dineway 0.2.1 → 0.2.3

package/dist/store-CCfMD6nw.mjs

@@ -0,0 +1,262 @@
+import { i as encodeBase64url, n as decodeBase64url } from "./base64-F8-DUraK.mjs";
+import { i as parseEncryptionKeys, t as DinewaySecretsError } from "./secrets-CpGpyGcO.mjs";
+
+//#region src/database/repositories/integration-credentials.ts
+var IntegrationCredentialRepository = class {
+	constructor(db) {
+		this.db = db;
+	}
+	async put(input) {
+		const now = input.updatedAt ?? (/* @__PURE__ */ new Date()).toISOString();
+		const row = {
+			provider: input.provider,
+			credential_type: input.credentialType,
+			encryption_version: input.encryptionVersion,
+			key_id: input.keyId,
+			nonce: input.nonce,
+			ciphertext: input.ciphertext,
+			fingerprint: input.fingerprint,
+			source: input.source,
+			created_at: now,
+			updated_at: now
+		};
+		await this.db.insertInto("_dineway_integration_credentials").values(row).onConflict((conflict) => conflict.column("provider").doUpdateSet({
+			credential_type: row.credential_type,
+			encryption_version: row.encryption_version,
+			key_id: row.key_id,
+			nonce: row.nonce,
+			ciphertext: row.ciphertext,
+			fingerprint: row.fingerprint,
+			source: row.source,
+			updated_at: now
+		})).execute();
+		const stored = await this.find(input.provider);
+		if (!stored) throw new Error("Integration credential write did not persist.");
+		return stored;
+	}
+	async find(provider) {
+		const row = await this.db.selectFrom("_dineway_integration_credentials").selectAll().where("provider", "=", provider).executeTakeFirst();
+		return row ? toStored(row) : null;
+	}
+	async list() {
+		return (await this.db.selectFrom("_dineway_integration_credentials").selectAll().orderBy("provider", "asc").execute()).map(toStored);
+	}
+	async delete(provider) {
+		const result = await this.db.deleteFrom("_dineway_integration_credentials").where("provider", "=", provider).executeTakeFirst();
+		return Number(result.numDeletedRows ?? 0) > 0;
+	}
+};
+function toStored(row) {
+	return {
+		provider: row.provider,
+		credentialType: row.credential_type,
+		encryptionVersion: row.encryption_version,
+		keyId: row.key_id,
+		nonce: row.nonce,
+		ciphertext: row.ciphertext,
+		fingerprint: row.fingerprint,
+		source: row.source,
+		createdAt: row.created_at,
+		updatedAt: row.updated_at
+	};
+}
+
+//#endregion
+//#region src/integration-credentials/store.ts
+const ENCRYPTION_VERSION = 1;
+const AES_GCM_NONCE_BYTES = 12;
+const MAX_CREDENTIAL_BYTES = 65536;
+const PROVIDER_PATTERN = /^[a-z][a-z0-9.-]{0,99}$/;
+var IntegrationCredentialStore = class {
+	repository;
+	keysPromise;
+	constructor(db, options = {}) {
+		this.repository = new IntegrationCredentialRepository(db);
+		this.keysPromise = options.keys ? Promise.resolve(options.keys) : parseEncryptionKeys(readEncryptionKey(options.env));
+	}
+	async set(provider, credential, source = "admin") {
+		validateProvider(provider);
+		validateCredential(credential);
+		const primaryKey = (await this.requireKeys())[0];
+		if (!primaryKey) throw encryptionKeyRequired();
+		const serialized = serializeCredential(credential);
+		const encrypted = await encryptCredential(primaryKey, provider, credential.type, serialized);
+		return toStatus(await this.repository.put({
+			provider,
+			credentialType: credential.type,
+			encryptionVersion: ENCRYPTION_VERSION,
