta for base metadata generation in DinewayHead */
-  seo?: {
-    ogTitle?: string | null;
-    ogDescription?: string | null;
-    ogImage?: string | null;
-    robots?: string | null;
-  };
-  /** Article metadata for Open Graph article: tags */
-  articleMeta?: {
-    publishedTime?: string | null;
-    modifiedTime?: string | null;
-    author?: string | null;
-  };
-  /** Site name for structured data and og:site_name */
-  siteName?: string;
-  /**
-   * Optional breadcrumb trail for this page, root first. When set,
-   * SEO plugins should use this verbatim rather than deriving a trail
-   * from `path`. Themes typically populate this at the point they
-   * build the context (e.g. from a content hierarchy walk, taxonomy
-   * lookup, or per-`pageType` routing logic).
-   *
-   * Semantics for consumers:
-   *   - `undefined` — theme has no opinion; consumer falls back to
-   *     its own derivation.
-   *   - `[]` — this page has no breadcrumbs (e.g. homepage); consumer
-   *     should skip `BreadcrumbList` emission entirely.
-   *   - Non-empty array — used verbatim for `BreadcrumbList` output.
-   */
-  breadcrumbs?: BreadcrumbItem[];
-  /** Public-facing site URL (origin) for structured data */
-  siteUrl?: string;
-}
-interface PageMetadataEvent {
-  page: PublicPageContext;
-}
-/**
- * Allowed rel values for link contributions.
- * This is a security-critical allowlist -- sandboxed plugins can only inject
- * link tags with these rel values. Adding "stylesheet", "prefetch", "prerender"
- * etc. would allow sandboxed plugins to inject external resources.
- */
-type PageMetadataLinkRel = "canonical" | "alternate" | "author" | "license" | "nlweb" | "site.standard.document";
-type PageMetadataContribution = {
-  kind: "meta";
-  name: string;
-  content: string;
-  key?: string;
-} | {
-  kind: "property";
-  property: string;
-  content: string;
-  key?: string;
-} | {
-  kind: "link";
-  rel: PageMetadataLinkRel;
-  href: string;
-  hreflang?: string;
-  key?: string;
-} | {
-  kind: "jsonld";
-  id?: string;
-  graph: Record<string, unknown> | Array<Record<string, unknown>>;
-};
-type PageMetadataHandler = (event: PageMetadataEvent, ctx: PluginContext) => PageMetadataContribution | PageMetadataContribution[] | null | Promise<PageMetadataContribution | PageMetadataContribution[] | null>;
-interface PageFragmentEvent {
-  page: PublicPageContext;
-}
-type PageFragmentContribution = {
-  kind: "external-script";
-  placement: PagePlacement;
-  src: string;
-  async?: boolean;
-  defer?: boolean;
-  attributes?: Record<string, string>;
-  key?: string;
-} | {
-  kind: "inline-script";
-  placement: PagePlacement;
-  code: string;
-  attributes?: Record<string, string>;
-  key?: string;
-} | {
-  kind: "html";
-  placement: PagePlacement;
-  html: string;
-  key?: string;
-};
-type PageFragmentHandler = (event: PageFragmentEvent, ctx: PluginContext) => PageFragmentContribution | PageFragmentContribution[] | null | Promise<PageFragmentContribution | PageFragmentContribution[] | null>;
-/**
- * Plugin hooks definition
- */
-interface PluginHooks {
-  "plugin:install"?: HookConfig<LifecycleHandler> | LifecycleHandler;
-  "plugin:activate"?: HookConfig<LifecycleHandler> | LifecycleHandler;
