dineway 0.2.24 → 0.2.26

package/dist/media/local-runtime.d.mts

@@ -1,14 +1,14 @@
-import "../types-DlV9XH39.mjs";
-import { t as Database } from "../types-C8cUW9dh.mjs";
-import { h as MediaProviderItem, o as CreateMediaProviderFn } from "../placeholder-BsYSFPjY.mjs";
-import "../runner-BITx7yBF.mjs";
-import "../index-NdJMMO48.mjs";
-import "../types-C2LBO0t8.mjs";
-import { d as Storage } from "../types-Gd4kXLsa.mjs";
-import "../public-url-DFX2c_20.mjs";
-import "../validate-Bc9gaua6.mjs";
-import "../byline-fields-Bp9r0NnN.mjs";
-import "../types-BaKec6bx.mjs";
+import "../types-ZDyMKdrZ.mjs";
+import { t as Database } from "../types-gG3syKwc.mjs";
+import { h as MediaProviderItem, o as CreateMediaProviderFn } from "../placeholder-DeJydgkj.mjs";
+import "../runner-DnswPQIl.mjs";
+import "../index-C7X4h_27.mjs";
+import "../types-C0hcZkqG.mjs";
+import { d as Storage } from "../types-DN82MbYv.mjs";
+import "../public-url-BuERxOoY.mjs";
+import "../validate-SXACKtqW.mjs";
+import "../byline-fields-CjCCA-Wn.mjs";
+import "../types-Cnz2EIEp.mjs";
 import "../index.mjs";
 import { Kysely } from "kysely";
 

package/dist/media/local-runtime.mjs

@@ -1,6 +1,6 @@
 import "../base64-F8-DUraK.mjs";
-import "../types-C9F2TLQV.mjs";
-import { t as MediaRepository } from "../media-D8pQJSug.mjs";
+import "../types-CFvpEEOl.mjs";
+import { t as MediaRepository } from "../media-DNde5-Am.mjs";
 
 //#region src/media/local-runtime.ts
 /**

package/dist/{media-D8pQJSug.mjs → media-DNde5-Am.mjs}

@@ -1,4 +1,4 @@
-import { i as encodeCursor, r as decodeCursor } from "./types-C9F2TLQV.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-CFvpEEOl.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 

package/dist/{menus-DSWeEWXl.mjs → menus-D_pqSYJ3.mjs}

@@ -1,11 +1,11 @@
 import { t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
-import { r as getDb } from "./loader-BCr2VSzt.mjs";
+import { r as getDb } from "./loader-CsX5pTud.mjs";
 import { n as cachedQuery, t as CacheNamespace } from "./object-cache-D51qOseS.mjs";
-import { t as CommentRepository } from "./comment-BX6H4NF-.mjs";
+import { t as CommentRepository } from "./comment-eqM9KHbj.mjs";
 import { r as requestCached } from "./request-cache-CBFjCwSt.mjs";
-import { n as resolveLocaleChain, t as resolveLocale } from "./resolve-CThKf9_X.mjs";
-import { n as sanitizeHref } from "./url-C05Zz4pW.mjs";
-import { t as CommentReactionRepository } from "./comment-reaction-QSENU_3S.mjs";
+import { n as resolveLocaleChain, t as resolveLocale } from "./resolve-Doh2USIE.mjs";
+import { n as sanitizeHref } from "./url-BG-3f-Vy.mjs";
+import { t as CommentReactionRepository } from "./comment-reaction-mHuRHspq.mjs";
 import { sql } from "kysely";
 
 //#region src/comments/ranking.ts

package/dist/{menus-3B-PGTX3.mjs → menus-oIJaGGUU.mjs}

@@ -1,4 +1,4 @@
-import { a as __exportAll } from "./runner-BWZ87FK-.mjs";
+import { a as __exportAll } from "./runner-CQnzfBpD.mjs";
 import { n as getI18nConfig } from "./config-CVssduLe.mjs";
 import { c as invalidateMenuObjectCache } from "./object-cache-D51qOseS.mjs";
 import { t as withTransaction } from "./transaction-Chz7SBGr.mjs";

package/dist/{oauth-authorization-CMU5kREy.mjs → oauth-authorization-DHeVHdGr.mjs}