+			keyId: primaryKey.kid,
+			nonce: encrypted.nonce,
+			ciphertext: encrypted.ciphertext,
+			fingerprint: await fingerprintCredential(primaryKey, provider, serialized),
+			source
+		}));
+	}
+	async status(provider) {
+		validateProvider(provider);
+		const stored = await this.repository.find(provider);
+		return stored ? toStatus(stored) : null;
+	}
+	async list() {
+		return (await this.repository.list()).map(toStatus);
+	}
+	async delete(provider) {
+		validateProvider(provider);
+		return this.repository.delete(provider);
+	}
+	async resolveForRuntime(provider) {
+		validateProvider(provider);
+		const stored = await this.repository.find(provider);
+		if (!stored) return null;
+		if (stored.encryptionVersion !== ENCRYPTION_VERSION) throw new DinewaySecretsError("The stored Integration credential uses an unsupported encryption version.", "INTEGRATION_CREDENTIAL_VERSION_UNSUPPORTED");
+		const keys = await this.requireKeys();
+		const decryptionKey = keys.find((key) => key.kid === stored.keyId);
+		if (!decryptionKey) throw new DinewaySecretsError("The stored Integration credential cannot be decrypted by the configured key ring.", "INTEGRATION_CREDENTIAL_KEY_UNAVAILABLE");
+		let serialized;
+		try {
+			serialized = await decryptCredential(decryptionKey, stored);
+		} catch {
+			throw new DinewaySecretsError("The stored Integration credential failed authenticated decryption.", "INTEGRATION_CREDENTIAL_DECRYPT_FAILED");
+		}
+		const credential = parseCredential(serialized, stored.credentialType);
+		const primaryKey = keys[0];
+		if (primaryKey && primaryKey.kid !== stored.keyId) {
+			const encrypted = await encryptCredential(primaryKey, provider, credential.type, serialized);
+			await this.repository.put({
+				provider,
+				credentialType: credential.type,
+				encryptionVersion: ENCRYPTION_VERSION,
+				keyId: primaryKey.kid,
+				nonce: encrypted.nonce,
+				ciphertext: encrypted.ciphertext,
+				fingerprint: await fingerprintCredential(primaryKey, provider, serialized),
+				source: stored.source
+			});
+		}
+		return credential;
+	}
+	async requireKeys() {
+		const keys = await this.keysPromise;
+		if (!keys || keys.length === 0) throw encryptionKeyRequired();
+		return keys;
+	}
+};
+async function encryptCredential(key, provider, type, serialized) {
+	const nonce = crypto.getRandomValues(new Uint8Array(AES_GCM_NONCE_BYTES));
+	const cryptoKey = await importAesKey(key, ["encrypt"]);
+	const ciphertext = await crypto.subtle.encrypt({
+		name: "AES-GCM",
+		iv: toArrayBuffer(nonce),
+		additionalData: aad(provider, type, ENCRYPTION_VERSION)
+	}, cryptoKey, new TextEncoder().encode(serialized));
+	return {
+		nonce: encodeBase64url(nonce),
+		ciphertext: encodeBase64url(new Uint8Array(ciphertext))
+	};
+}
+async function decryptCredential(key, stored) {
+	const cryptoKey = await importAesKey(key, ["decrypt"]);
+	const plaintext = await crypto.subtle.decrypt({
+		name: "AES-GCM",
+		iv: toArrayBuffer(decodeBase64url(stored.nonce)),
+		additionalData: aad(stored.provider, stored.credentialType, stored.encryptionVersion)
+	}, cryptoKey, toArrayBuffer(decodeBase64url(stored.ciphertext)));
+	return new TextDecoder("utf-8", { fatal: true }).decode(plaintext);
+}
+async function importAesKey(key, usages) {
+	return crypto.subtle.importKey("raw", toArrayBuffer(key.key), { name: "AES-GCM" }, false, usages);