-  "plugin:deactivate"?: HookConfig<LifecycleHandler> | LifecycleHandler;
-  "plugin:uninstall"?: HookConfig<UninstallHandler> | UninstallHandler;
-  "content:beforeSave"?: HookConfig<ContentBeforeSaveHandler> | ContentBeforeSaveHandler;
-  "content:afterSave"?: HookConfig<ContentAfterSaveHandler> | ContentAfterSaveHandler;
-  "content:beforeDelete"?: HookConfig<ContentBeforeDeleteHandler> | ContentBeforeDeleteHandler;
-  "content:afterDelete"?: HookConfig<ContentAfterDeleteHandler> | ContentAfterDeleteHandler;
-  "content:afterPublish"?: HookConfig<ContentAfterPublishHandler> | ContentAfterPublishHandler;
-  "content:afterUnpublish"?: HookConfig<ContentAfterUnpublishHandler> | ContentAfterUnpublishHandler;
-  "content:afterRestore"?: HookConfig<ContentAfterRestoreHandler> | ContentAfterRestoreHandler;
-  "content:afterSchedule"?: HookConfig<ContentAfterScheduleHandler> | ContentAfterScheduleHandler;
-  "content:afterUnschedule"?: HookConfig<ContentAfterUnscheduleHandler> | ContentAfterUnscheduleHandler;
-  "media:beforeUpload"?: HookConfig<MediaBeforeUploadHandler> | MediaBeforeUploadHandler;
-  "media:afterUpload"?: HookConfig<MediaAfterUploadHandler> | MediaAfterUploadHandler;
-  cron?: HookConfig<CronHandler> | CronHandler;
-  "email:beforeSend"?: HookConfig<EmailBeforeSendHandler> | EmailBeforeSendHandler;
-  "email:deliver"?: HookConfig<EmailDeliverHandler> | EmailDeliverHandler;
-  "email:afterSend"?: HookConfig<EmailAfterSendHandler> | EmailAfterSendHandler;
-  "comment:beforeCreate"?: HookConfig<CommentBeforeCreateHandler> | CommentBeforeCreateHandler;
-  "comment:moderate"?: HookConfig<CommentModerateHandler> | CommentModerateHandler;
-  "comment:afterCreate"?: HookConfig<CommentAfterCreateHandler> | CommentAfterCreateHandler;
-  "comment:afterModerate"?: HookConfig<CommentAfterModerateHandler> | CommentAfterModerateHandler;
-  "page:metadata"?: HookConfig<PageMetadataHandler> | PageMetadataHandler;
-  "page:fragments"?: HookConfig<PageFragmentHandler> | PageFragmentHandler;
-}
-/**
- * Hook names
- */
-type HookName = keyof PluginHooks;
-/**
- * Hook metadata entry in a plugin manifest.
- * Replaces the plain hook name string with structured metadata.
- */
-interface ManifestHookEntry {
-  name: string;
-  exclusive?: boolean;
-  priority?: number;
-  timeout?: number;
-}
-/**
- * Route metadata entry in a plugin manifest.
- * Replaces the plain route name string with structured metadata.
- */
-interface ManifestRouteEntry {
-  name: string;
-  public?: boolean;
-}
-/**
- * Resolved hook with normalized config
- */
-interface ResolvedHook<THandler> {
-  priority: number;
-  timeout: number;
-  dependencies: string[];
-  errorPolicy: "continue" | "abort";
-  /** Whether this hook is exclusive (provider pattern) */
-  exclusive: boolean;
-  handler: THandler;
-  pluginId: string;
-}
-/**
- * Geographic location information derived from the request.
- * Available when the host runtime provides geographic request metadata
- * (for example via a `request.cf` object).
- */
-interface GeoInfo {
-  country: string | null;
-  region: string | null;
-  city: string | null;
-}
-/**
- * Normalized request metadata available to plugin route handlers.
- * Extracted from request headers and platform-specific properties.