@@ -1,8 +1,8 @@
 import { t as withTransaction } from "./transaction-Chz7SBGr.mjs";
-import { a as hashApiToken, n as TOKEN_PREFIXES, r as generatePrefixedToken, t as ALL_VALID_SCOPES } from "./api-tokens-CbMAy6xF.mjs";
-import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-EYZRNkRR.mjs";
-import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "./oauth-clients-CLdR0WyA.mjs";
-import { t as lookupUserRoleAndStatus } from "./oauth-user-lookup-CP16vyFW.mjs";
+import { a as hashApiToken, n as TOKEN_PREFIXES, r as generatePrefixedToken, t as ALL_VALID_SCOPES } from "./api-tokens-BkXlt3V6.mjs";
+import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-Dvn_xgew.mjs";
+import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "./oauth-clients-8cVhd-8W.mjs";
+import { t as lookupUserRoleAndStatus } from "./oauth-user-lookup-CRFHKN_W.mjs";
 import { clampScopes, computeS256Challenge, secureCompare } from "@dineway-ai/auth";
 import { generateCodeVerifier } from "arctic";
 

package/dist/{oauth-clients-CLdR0WyA.mjs → oauth-clients-8cVhd-8W.mjs}

@@ -1,5 +1,5 @@
-import { s as validateScopes } from "./api-tokens-CbMAy6xF.mjs";
-import { o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-EYZRNkRR.mjs";
+import { s as validateScopes } from "./api-tokens-BkXlt3V6.mjs";
+import { o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-Dvn_xgew.mjs";
 
 //#region src/api/oauth/redirect-uri.ts
 /**

package/dist/object-cache/memory.d.mts

@@ -1,4 +1,4 @@
-import { t as CreateObjectCacheBackendFn } from "../types-DY9lJRpo.mjs";
+import { t as CreateObjectCacheBackendFn } from "../types-B0P-ECRI.mjs";
 
 //#region src/object-cache/memory.d.ts
 /**

package/dist/page/index.d.mts

@@ -1,13 +1,13 @@
-import { Dt as PublicSchemaNode, Et as PublicPageSchema, F as PageMetadataContribution, M as PageFragmentContribution, Tt as PublicPageImage, wt as PublicPageContext } from "../types-DlV9XH39.mjs";
-import "../types-C8cUW9dh.mjs";
-import "../runner-BITx7yBF.mjs";
-import "../index-NdJMMO48.mjs";
-import "../types-C2LBO0t8.mjs";
-import "../public-url-DFX2c_20.mjs";
-import "../validate-Bc9gaua6.mjs";
-import "../byline-fields-Bp9r0NnN.mjs";
-import "../types-BaKec6bx.mjs";
-import { _ as CreatePublicPageContextInput, a as generateSiteSeoContributions, c as ResolvedPageMetadata, d as renderPageMetadata, f as resolvePageMetadata, g as resolvePageImage, h as imageMetadataContributions, i as generateBaseSeoContributions, l as createSha256CspHash, m as mergePageSchema, n as buildWebSiteJsonLd, o as renderFragments, p as safeJsonLdSerialize, r as cleanJsonLd, s as resolveFragments, t as buildBlogPostingJsonLd, u as escapeHtmlAttr, v as createPublicPageContext } from "../jsonld-DGFZcxQX.mjs";
+import { Dt as PublicSchemaNode, Et as PublicPageSchema, F as PageMetadataContribution, M as PageFragmentContribution, Tt as PublicPageImage, wt as PublicPageContext } from "../types-ZDyMKdrZ.mjs";
+import "../types-gG3syKwc.mjs";
+import "../runner-DnswPQIl.mjs";
+import "../index-C7X4h_27.mjs";
+import "../types-C0hcZkqG.mjs";
+import "../public-url-BuERxOoY.mjs";
+import "../validate-SXACKtqW.mjs";
+import "../byline-fields-CjCCA-Wn.mjs";
+import "../types-Cnz2EIEp.mjs";
+import { _ as CreatePublicPageContextInput, a as generateSiteSeoContributions, c as ResolvedPageMetadata, d as renderPageMetadata, f as resolvePageMetadata, g as resolvePageImage, h as imageMetadataContributions, i as generateBaseSeoContributions, l as createSha256CspHash, m as mergePageSchema, n as buildWebSiteJsonLd, o as renderFragments, p as safeJsonLdSerialize, r as cleanJsonLd, s as resolveFragments, t as buildBlogPostingJsonLd, u as escapeHtmlAttr, v as createPublicPageContext } from "../jsonld-thSA4Rua.mjs";
 