+}
+function aad(provider, type, version) {
+	return toArrayBuffer(new TextEncoder().encode(JSON.stringify([
+		"dineway-integration-credential",
+		version,
+		provider,
+		type
+	])));
+}
+async function fingerprintCredential(key, provider, serialized) {
+	const hmacKey = await crypto.subtle.importKey("raw", toArrayBuffer(key.key), {
+		name: "HMAC",
+		hash: "SHA-256"
+	}, false, ["sign"]);
+	const digest = await crypto.subtle.sign("HMAC", hmacKey, new TextEncoder().encode(`dineway-integration-credential-fingerprint:v1:${provider}:${serialized}`));
+	return Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("").slice(0, 12);
+}
+function serializeCredential(credential) {
+	return credential.type === "token" ? JSON.stringify({
+		type: "token",
+		value: credential.value
+	}) : JSON.stringify({
+		type: "basic",
+		username: credential.username,
+		password: credential.password
+	});
+}
+function parseCredential(serialized, expectedType) {
+	let value;
+	try {
+		value = JSON.parse(serialized);
+	} catch {
+		throw invalidPayload();
+	}
+	if (!isRecord(value) || value.type !== expectedType) throw invalidPayload();
+	if (expectedType === "token" && typeof value.value === "string") {
+		const credential = {
+			type: "token",
+			value: value.value
+		};
+		validateCredential(credential);
+		return credential;
+	}
+	if (expectedType === "basic" && typeof value.username === "string" && typeof value.password === "string") {
+		const credential = {
+			type: "basic",
+			username: value.username,
+			password: value.password
+		};
+		validateCredential(credential);
+		return credential;
+	}
+	throw invalidPayload();
+}
+function validateProvider(provider) {
+	if (!PROVIDER_PATTERN.test(provider)) throw new DinewaySecretsError("Integration provider must be a lowercase catalog identifier.", "INVALID_INTEGRATION_PROVIDER");
+}
+function validateCredential(credential) {
+	if ((credential.type === "token" ? [credential.value] : [credential.username, credential.password]).some((value) => value.length === 0)) throw invalidPayload();
+	if (new TextEncoder().encode(serializeCredential(credential)).byteLength > MAX_CREDENTIAL_BYTES) throw invalidPayload();
+}
+function invalidPayload() {
+	return new DinewaySecretsError(`Integration credentials must be complete and no larger than ${MAX_CREDENTIAL_BYTES} UTF-8 bytes.`, "INVALID_INTEGRATION_CREDENTIAL");
+}
+function encryptionKeyRequired() {
+	return new DinewaySecretsError("DINEWAY_ENCRYPTION_KEY is required before Integration credentials can be written or decrypted.", "ENCRYPTION_KEY_REQUIRED");
+}
+function readEncryptionKey(env) {
+	if (env) return env.DINEWAY_ENCRYPTION_KEY;
+	const meta = import.meta.env ?? {};
+	const proc = typeof process !== "undefined" && process.env ? process.env : {};
+	return meta.DINEWAY_ENCRYPTION_KEY ?? proc.DINEWAY_ENCRYPTION_KEY;
+}
+function toStatus(stored) {
+	return {
+		provider: stored.provider,
+		type: stored.credentialType,
+		present: true,
+		fingerprint: stored.fingerprint,
+		source: stored.source,
+		createdAt: stored.createdAt,
+		updatedAt: stored.updatedAt
+	};
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function toArrayBuffer(bytes) {
+	const buffer = new ArrayBuffer(bytes.byteLength);
+	new Uint8Array(buffer).set(bytes);
+	return buffer;
+}
+
+//#endregion
+export { IntegrationCredentialStore as t };