- */
-interface RequestMeta {
-  ip: string | null;
-  userAgent: string | null;
-  referer: string | null;
-  geo: GeoInfo | null;
-}
-type PluginRouteBodyMode = "json" | "raw";
-type PluginRouteMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
-type PluginActorType = "user" | "api_token" | "system";
-type PluginAuthMethod = "session" | "api_token" | "oauth_token" | "system";
-interface PluginActor {
-  type: PluginActorType;
-  id: string;
-  userId: string | null;
-  role: RoleLevel;
-  authMethod: PluginAuthMethod;
-  tokenScopes?: readonly string[];
-}
-interface PluginTargetScope {
-  type: "plugin" | "location" | "entity";
-  id: string;
-  /** Canonical Site Context scope used for HITL and activity inheritance. */
-  scope: string;
-  locationId?: string;
-}
-interface PluginRouteAuthorization {
-  /** Core RBAC permission checked before route dispatch. */
-  permission: Permission;
-  /** API/OAuth tokens must hold at least one listed scope. */
-  anyOfTokenScopes: string[];
-  /** First-party domain permission checked against the resolved target. */
-  restaurantPermission?: string;
-}
-interface PluginRouteTargetContext extends PluginContext {
-  actor: PluginActor;
-  request: Request;
-  requestMeta: RequestMeta;
-}
-interface PluginRouteTargetAuthorizationRequest<TInput = unknown> {
-  restaurantPermission: string;
-  target: PluginTargetScope;
-  context: RouteContext<TInput> & {
-    readonly actor: PluginActor;
-    readonly target: PluginTargetScope;
-  };
-}
-type PluginRouteTargetAuthorizer<TInput = unknown> = (request: PluginRouteTargetAuthorizationRequest<TInput>) => Promise<void>;
-/**
- * Route handler context extends plugin context with request-specific data
- */
-interface RouteContext<TInput = unknown> extends PluginContext {
-  /** Validated input from request body */
-  input: TInput;
-  /** Exact request bytes for raw-body routes; null for ordinary JSON routes. */
-  readonly rawBody: Uint8Array | null;
-  /** Normalized authenticated actor; null for unauthenticated public routes. */
-  readonly actor: PluginActor | null;
-  /** Server-resolved authorization target when the route declares one. */
-  readonly target: PluginTargetScope | null;
-  /** Original request */
-  request: Request;
-  /** Normalized request metadata (IP, user agent, geo) */
-  requestMeta: RequestMeta;
-}
-/**
- * Route definition
- */
-interface PluginRoute<TInput = unknown> {
-  /** Restrict trusted route invocation to these HTTP methods. Omit for legacy all-method behavior. */
-  methods?: readonly PluginRouteMethod[];
-  /** Zod schema for input validation */
-  input?: z.ZodType<TInput>;
-  /** Request-body handling mode. Defaults to JSON. */
-  body?: PluginRouteBodyMode;
-  /** Maximum bytes accepted by a raw-body route. JSON routes cannot set this field. */
-  maxBodyBytes?: number;
-  /** Declarative private-route authorization. */
-  authorization?: PluginRouteAuthorization;
-  /** Resolve the authoritative restaurant target before the handler runs. */
-  resolveTarget?: (input: TInput, context: PluginRouteTargetContext) => PluginTargetScope | Promise<PluginTargetScope>;
-  /** Enforce the declared restaurant permission against the resolved target. */
-  authorizeTarget?: PluginRouteTargetAuthorizer<TInput>;
-  /**
-   * Mark this route as publicly accessible (no authentication required).
-   * Public routes skip session/token auth and CSRF checks.
-   */
-  public?: boolean;
-  /** Route handler */
-  handler: (ctx: RouteContext<TInput>) => Promise<unknown>;
-}
-type PluginMcpPiiClass = "none" | "redacted" | "sensitive";
-type PluginMcpRiskLevel = "quick_confirmation" | "strong_confirmation";
-type PluginMcpRiskFactor = "content" | "availability" | "time" | "money" | "allergen" | "pii" | "batch" | "payment" | "destructive" | "external_side_effect";
-type PluginMcpReversibility = "reversible" | "compensating" | "irreversible";
-interface PluginMcpExecutionContext {
-  plugin: {
-    id: string;
-    version: string;
-  };
-  actor: PluginActor;
-  db: Kysely<Database>;
-  storage: Storage | null;
-  /** Plugin-scoped outbound HTTP with the plugin's SSRF and capability policy. */
-  http?: HttpAccess;
-  reviewedExecution?: {
-    id: string;
-    hitlRequestId: string | null;
-    actionHash: string;
-    idempotencyKey: string;
-  };
-}
-interface PluginMcpTargetAuthorizationRequest {
-  restaurantPermission: string;
-  target: PluginTargetScope;
-  context: PluginMcpExecutionContext;
-}
-type PluginMcpTargetAuthorizer = (request: PluginMcpTargetAuthorizationRequest) => Promise<void>;