 //#region src/page/index.d.ts
 /**

package/dist/page/index.mjs

@@ -1,4 +1,4 @@
-import { _ as createPublicPageContext, a as createSha256CspHash, c as resolvePageMetadata, d as buildBlogPostingJsonLd, f as buildWebSiteJsonLd, h as resolvePageImage, i as resolveFragments, l as safeJsonLdSerialize, m as imageMetadataContributions, n as generateSiteSeoContributions, o as escapeHtmlAttr, p as cleanJsonLd, r as renderFragments, s as renderPageMetadata, t as generateBaseSeoContributions, u as mergePageSchema } from "../seo-contributions-BGBehNCN.mjs";
+import { _ as createPublicPageContext, a as createSha256CspHash, c as resolvePageMetadata, d as buildBlogPostingJsonLd, f as buildWebSiteJsonLd, h as resolvePageImage, i as resolveFragments, l as safeJsonLdSerialize, m as imageMetadataContributions, n as generateSiteSeoContributions, o as escapeHtmlAttr, p as cleanJsonLd, r as renderFragments, s as renderPageMetadata, t as generateBaseSeoContributions, u as mergePageSchema } from "../seo-contributions-CPDwm9MH.mjs";
 
 //#region src/page/index.ts
 /**

package/dist/{parse-DEG06jjr.mjs → parse-RN_EgAxL.mjs}

@@ -1,4 +1,4 @@
-import { t as apiError } from "./error-Jz0EtEwI.mjs";
+import { t as apiError } from "./error-DWL9Pwyt.mjs";
 import { z } from "zod";
 
 //#region src/api/parse.ts

package/dist/plugin-utils.d.mts

@@ -1,12 +1,12 @@
-import "./types-DlV9XH39.mjs";
-import "./types-C8cUW9dh.mjs";
-import "./runner-BITx7yBF.mjs";
-import "./index-NdJMMO48.mjs";
-import "./types-C2LBO0t8.mjs";
-import "./public-url-DFX2c_20.mjs";
-import "./validate-Bc9gaua6.mjs";
-import "./byline-fields-Bp9r0NnN.mjs";
-import "./types-BaKec6bx.mjs";
+import "./types-ZDyMKdrZ.mjs";
+import "./types-gG3syKwc.mjs";
+import "./runner-DnswPQIl.mjs";
+import "./index-C7X4h_27.mjs";
+import "./types-C0hcZkqG.mjs";
+import "./public-url-BuERxOoY.mjs";
+import "./validate-SXACKtqW.mjs";
+import "./byline-fields-CjCCA-Wn.mjs";
+import "./types-Cnz2EIEp.mjs";
 import { DinewayHandlers } from "./astro/types.mjs";
 
 //#region src/plugin-utils.d.ts

package/dist/plugins/adapt-sandbox-entry.d.mts

@@ -1,12 +1,12 @@
-import { Eo as PluginDescriptor, Ft as StandardPluginDefinition, kt as ResolvedPlugin } from "../types-DlV9XH39.mjs";
-import "../types-C8cUW9dh.mjs";
-import "../runner-BITx7yBF.mjs";
-import "../index-NdJMMO48.mjs";
-import "../types-C2LBO0t8.mjs";
-import "../public-url-DFX2c_20.mjs";
-import "../validate-Bc9gaua6.mjs";
-import "../byline-fields-Bp9r0NnN.mjs";
-import "../types-BaKec6bx.mjs";
+import { Ft as StandardPluginDefinition, ko as PluginDescriptor, kt as ResolvedPlugin } from "../types-ZDyMKdrZ.mjs";
+import "../types-gG3syKwc.mjs";
+import "../runner-DnswPQIl.mjs";
+import "../index-C7X4h_27.mjs";
+import "../types-C0hcZkqG.mjs";
+import "../public-url-BuERxOoY.mjs";
+import "../validate-SXACKtqW.mjs";
+import "../byline-fields-CjCCA-Wn.mjs";
+import "../types-Cnz2EIEp.mjs";
 