package/dist/{taxonomies-BiM9NtgW.mjs → taxonomies-DuhGjBa8.mjs}

@@ -1,6 +1,6 @@
-import { a as __exportAll } from "./runner-BgmttQmD.mjs";
-import { t as TaxonomyRepository } from "./taxonomy-0k_vRVsD.mjs";
-import { c as invalidateTaxonomyDefsCache, l as invalidateTermCache } from "./taxonomies-DSnY5nOa.mjs";
+import { a as __exportAll } from "./runner-BfWbi9YY.mjs";
+import { t as TaxonomyRepository } from "./taxonomy-CCo2plmV.mjs";
+import { c as invalidateTaxonomyDefsCache, l as invalidateTermCache } from "./taxonomies-WVnFki0o.mjs";
 import { ulid } from "ulidx";
 
 //#region src/api/handlers/taxonomies.ts

package/dist/{taxonomies-DSnY5nOa.mjs → taxonomies-WVnFki0o.mjs}

@@ -1,10 +1,10 @@
-import { a as __exportAll } from "./runner-BgmttQmD.mjs";
+import { a as __exportAll } from "./runner-BfWbi9YY.mjs";
 import { getRequestContext } from "./request-context.mjs";
-import { a as resetTaxonomyNamesCache, o as isMissingTableError, r as getDb } from "./loader-aWkkc1_o.mjs";
+import { a as resetTaxonomyNamesCache, o as isMissingTableError, r as getDb } from "./loader-WHf22FwU.mjs";
 import { d as invalidateTaxonomyObjectCache, f as isObjectCacheActive, n as cachedQuery, t as CacheNamespace } from "./object-cache-D51qOseS.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-ChGNDY8r.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-DX_b8_4Z.mjs";
 import { i as setRequestCacheEntry, n as peekRequestCache, r as requestCached } from "./request-cache-CBFjCwSt.mjs";
-import { i as resolveLocaleChain, r as resolveLocale } from "./resolve-DE71WcL9.mjs";
+import { i as resolveLocaleChain, r as resolveLocale } from "./resolve-B6BpqwAR.mjs";
 
 //#region src/taxonomies/index.ts
 /**
@@ -393,7 +393,7 @@ function primeFoldedEntryTerms(collection, perEntry, options = {}) {
 * Get entries by term.
 */
 async function getEntriesByTerm(collection, taxonomyName, termSlug, options = {}) {
-	const { getDinewayCollection } = await import("./query-DEv5x6yB.mjs").then((n) => n.o);
+	const { getDinewayCollection } = await import("./query-C_m8sn-S.mjs").then((n) => n.o);
 	const queryOptions = { where: { [taxonomyName]: termSlug } };
 	if (options.locale !== void 0) queryOptions.locale = options.locale;
 	const { entries } = await getDinewayCollection(collection, queryOptions);

package/dist/{taxonomy-0k_vRVsD.mjs → taxonomy-CCo2plmV.mjs}

@@ -1,4 +1,4 @@
-import { a as __exportAll } from "./runner-BgmttQmD.mjs";
+import { a as __exportAll } from "./runner-BfWbi9YY.mjs";
 import { d as invalidateTaxonomyObjectCache } from "./object-cache-D51qOseS.mjs";
 import { ulid } from "ulidx";
 
@@ -226,7 +226,7 @@ var TaxonomyRepository = class {
 	*/
 	async countEntriesForTerms(translationGroups) {
 		if (translationGroups.length === 0) return /* @__PURE__ */ new Map();
-		const { chunks, SQL_BATCH_SIZE } = await import("./chunks-ChGNDY8r.mjs").then((n) => n.r);
+		const { chunks, SQL_BATCH_SIZE } = await import("./chunks-DX_b8_4Z.mjs").then((n) => n.r);
 		const counts = /* @__PURE__ */ new Map();
 		for (const chunk of chunks(translationGroups, SQL_BATCH_SIZE)) {
 			const rows = await this.db.selectFrom("content_taxonomies").select(["taxonomy_id", (eb) => eb.fn.count("entry_id").as("count")]).where("taxonomy_id", "in", chunk).groupBy("taxonomy_id").execute();

package/dist/{types-DuQn1G7-.d.mts → types-BFeoAIHl.d.mts}

@@ -384,6 +384,18 @@ interface PluginSecretTable {
   created_at: Generated<string>;
   updated_at: Generated<string>;
 }
+interface IntegrationCredentialTable {
+  provider: string;
+  credential_type: "token" | "basic";
+  encryption_version: number;
+  key_id: string;
+  nonce: string;
+  ciphertext: string;
+  fingerprint: string;
+  source: "environment" | "admin";
+  created_at: Generated<string>;
+  updated_at: Generated<string>;
+}
 interface MigrationTable {
   name: string;
   timestamp: string;
@@ -761,6 +773,7 @@ interface Database {
   _dineway_hitl_requests: HitlRequestTable;
   _dineway_hitl_executions: HitlExecutionTable;
   _dineway_plugin_secrets: PluginSecretTable;
+  _dineway_integration_credentials: IntegrationCredentialTable;
   _dineway_migrations: MigrationTable;
   _dineway_collections: CollectionTable;
   _dineway_fields: FieldTable;

package/dist/{types-ChxYDRvx.mjs → types-Bshd_6wQ.mjs}

@@ -1,4 +1,4 @@
-import { a as __exportAll } from "./runner-BgmttQmD.mjs";
+import { a as __exportAll } from "./runner-BfWbi9YY.mjs";
 import { r as encodeBase64, t as decodeBase64 } from "./base64-F8-DUraK.mjs";
 