-interface PluginMcpAuthorization {
-  /** Core RBAC permission checked for every request. */
-  permission: Permission;
-  /** Any listed token scope permits the request; `admin` remains a universal scope. */
-  anyOfTokenScopes: string[];
-  /** Optional first-party domain permission checked by the core target authorizer. */
-  restaurantPermission?: string;
-}
-interface PluginMcpPiiPolicy {
-  input: PluginMcpPiiClass;
-  output: PluginMcpPiiClass;
-}
-interface PluginMcpCommandPreview {
-  summary: string;
-  target: PluginTargetScope;
-  before?: Record<string, unknown>;
-  after?: Record<string, unknown>;
-  metadata?: Record<string, unknown>;
-}
-interface PluginMcpToolBase {
-  name: string;
-  title: string;
-  description: string;
-  inputSchema: AnySchema;
-  outputSchema?: AnySchema;
-  authorization: PluginMcpAuthorization;
-  pii: PluginMcpPiiPolicy;
-  resolveTarget?: (input: Record<string, unknown>, context: PluginMcpExecutionContext) => Promise<PluginTargetScope> | PluginTargetScope;
-  handler: (input: Record<string, unknown>, context: PluginMcpExecutionContext) => Promise<Record<string, unknown>>;
-}
-interface PluginMcpQueryTool extends PluginMcpToolBase {
-  kind: "query";
-}
-interface PluginMcpCommandTool extends PluginMcpToolBase {
-  kind: "command";
-  risk: {
-    level: PluginMcpRiskLevel;
-    mandatory: boolean;
-    reason: string;
-    factors: PluginMcpRiskFactor[];
-  };
-  audit: "best_effort" | "strict";
-  reversibility: PluginMcpReversibility;
-  preview: (input: Record<string, unknown>, context: PluginMcpExecutionContext) => Promise<PluginMcpCommandPreview>;
-  actionFingerprint: (input: Record<string, unknown>, preview: PluginMcpCommandPreview, context: PluginMcpExecutionContext) => Promise<Record<string, unknown>> | Record<string, unknown>;
-  idempotency: {
-    required: true;
-    namespace?: string;
-  };
-  redactPreview?: (preview: PluginMcpCommandPreview, context: PluginMcpExecutionContext) => Promise<PluginMcpCommandPreview> | PluginMcpCommandPreview;
-}
-type PluginMcpTool = PluginMcpQueryTool | PluginMcpCommandTool;
-interface PluginMcpResourceContent {
-  text: string;
-  mimeType?: string;
-}
-interface PluginMcpResource {
-  name: string;
-  title: string;
-  description: string;
-  uri: string;
-  mimeType?: string;
-  authorization: PluginMcpAuthorization;
-  pii: {
-    output: PluginMcpPiiClass;
-  };
-  target?: PluginTargetScope;
-  handler: (uri: URL, context: PluginMcpExecutionContext) => Promise<PluginMcpResourceContent>;
-}
-interface PluginMcpConfig {
-  tools?: PluginMcpTool[];
-  resources?: PluginMcpResource[];
-  /** Trusted first-party domain authorization invoked by the core wrapper. */
-  authorizeTarget?: PluginMcpTargetAuthorizer;
-}
-interface ResolvedPluginMcpConfig {
-  tools: PluginMcpTool[];
-  resources: PluginMcpResource[];
-  authorizeTarget?: PluginMcpTargetAuthorizer;
-}
-/**
- * Admin page definition
- */
-interface PluginAdminPage {
-  path: string;
-  label: string;
-  icon?: string;
-}
-/**
- * Dashboard widget definition
- */
-interface PluginDashboardWidget {
-  id: string;
-  size?: "full" | "half" | "third";
-  title?: string;
-}
-/**
- * Settings field types (for admin UI generation)
- */
-type SettingFieldType = "string" | "number" | "boolean" | "select" | "secret" | "url" | "email";
-interface BaseSettingField {
-  type: SettingFieldType;
-  label: string;
-  description?: string;
-}
-interface StringSettingField extends BaseSettingField {
-  type: "string";
-  default?: string;
-  multiline?: boolean;
-}
-interface NumberSettingField extends BaseSettingField {
-  type: "number";
-  default?: number;
-  min?: number;
-  max?: number;
-}
-interface BooleanSettingField extends BaseSettingField {
-  type: "boolean";
-  default?: boolean;
-}
-interface SelectSettingField extends BaseSettingField {
-  type: "select";
-  options: Array<{
-    value: string;
-    label: string;
-  }>;
-  default?: string;
-}
-interface SecretSettingField extends BaseSettingField {
-  type: "secret";
-}
-interface UrlSettingField extends BaseSettingField {
-  type: "url";
-  default?: string;
-  placeholder?: string;
-}
-interface EmailSettingField extends BaseSettingField {
-  type: "email";
-  default?: string;
-  placeholder?: string;
-}
-type SettingField = StringSettingField | NumberSettingField | BooleanSettingField | SelectSettingField | SecretSettingField | UrlSettingField | EmailSettingField;
-/**
- * Block Kit element for block editing fields.