 //#region src/plugins/adapt-sandbox-entry.d.ts
 /**

package/dist/plugins/adapt-sandbox-entry.mjs

@@ -1,4 +1,4 @@
-import { n as PLUGIN_CAPABILITIES, t as HOOK_NAMES } from "../manifest-schema-U5qGq-iB.mjs";
+import { n as PLUGIN_CAPABILITIES, t as HOOK_NAMES } from "../manifest-schema-VGSvatoU.mjs";
 
 //#region src/plugins/adapt-sandbox-entry.ts
 /**

package/dist/{plugins-D8YxTh9q.mjs → plugins-DMImBiT9.mjs}

@@ -1,11 +1,11 @@
 import { r as validatePluginIdentifier, t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
 import { i as encodeBase64url, n as decodeBase64url } from "./base64-F8-DUraK.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-B-1_U3oF.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-Dh8yqZt3.mjs";
 import { t as OptionsRepository } from "./options-DQPTH5n0.mjs";
-import { n as createPluginContext, t as PluginContextFactory } from "./context-BGt7zfQ-.mjs";
-import { i as parseEncryptionKeys, t as DinewaySecretsError } from "./secrets-Dw3lXI42.mjs";
-import { t as extractRequestMeta } from "./request-meta-DZTiCIQR.mjs";
-import { r as setCronTasksEnabled } from "./cron-BjKHo0QD.mjs";
+import { n as createPluginContext, t as PluginContextFactory } from "./context-BEgiPeP-.mjs";
+import { i as parseEncryptionKeys, t as DinewaySecretsError } from "./secrets-re9BzPUD.mjs";
+import { t as extractRequestMeta } from "./request-meta-C0druWvK.mjs";
+import { r as setCronTasksEnabled } from "./cron-fQf7oVvf.mjs";
 import { Migrator, sql } from "kysely";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { ulid } from "ulidx";

package/dist/{preview-Bn59ztjn.mjs → preview-DDtW5YuZ.mjs}

@@ -1,7 +1,7 @@
 import { n as loadBetterSqlite3, t as createDatabase } from "./connection-CiJWiWya.mjs";
 import { runWithContext } from "./request-context.mjs";
-import { a as verifyPreviewSignature, t as buildPreviewSignatureHeader } from "./sidecar-client-C6ylL-0S.mjs";
-import { t as generatePreviewToken } from "./tokens-DiodRT2y.mjs";
+import { a as verifyPreviewSignature, t as buildPreviewSignatureHeader } from "./sidecar-client-CQF4fcO7.mjs";
+import { t as generatePreviewToken } from "./tokens-COJxRo8q.mjs";
 import { createHash } from "node:crypto";
 import { sql } from "kysely";
 import { ulid } from "ulidx";

package/dist/{provider-loader-jdkZM6xZ.d.mts → provider-loader-DZ9uy48J.d.mts}

@@ -1,4 +1,4 @@
-import { f as MediaProvider } from "./placeholder-BsYSFPjY.mjs";
+import { f as MediaProvider } from "./placeholder-DeJydgkj.mjs";
 
 //#region src/media/provider-loader.d.ts
 /**

package/dist/public-discovery-BlJ80Hoh.mjs

@@ -0,0 +1,30 @@
+import { z } from "zod";
+
+//#region src/schema/public-discovery.ts
+/** A declared discovery boundary, not an authorization policy for CMS reads. */
+const publicDiscoveryRulesSchema = z.object({
+	excludeIfTrue: z.array(z.string().min(1).max(63).regex(/^[a-z][a-z0-9_]*$/)).max(16).refine((fields) => new Set(fields).size === fields.length, "Discovery fields must be unique").optional(),
+	requireLiveRevision: z.boolean().optional()
+}).strict();
+function parsePublicDiscoveryRules(value) {
+	return publicDiscoveryRulesSchema.parse(value);
+}
+/** Reject stale declarations before either SQL discovery or snapshot eligibility runs. */
+function publicDiscoveryExclusions(collection) {
+	const exclusions = (collection.publicDiscovery && parsePublicDiscoveryRules(collection.publicDiscovery))?.excludeIfTrue ?? [];
+	for (const field of exclusions) if (!collection.fields.some((candidate) => candidate.slug === field && candidate.type === "boolean")) throw new Error(`Public discovery for ${collection.slug} requires boolean field ${field}`);
+	return exclusions;
+}
+/**
+* Apply declared exclusions to a native Live record or pre-mutation snapshot.
+* Callers must separately check published/deleted status, SEO and canonical URLs.
+* This does not authorize CMS access or make a Draft snapshot public.
+*/
+function satisfiesPublicDiscoveryRules(collection, content) {
+	const exclusions = publicDiscoveryExclusions(collection);
+	if (collection.publicDiscovery?.requireLiveRevision && !content.liveRevisionId) return false;
+	return exclusions.every((field) => content.data[field] == null || content.data[field] === false || content.data[field] === 0);
+}
+
+//#endregion
+export { satisfiesPublicDiscoveryRules as i, publicDiscoveryExclusions as n, publicDiscoveryRulesSchema as r, parsePublicDiscoveryRules as t };