 //#region src/database/repositories/types.ts

package/dist/{types-opjX_kz6.d.mts → types-GtwhHAg8.d.mts}

@@ -1,4 +1,4 @@
-import { c as CustomFieldValue } from "./types-B_FlxIIl.mjs";
+import { c as CustomFieldValue } from "./types-ywmuDETA.mjs";
 
 //#region src/database/repositories/types.d.ts
 interface CreateContentInput {

package/dist/{types-DwoUifGE.d.mts → types-JovwyJFE.d.mts}

@@ -1,19 +1,20 @@
-import { _ as UpdateFieldInput, d as FieldType, f as FieldValidation, g as UpdateCollectionInput, i as CollectionWithFields, o as CreateCollectionInput, s as CreateFieldInput, t as Collection, u as Field } from "./types-B_FlxIIl.mjs";
-import { f as UpdateContentInput, i as ContentItem$1, l as FindManyOptions, o as ContentSeoInput, r as ContentDateField, s as CreateContentInput, t as BylineSummary, u as FindManyResult } from "./types-opjX_kz6.mjs";
-import { t as Database } from "./types-DuQn1G7-.mjs";
-import { _ as MediaValue, m as MediaProviderDescriptor } from "./placeholder-DkWkXfDI.mjs";
-import { D as ContentBylineInput } from "./index-DcnOCD1e.mjs";
-import { r as AuthProviderDescriptor, t as AuthDescriptor } from "./types-g0zMtraY.mjs";
-import { t as DatabaseDescriptor } from "./adapters-BiRymx02.mjs";
-import { r as ObjectCacheDescriptor } from "./types-BLQCz46p.mjs";
-import { d as Storage } from "./types-wFu80FrO.mjs";
-import { C as SiteSettingKey, w as SiteSettings } from "./validate-CbVFoJgc.mjs";
+import { _ as UpdateFieldInput, d as FieldType, f as FieldValidation, g as UpdateCollectionInput, i as CollectionWithFields, o as CreateCollectionInput, s as CreateFieldInput, t as Collection, u as Field } from "./types-ywmuDETA.mjs";
+import { f as UpdateContentInput, i as ContentItem$1, l as FindManyOptions, o as ContentSeoInput, r as ContentDateField, s as CreateContentInput, t as BylineSummary, u as FindManyResult } from "./types-GtwhHAg8.mjs";
+import { t as Database } from "./types-BFeoAIHl.mjs";
+import { _ as MediaValue, m as MediaProviderDescriptor } from "./placeholder-C6ZjZcmJ.mjs";
+import { D as ContentBylineInput } from "./index-DybFmYtZ.mjs";
+import { r as AuthProviderDescriptor, t as AuthDescriptor } from "./types-S9VIopdY.mjs";
+import { t as DatabaseDescriptor } from "./adapters-DnMDRQ4e.mjs";
+import { r as ObjectCacheDescriptor } from "./types-CDcuRd4z.mjs";
+import { d as Storage } from "./types-YxFz4lDr.mjs";
+import { C as SiteSettingKey, w as SiteSettings } from "./validate-YiX3rly5.mjs";
 import { HandlerResponse } from "./astro/types.mjs";
 import { Dialect, Kysely, Migration, RawBuilder, Transaction } from "kysely";
 import { z } from "astro/zod";
 import { z as z$1 } from "zod";
 import { Permission, RoleLevel } from "@dineway-ai/auth";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import "@forgeway/sdk";
 import "react/jsx-runtime";
 import { AnySchema } from "@modelcontextprotocol/sdk/server/zod-compat.js";
 import { JSX } from "astro/jsx-runtime";
@@ -3071,6 +3072,20 @@ declare function getSection(slug: string): Promise<Section | null>;
  */
 declare function getSections(options?: GetSectionsOptions): Promise<FindManyResult<Section>>;
 //#endregion
+//#region src/config/secrets.d.ts
+interface ParsedEncryptionKey {
+  kid: string;
+  key: Uint8Array;
+  raw: string;
+}
+interface SecretsEnv {
+  DINEWAY_ENCRYPTION_KEY?: string;
+  DINEWAY_PREVIEW_SECRET?: string;
+  PREVIEW_SECRET?: string;
+  DINEWAY_IP_SALT?: string;
+  IP_SALT?: string;
+}
+//#endregion
 //#region src/content/converters/types.d.ts
 /**
  * Portable Text Types
@@ -4169,11 +4184,11 @@ declare const pluginManifestSchema: z$1.ZodObject<{
         json: "json";
         file: "file";
         slug: "slug";
-        image: "image";
-        datetime: "datetime";
         text: "text";
-        integer: "integer";
         select: "select";
+        datetime: "datetime";
+        image: "image";
+        integer: "integer";
         multiSelect: "multiSelect";
         portableText: "portableText";
         reference: "reference";
@@ -4189,20 +4204,6 @@ declare const pluginManifestSchema: z$1.ZodObject<{
 }, z$1.core.$strip>;
 type ValidatedPluginManifest = z$1.infer<typeof pluginManifestSchema>;
 //#endregion
-//#region src/config/secrets.d.ts
-interface ParsedEncryptionKey {
-  kid: string;
-  key: Uint8Array;
-  raw: string;
-}
-interface SecretsEnv {
-  DINEWAY_ENCRYPTION_KEY?: string;
-  DINEWAY_PREVIEW_SECRET?: string;
-  PREVIEW_SECRET?: string;
-  DINEWAY_IP_SALT?: string;
-  IP_SALT?: string;
-}
-//#endregion
 //#region src/plugins/secrets.d.ts
 interface PluginSecretStatus {
   pluginId: string;