- * This is the `Element` discriminated union from `@dineway-ai/blocks`.
- * Plugin authors should use `@dineway-ai/blocks` builder functions to create these.
- */
-type PortableTextBlockField = Element;
-/**
- * Configuration for a Portable Text block type contributed by a plugin
- */
-interface PortableTextBlockConfig {
-  /** Block type name (must match the `_type` in Portable Text) */
-  type: string;
-  /** Human-readable label shown in slash commands and modals */
-  label: string;
-  /** Icon key (e.g., "video", "code", "link", "link-external") */
-  icon?: string;
-  /** Description shown in slash command menu */
-  description?: string;
-  /** Placeholder text for the URL input */
-  placeholder?: string;
-  /** Block Kit form fields for the editing UI. If declared, replaces the simple URL input. */
-  fields?: PortableTextBlockField[];
-  /**
-   * Optional display category in the slash menu. Defaults to "Embeds".
-   *
-   * Plugin authors should pick a meaningful category that reflects what the
-   * block actually is, for example "Sections", "Marketing", "Media",
-   * "Embeds", or "Layout".
-   */
-  category?: string;
-}
-/**
- * Configuration for a field widget type contributed by a plugin.
- * A field widget provides a custom editing UI for a schema field.
- * The field references the widget via `widget: "pluginId:widgetName"`.
- */
-interface FieldWidgetConfig {
-  /** Widget name (without plugin ID prefix) */
-  name: string;
-  /** Human-readable label for the admin UI */
-  label: string;
-  /** Which field types this widget can edit (e.g., ["json", "string"]) */
-  fieldTypes: FieldType[];
-  /** Block Kit elements for sandboxed rendering. Omit for trusted plugins using React. */
-  elements?: Element[];
-}
-/**
- * Admin configuration
- */
-interface PluginAdminConfig {
-  /** Module specifier for admin UI exports (e.g., "@dineway-ai/plugin-audit-log/admin") */
-  entry?: string;
-  /** Settings schema for auto-generated UI */
-  settingsSchema?: Record<string, SettingField>;
-  /** Admin pages */
-  pages?: PluginAdminPage[];
-  /** Dashboard widgets */
-  widgets?: PluginDashboardWidget[];
-  /** Portable Text block types this plugin provides */
-  portableTextBlocks?: PortableTextBlockConfig[];
-  /** Field widget types this plugin provides */
-  fieldWidgets?: FieldWidgetConfig[];
-}
-/**
- * Plugin definition - input to definePlugin()
- */
-interface PluginDefinition<TStorage extends PluginStorageConfig = PluginStorageConfig> {
-  /** Unique plugin identifier */
-  id: string;
-  /** Plugin version (semver) */
-  version: string;
-  /** Declared capabilities */
-  capabilities?: PluginCapability[];
-  /** Allowed hosts for network:request (wildcards supported: *.example.com) */
-  allowedHosts?: string[];
-  /** Storage collections with indexes */
-  storage?: TStorage;
-  /** Hooks */
-  hooks?: PluginHooks;
-  /** API routes */
-  routes?: Record<string, PluginRoute>;
-  /** Native first-party MCP tools and read-only resources. */
-  mcp?: PluginMcpConfig;
-  /** Admin UI configuration */
-  admin?: PluginAdminConfig;
-}
-/**
- * Resolved plugin - after definePlugin() processing
- */
-interface ResolvedPlugin<TStorage extends PluginStorageConfig = PluginStorageConfig> {
-  id: string;
-  version: string;
-  capabilities: PluginCapability[];
-  allowedHosts: string[];
-  storage: TStorage;
-  hooks: ResolvedPluginHooks;