package/dist/{public-url-xY0WefV6.d.mts → public-url-Binfty0i.d.mts}

@@ -1,4 +1,4 @@
-import { To as DinewayConfig } from "./types-DlV9XH39.mjs";
+import { Oo as DinewayConfig } from "./types-ZDyMKdrZ.mjs";
 
 //#region src/api/public-url.d.ts
 /**

package/dist/{public-url-DFX2c_20.d.mts → public-url-BuERxOoY.d.mts}

@@ -1,5 +1,7 @@
-import { t as Database } from "./types-C8cUW9dh.mjs";
+import { i as CollectionWithFields } from "./types-VkWKA-R2.mjs";
+import { t as Database } from "./types-gG3syKwc.mjs";
 import { Kysely } from "kysely";
+import { z } from "zod";
 
 //#region src/i18n/config.d.ts
 /**
@@ -77,6 +79,19 @@ declare function listPublicContent(db: Kysely<Database>, options: PublicContentO
 /** Resolve an explicit canonical without inventing path case or slash rules. */
 declare function resolveCanonicalUrl(value: string, siteUrl?: string): string | null;
 //#endregion
+//#region src/schema/public-discovery.d.ts
+type DiscoveryCollection = Pick<CollectionWithFields, "slug" | "fields" | "publicDiscovery">;
+/** Reject stale declarations before either SQL discovery or snapshot eligibility runs. */
+/**
+ * Apply declared exclusions to a native Live record or pre-mutation snapshot.
+ * Callers must separately check published/deleted status, SEO and canonical URLs.
+ * This does not authorize CMS access or make a Draft snapshot public.
+ */
+declare function satisfiesPublicDiscoveryRules(collection: DiscoveryCollection, content: {
+  data: Record<string, unknown>;
+  liveRevisionId?: unknown;
+}): boolean;
+//#endregion
 //#region src/seo/public-url.d.ts
 /** Collection routing accepts a complete stored path or a conventional slug pattern. */
 interface ResolveContentUrlInput {
@@ -96,4 +111,4 @@ interface ResolveContentUrlInput {
  */
 declare function resolveContentUrl(input: ResolveContentUrlInput): string | null;
 //#endregion
-export { PublicContentOptions as a, getFallbackChain as c, PublicContentEntry as i, getI18nConfig as l, resolveContentUrl as n, listPublicContent as o, resolveCanonicalUrl as r, I18nConfig as s, ResolveContentUrlInput as t, isI18nEnabled as u };
+export { PublicContentEntry as a, I18nConfig as c, isI18nEnabled as d, resolveCanonicalUrl as i, getFallbackChain as l, resolveContentUrl as n, PublicContentOptions as o, satisfiesPublicDiscoveryRules as r, listPublicContent as s, ResolveContentUrlInput as t, getI18nConfig as u };

package/dist/{publication-authorization-BmazS4K0.mjs → publication-authorization-DYAGeWto.mjs}