package/dist/ui/server-runtime.d.mts

@@ -1,16 +1,16 @@
-import { D as PageMetadataContribution, Ea as getCollectionInfo, Ii as getEditMeta, Ln as getComments, Pi as getDinewayCollection, Vn as getSiteSettings, Zo as PublicComment, Zt as getWidgetArea, an as Widget, gt as PublicPageContext, pn as getTaxonomyTerms, ra as sanitizeHref, wn as getMenu } from "../types-DwoUifGE.mjs";
-import "../types-DuQn1G7-.mjs";
-import { _ as MediaValue, c as EmbedResult, l as ImageEmbed, s as EmbedOptions } from "../placeholder-DkWkXfDI.mjs";
-import "../runner-D6hzs8L9.mjs";
-import "../index-DcnOCD1e.mjs";
-import "../types-g0zMtraY.mjs";
-import { x as MediaReference } from "../validate-CbVFoJgc.mjs";
-import "../byline-fields-Ckeqd1OY.mjs";
-import "../types-Cw0PeCT_.mjs";
-import { t as getPublicOrigin } from "../public-url-DQJCnYi9.mjs";
-import { a as generateSiteSeoContributions, c as ResolvedPageMetadata, d as renderPageMetadata, f as resolvePageMetadata, i as generateBaseSeoContributions, l as createSha256CspHash, o as renderFragments } from "../jsonld-DzKbhRZ4.mjs";
+import { D as PageMetadataContribution, Ea as getCollectionInfo, Ii as getEditMeta, Ln as getComments, Pi as getDinewayCollection, Vn as getSiteSettings, Zo as PublicComment, Zt as getWidgetArea, an as Widget, gt as PublicPageContext, pn as getTaxonomyTerms, ra as sanitizeHref, wn as getMenu } from "../types-JovwyJFE.mjs";
+import "../types-BFeoAIHl.mjs";
+import { _ as MediaValue, c as EmbedResult, l as ImageEmbed, s as EmbedOptions } from "../placeholder-C6ZjZcmJ.mjs";
+import "../runner-Bcy5w0vj.mjs";
+import "../index-DybFmYtZ.mjs";
+import "../types-S9VIopdY.mjs";
+import { x as MediaReference } from "../validate-YiX3rly5.mjs";
+import "../byline-fields-sRHzS0aM.mjs";
+import "../types-BsTXSvKG.mjs";
+import { t as getPublicOrigin } from "../public-url-C8QUncg3.mjs";
+import { a as generateSiteSeoContributions, c as ResolvedPageMetadata, d as renderPageMetadata, f as resolvePageMetadata, i as generateBaseSeoContributions, l as createSha256CspHash, o as renderFragments } from "../jsonld-B9A2e0yv.mjs";
 import { getPageRuntime } from "../page/index.mjs";
-import { t as getMediaProvider } from "../provider-loader-DC2JdWeO.mjs";
+import { t as getMediaProvider } from "../provider-loader-BIbIiz0P.mjs";
 