-  routes: Record<string, PluginRoute>;
-  mcp: ResolvedPluginMcpConfig;
-  admin: PluginAdminConfig;
-}
-/**
- * Resolved hooks with normalized config
- */
-interface ResolvedPluginHooks {
-  "plugin:install"?: ResolvedHook<LifecycleHandler>;
-  "plugin:activate"?: ResolvedHook<LifecycleHandler>;
-  "plugin:deactivate"?: ResolvedHook<LifecycleHandler>;
-  "plugin:uninstall"?: ResolvedHook<UninstallHandler>;
-  "content:beforeSave"?: ResolvedHook<ContentBeforeSaveHandler>;
-  "content:afterSave"?: ResolvedHook<ContentAfterSaveHandler>;
-  "content:beforeDelete"?: ResolvedHook<ContentBeforeDeleteHandler>;
-  "content:afterDelete"?: ResolvedHook<ContentAfterDeleteHandler>;
-  "content:afterPublish"?: ResolvedHook<ContentAfterPublishHandler>;
-  "content:afterUnpublish"?: ResolvedHook<ContentAfterUnpublishHandler>;
-  "content:afterRestore"?: ResolvedHook<ContentAfterRestoreHandler>;
-  "content:afterSchedule"?: ResolvedHook<ContentAfterScheduleHandler>;
-  "content:afterUnschedule"?: ResolvedHook<ContentAfterUnscheduleHandler>;
-  "media:beforeUpload"?: ResolvedHook<MediaBeforeUploadHandler>;
-  "media:afterUpload"?: ResolvedHook<MediaAfterUploadHandler>;
-  cron?: ResolvedHook<CronHandler>;
-  "email:beforeSend"?: ResolvedHook<EmailBeforeSendHandler>;
-  "email:deliver"?: ResolvedHook<EmailDeliverHandler>;
-  "email:afterSend"?: ResolvedHook<EmailAfterSendHandler>;
-  "comment:beforeCreate"?: ResolvedHook<CommentBeforeCreateHandler>;
-  "comment:moderate"?: ResolvedHook<CommentModerateHandler>;
-  "comment:afterCreate"?: ResolvedHook<CommentAfterCreateHandler>;
-  "comment:afterModerate"?: ResolvedHook<CommentAfterModerateHandler>;
-  "page:metadata"?: ResolvedHook<PageMetadataHandler>;
-  "page:fragments"?: ResolvedHook<PageFragmentHandler>;
-}
-/**
- * Standard plugin hook handler -- same as sandbox entry format.
- * Receives the event as the first argument and a PluginContext as the second.
- *
- * Plugin authors annotate their event parameters with specific types for IDE
- * support. At the type level, we accept any function with compatible arity.
- */
-type StandardHookHandler = (...args: any[]) => Promise<any>;
-/**
- * Standard plugin hook entry -- either a bare handler or a config object.
- */
-type StandardHookEntry = StandardHookHandler | {
-  handler: StandardHookHandler;
-  priority?: number;
-  timeout?: number;
-  dependencies?: string[];
-  errorPolicy?: "continue" | "abort";
-  exclusive?: boolean;
-};
-/**
- * Standard plugin route handler -- takes (routeCtx, pluginCtx) like sandbox entries.
- * The routeCtx contains input and request info; pluginCtx is the full plugin context.
- *
- * Uses `any` for routeCtx to allow plugins to access properties like
- * `routeCtx.request.url` without needing exact type matches across
- * trusted (Request object) and sandboxed (plain object) modes.
- */
-type StandardRouteHandler = (routeCtx: any, ctx: PluginContext) => Promise<unknown>;
-/**
- * Standard plugin route entry -- either a config object with handler, or just a handler.
- */
-interface StandardRouteEntry {
-  handler: StandardRouteHandler;
-  input?: unknown;
-  public?: boolean;
-}
-/**
- * Standard plugin definition -- the sandbox entry format.
- * Used by standard plugins that work in both trusted and sandboxed modes.
- * No id/version/capabilities -- those come from the descriptor.
- *
- * This is the input to definePlugin() for standard-format plugins.