@@ -1,10 +1,10 @@
-import { i as encodeCursor, r as decodeCursor } from "./types-C9F2TLQV.mjs";
-import { t as SiteActivityRepository } from "./site-activity-CnrmnFRy.mjs";
-import { t as ReviewRequestRepository } from "./review-requests-D5CJ4JCy.mjs";
-import { a as getSiteSettingsWithDb } from "./settings-D-a7uy2z.mjs";
-import { n as buildStableActionHash, t as ReviewPayloadBuilder } from "./review-payload-BysRWpxS.mjs";
-import { t as SYSTEM_ACTOR_ID } from "./actor-D3A5PNkH.mjs";
-import { n as redactActivityRecord } from "./activity-Bm5x0dik.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-CFvpEEOl.mjs";
+import { t as SiteActivityRepository } from "./site-activity-By0wWO0g.mjs";
+import { t as ReviewRequestRepository } from "./review-requests-Bo4jcxtU.mjs";
+import { a as getSiteSettingsWithDb } from "./settings-DXp6vRdV.mjs";
+import { n as buildStableActionHash, t as ReviewPayloadBuilder } from "./review-payload-Cg9dtFgV.mjs";
+import { t as SYSTEM_ACTOR_ID } from "./actor-Bu9whHez.mjs";
+import { n as redactActivityRecord } from "./activity-C6JLcUzM.mjs";
 import { ulid } from "ulidx";
 
 //#region src/database/repositories/content-release-grants.ts
@@ -13,7 +13,7 @@ var ContentReleaseGrantRepository = class {
 		this.db = db;
 	}
 	async createOrReplaceActive(input) {
-		return this.db.transaction().execute(async (transaction) => {
+		const operation = async (transaction) => {
 			const existing = await findActiveForTarget(transaction, input.collection, input.entryId, input.operation);
 			if (existing?.actionHash === input.actionHash) return existing;
 			const now = input.createdAt ?? (/* @__PURE__ */ new Date()).toISOString();
@@ -31,11 +31,16 @@ var ContentReleaseGrantRepository = class {
 			const created = await findById(transaction, id);
 			if (!created) throw new Error("Failed to create content release grant");
 			return created;
-		});
+		};
+		return this.db.isTransaction ? operation(this.db) : this.db.transaction().execute(operation);
 	}
 	async findById(id) {
 		return findById(this.db, id);
 	}
+	async findConfirmedPublication(input) {
+		const row = await this.db.selectFrom("_dineway_content_release_grants").selectAll().where("collection", "=", input.collection).where("entry_id", "=", input.entryId).where("reviewed_rev", "=", input.reviewedRev).where("draft_revision_id", "=", input.draftRevisionId).where("live_revision_id", input.liveRevisionId === null ? "is" : "=", input.liveRevisionId).where("operation", "=", "publish").where("status", "=", "consumed").where("authorization_method", "=", "human_action").where("authorized_by_actor_type", "=", "user").where("authorized_by_actor_id", "=", input.actorId).orderBy("created_at", "desc").orderBy("id", "desc").executeTakeFirst();
+		return row ? rowToGrant(row) : null;
+	}
 	async findActiveForTarget(collection, entryId, operation) {
 		return findActiveForTarget(this.db, collection, entryId, operation);
 	}
@@ -1153,4 +1158,4 @@ function errorReason(error) {
 }
 
 //#endregion
-export { HITL_REQUEST_STATUSES as a, HITL_REQUEST_PRIORITIES as i, PublicationAuthorizationService as n, HitlRequestRepository as o, ReleasePayloadBuilder as r, PublicationAuthorizationError as t };
+export { HITL_REQUEST_PRIORITIES as a, ContentReleaseGrantRepository as c, ReleasePayloadBuilder as i, PublicationAuthorizationService as n, HITL_REQUEST_STATUSES as o, publicationReceipt as r, HitlRequestRepository as s, PublicationAuthorizationError as t };

package/dist/{query-CrUftarl.mjs → query-DzsPhsZk.mjs}

@@ -1,8 +1,8 @@
-import { a as __exportAll } from "./runner-BWZ87FK-.mjs";
+import { a as __exportAll } from "./runner-CQnzfBpD.mjs";
 import { n as getI18nConfig, r as isI18nEnabled, t as getFallbackChain } from "./config-CVssduLe.mjs";
 import { getRequestContext } from "./request-context.mjs";
-import { i as encodeCursor } from "./types-C9F2TLQV.mjs";
-import { o as isMissingTableError, s as takeLiveCollectionMeta, t as CURSOR_RAW_VALUES } from "./loader-BCr2VSzt.mjs";
+import { i as encodeCursor } from "./types-CFvpEEOl.mjs";
+import { o as isMissingTableError, s as takeLiveCollectionMeta, t as CURSOR_RAW_VALUES } from "./loader-CsX5pTud.mjs";
 import { i as contentNamespaces, n as cachedQuery, u as invalidateSchemaObjectCache } from "./object-cache-D51qOseS.mjs";
 import { r as requestCached } from "./request-cache-CBFjCwSt.mjs";
 