 //#region src/utils/sanitize.d.ts
 /**

package/dist/ui/server-runtime.mjs

@@ -1,28 +1,28 @@
 import "../dialect-helpers-fk43GbDb.mjs";
 import "../base64-F8-DUraK.mjs";
-import "../types-ChxYDRvx.mjs";
-import "../loader-aWkkc1_o.mjs";
+import "../types-Bshd_6wQ.mjs";
+import "../loader-WHf22FwU.mjs";
 import "../object-cache-D51qOseS.mjs";
-import "../media-CVMOoywq.mjs";
-import "../comment-DFALgsJD.mjs";
+import "../media-B4m-cnmj.mjs";
+import "../comment-B88XcvU1.mjs";
 import "../options-DQPTH5n0.mjs";
 import "../request-cache-CBFjCwSt.mjs";
-import "../content-refresh-B4ZCmxgd.mjs";
-import "../fts-manager-ewTGohf4.mjs";
-import "../registry-BYYyb2tF.mjs";
+import "../content-refresh-BmkilU5M.mjs";
+import "../fts-manager-Zo9uhGel.mjs";
+import "../registry-SEJqFliS.mjs";
 import { n as buildRenderMediaUrl } from "../url-guoXQQcV.mjs";
-import { i as getSiteSettings } from "../settings-BECcAIRH.mjs";
-import { t as getCollectionInfo } from "../query-C2U5u5_p.mjs";
-import "../resolve-DE71WcL9.mjs";
-import { a as getTaxonomyTerms } from "../taxonomies-DSnY5nOa.mjs";
-import { n as sanitizeHref } from "../url-EMAguGVk.mjs";
-import { r as getEditMeta, t as getDinewayCollection } from "../query-DEv5x6yB.mjs";
-import "../comment-reaction-C37bf99u.mjs";
-import { i as getComments, t as getMenu } from "../menus-CCG2z5um.mjs";
-import { t as getWidgetArea } from "../widgets-BZrLrNgS.mjs";
-import { t as getMediaProvider } from "../provider-loader-BtfrrzfD.mjs";
-import { n as getPublicOrigin } from "../public-url-Cp6hyjVR.mjs";
-import { c as createSha256CspHash, d as resolvePageMetadata, l as escapeHtmlAttr, n as generateSiteSeoContributions, o as renderFragments, t as generateBaseSeoContributions, u as renderPageMetadata } from "../seo-contributions-GnCuL1ML.mjs";
+import { i as getSiteSettings } from "../settings-SVDAB7_W.mjs";
+import { t as getCollectionInfo } from "../query-DNczixZr.mjs";
+import "../resolve-B6BpqwAR.mjs";
+import { a as getTaxonomyTerms } from "../taxonomies-WVnFki0o.mjs";
+import { n as sanitizeHref } from "../url-D282S1Zw.mjs";
+import { r as getEditMeta, t as getDinewayCollection } from "../query-C_m8sn-S.mjs";
+import "../comment-reaction-Ckn6vCmB.mjs";
+import { i as getComments, t as getMenu } from "../menus-oYfViqfE.mjs";
+import { t as getWidgetArea } from "../widgets-DyGcotPM.mjs";
+import { t as getMediaProvider } from "../provider-loader-BeQcnPN1.mjs";
+import { n as getPublicOrigin } from "../public-url-BA-7LKvQ.mjs";
+import { c as createSha256CspHash, d as resolvePageMetadata, l as escapeHtmlAttr, n as generateSiteSeoContributions, o as renderFragments, t as generateBaseSeoContributions, u as renderPageMetadata } from "../seo-contributions-Ci8_12_r.mjs";
 import { getPageRuntime } from "../page/index.mjs";
 import sanitizeHtml from "sanitize-html";
 

package/dist/{user-BH-n01y3.mjs → user-Bcvr5ihC.mjs}

@@ -1,5 +1,5 @@
-import { i as encodeCursor, r as decodeCursor } from "./types-ChxYDRvx.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-ChGNDY8r.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-Bshd_6wQ.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-DX_b8_4Z.mjs";
 import { ulid } from "ulidx";
 