- *
- * The hooks and routes use permissive types (Record<string, any>) so that
- * plugin authors can annotate their handlers with specific event types
- * without type errors from strictFunctionTypes contravariance.
- */
-interface StandardPluginDefinition {
-  hooks?: Record<string, any>;
-  routes?: Record<string, any>;
-}
-/**
- * Check if a value is a StandardPluginDefinition (has hooks/routes but no id/version).
- */
-declare function isStandardPluginDefinition(value: unknown): value is StandardPluginDefinition;
-/**
- * What a plugin exports from its /admin entrypoint
- * Uses generic component type to avoid React dependency
- */
-interface PluginAdminExports {
-  widgets?: Record<string, JSX.Element>;
-  pages?: Record<string, JSX.Element>;
-  fields?: Record<string, JSX.Element>;
-}
-/**
- * Plugin manifest - the metadata portion of a plugin bundle
- * Used for sandboxed plugins loaded from marketplace
- */
-interface PluginManifest {
-  id: string;
-  version: string;
-  declaredAccess?: DeclaredAccess;
-  capabilities: PluginCapability[];
-  allowedHosts: string[];
-  storage: PluginStorageConfig;
-  /** Hook declarations — either plain name strings or structured objects */
-  hooks: Array<ManifestHookEntry | HookName>;
-  /** Route declarations — either plain name strings or structured objects */
-  routes: Array<ManifestRouteEntry | string>;
-  admin: PluginAdminConfig;
-}
-//#endregion
-export { PluginMcpQueryTool as $, PageMetadataContribution as A, StorageCollection as At, PluginAuthMethod as B, MediaAccess as C, ResolvedPluginMcpConfig as Ct, PageFragmentContribution as D, StandardPluginDefinition as Dt, ModerationDecision as E, StandardHookHandler as Et, PluginActor as F, PluginManifest as G, PluginContext as H, PluginActorType as I, PluginMcpCommandTool as J, PluginMcpAuthorization as K, PluginAdminConfig as L, PageMetadataHandler as M, StoredComment as Mt, PageMetadataLinkRel as N, isStandardPluginDefinition as Nt, PageFragmentEvent as O, StandardRouteEntry as Ot, PagePlacement as P, Element as Pt, PluginMcpPiiPolicy as Q, PluginAdminExports as R, LogAccess as S, ResolvedPluginHooks as St, MediaUploadEvent as T, StandardHookEntry as Tt, PluginDefinition as U, PluginCapability as V, PluginHooks as W, PluginMcpExecutionContext as X, PluginMcpConfig as Y, PluginMcpPiiClass as Z, FieldWidgetConfig as _, PortableTextBlockField as _t, CommentAfterModerateEvent as a, PluginMcpTargetAuthorizer as at, HttpAccess as b, ResolvedHook as bt, CommentBeforeCreateHandler as c, PluginRouteAuthorization as ct, ContentAccess as d, PluginRouteTargetAuthorizationRequest as dt, PluginMcpResource as et, ContentDeleteEvent as f, PluginRouteTargetAuthorizer as ft, EmailMessage as g, PortableTextBlockConfig as gt, CronEvent as h, PluginTargetScope as ht, CommentAfterCreateHandler as i, PluginMcpRiskLevel as it, PageMetadataEvent as j, StorageCollectionConfig as jt, PageFragmentHandler as k, StandardRouteHandler as kt, CommentModerateEvent as l, PluginRouteBodyMode as lt, ContentPublishStateChangeEvent as m, PluginStorageConfig as mt, CollectionCommentSettings as n, PluginMcpReversibility as nt, CommentAfterModerateHandler as o, PluginMcpTool as ot, ContentHookEvent as p, PluginRouteTargetContext as pt, PluginMcpCommandPreview as q, CommentAfterCreateEvent as r, PluginMcpRiskFactor as rt, CommentBeforeCreateEvent as s, PluginRoute as st, BreadcrumbItem as t, PluginMcpResourceContent as tt, CommentModerateHandler as u, PluginRouteMethod as ut, HookConfig as v, PublicPageContext as vt, MediaItem as w, RouteContext as wt, KVAccess as x, ResolvedPlugin as xt, HookName as y, RequestMeta as yt, PluginAdminPage as z };