 //#region src/database/repositories/user.ts

package/dist/{validate-CbVFoJgc.d.mts → validate-YiX3rly5.d.mts}

@@ -1,6 +1,6 @@
-import { d as FieldType } from "./types-B_FlxIIl.mjs";
-import { t as Database } from "./types-DuQn1G7-.mjs";
-import { d as Storage } from "./types-wFu80FrO.mjs";
+import { d as FieldType } from "./types-ywmuDETA.mjs";
+import { t as Database } from "./types-BFeoAIHl.mjs";
+import { d as Storage } from "./types-YxFz4lDr.mjs";
 import { Kysely } from "kysely";
 
 //#region src/settings/types.d.ts

package/dist/{validate-D1HL-oLR.mjs → validate-qKzI3BCv.mjs}

@@ -1,4 +1,4 @@
-import { a as __exportAll } from "./runner-BgmttQmD.mjs";
+import { a as __exportAll } from "./runner-BfWbi9YY.mjs";
 import { n as FIELD_TYPES } from "./types-B7TDDFMG.mjs";
 
 //#region src/seed/validate.ts

package/dist/version-O6Zw1eqK.mjs

@@ -0,0 +1,6 @@
+//#region src/version.ts
+const VERSION = "0.2.3";
+const COMMIT = "fd28d7748";
+
+//#endregion
+export { VERSION as n, COMMIT as t };

package/dist/{widgets-BZrLrNgS.mjs → widgets-DyGcotPM.mjs}

@@ -1,6 +1,6 @@
-import { r as getDb } from "./loader-aWkkc1_o.mjs";
+import { r as getDb } from "./loader-WHf22FwU.mjs";
 import { r as requestCached } from "./request-cache-CBFjCwSt.mjs";
-import { t as getWidgetComponents$1 } from "./components-DImzlLhb.mjs";
+import { t as getWidgetComponents$1 } from "./components-D0w9MzQe.mjs";
 
 //#region src/widgets/index.ts
 /**

package/dist/{zod-generator-C7AsLpSB.mjs → zod-generator-Cr3SiHsc.mjs}

@@ -1,4 +1,4 @@
-import { a as __exportAll } from "./runner-BgmttQmD.mjs";
+import { a as __exportAll } from "./runner-BfWbi9YY.mjs";
 import { n as hashString } from "./hash-mxxx2oPW.mjs";
 import { z } from "zod";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dineway",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Agentic Website builder for restaurants — structured content meets AI via the Model Context Protocol",
   "type": "module",
   "publishConfig": {
@@ -217,6 +217,8 @@
     "#plugins/*": "./src/plugins/*",
     "#media/*": "./src/media/*",
     "#mcp/*": "./src/mcp/*",
+    "#dineway-tools/*": "./src/dineway-tools/*",
+    "#integration-credentials/*": "./src/integration-credentials/*",
     "#comments/*": "./src/comments/*",
     "#config/*": "./src/config/*",
     "#site-context/*": "./src/site-context/*",
@@ -347,7 +349,7 @@
     }
   },
   "dependencies": {
-    "@forgeway/sdk": "^1.1.0",
+    "@forgeway/sdk": "^1.1.3",
     "@cloudflare/kumo": "2.6.0",
     "@floating-ui/react": "^0.27.16",
     "@modelcontextprotocol/sdk": "^1.26.0",
@@ -385,9 +387,9 @@
     "ulidx": "^2.4.1",
     "upng-js": "^2.1.0",
     "zod": "^4.4.1",
-    "@dineway-ai/admin": "^0.2.1",
-    "@dineway-ai/auth": "^0.2.3",
-    "@dineway-ai/gutenberg-to-portable-text": "^0.2.1"
+    "@dineway-ai/admin": "^0.2.2",
+    "@dineway-ai/gutenberg-to-portable-text": "^0.2.2",
+    "@dineway-ai/auth": "^0.2.4"
   },
   "optionalDependencies": {
     "@aws-sdk/client-s3": "^3.1049.0",
@@ -416,7 +418,7 @@
     "vite": "^6.0.0",
     "vitest": "^4.0.18",
     "zod-openapi": "^5.4.6",
-    "@dineway-ai/blocks": "^0.2.3"
+    "@dineway-ai/blocks": "^0.2.4"
   },
   "keywords": [
     "astro",