@@ -596,9 +596,9 @@ async function hydrateEntryBylines(type, entries) {
 		let needsQueryPath = parsed.some((item) => item.credits.length === 0 && (dataStr(item.data, "authorId") !== "" || dataStr(item.data, "primaryBylineId") !== ""));
 		let hasCustomFields = false;
 		if (!needsQueryPath) try {
-			const { getDb } = await import("./loader-BCr2VSzt.mjs").then((n) => n.i);
+			const { getDb } = await import("./loader-CsX5pTud.mjs").then((n) => n.i);
 			const db = await getDb();
-			const { getBylineFieldDefs } = await import("./field-defs-cache-sSdDeJXP.mjs").then((n) => n.t);
+			const { getBylineFieldDefs } = await import("./field-defs-cache-7Ka899yA.mjs").then((n) => n.t);
 			hasCustomFields = (await getBylineFieldDefs(db)).length > 0;
 		} catch (error) {
 			if (!isMissingTableError(error)) needsQueryPath = true;
@@ -612,7 +612,7 @@ async function hydrateEntryBylines(type, entries) {
 		}
 	}
 	try {
-		const { getBylinesForEntries } = await import("./bylines-YK6eGHvV.mjs").then((n) => n.t);
+		const { getBylinesForEntries } = await import("./bylines-DXXMlc1A.mjs").then((n) => n.t);
 		const refs = entries.map((entry) => {
 			const data = entryData(entry);
 			const id = dataStr(data, "id");
@@ -670,12 +670,12 @@ async function hydrateEntryTerms(type, entries, locale) {
 				byTaxonomy: grouped
 			});
 		}
-		const { primeFoldedEntryTerms } = await import("./taxonomies-FKTevd14.mjs").then((n) => n.u);
+		const { primeFoldedEntryTerms } = await import("./taxonomies-Dfmkapin.mjs").then((n) => n.u);
 		primeFoldedEntryTerms(type, perEntry, { locale });
 		return;
 	}
 	try {
-		const { getAllTermsForEntries } = await import("./taxonomies-FKTevd14.mjs").then((n) => n.u);
+		const { getAllTermsForEntries } = await import("./taxonomies-Dfmkapin.mjs").then((n) => n.u);
 		const ids = entries.map((entry) => dataStr(entryData(entry), "id")).filter(Boolean);
 		if (ids.length === 0) return;
 		const termsMap = await getAllTermsForEntries(type, ids, { locale });
@@ -709,9 +709,9 @@ async function hydrateEntryTerms(type, entries, locale) {
 */
 async function getTranslations(type, id) {
 	try {
-		const db = (await import("./loader-BCr2VSzt.mjs").then((n) => n.i)).getDb;
+		const db = (await import("./loader-CsX5pTud.mjs").then((n) => n.i)).getDb;
 		const dbInstance = await db();
-		const { ContentRepository } = await import("./content-Bg_hMt4Q.mjs").then((n) => n.n);
+		const { ContentRepository } = await import("./content-C0qGd2Nt.mjs").then((n) => n.n);
 		const repo = new ContentRepository(dbInstance);
 		const item = await repo.findByIdOrSlug(type, id);
 		if (!item) return {
@@ -779,8 +779,8 @@ async function resolveDinewayPath(path) {
 	const hasDbOverride = !!getRequestContext()?.db;
 	let patterns = !hasDbOverride ? cachedUrlPatterns : null;
 	if (!patterns) {
-		const { getDb } = await import("./loader-BCr2VSzt.mjs").then((n) => n.i);
-		const { SchemaRegistry } = await import("./registry-D3n4-yUl.mjs").then((n) => n.r);
+		const { getDb } = await import("./loader-CsX5pTud.mjs").then((n) => n.i);
+		const { SchemaRegistry } = await import("./registry-BwcF6gAj.mjs").then((n) => n.r);
 		patterns = (await new SchemaRegistry(await getDb()).listCollections()).filter((collection) => collection.urlPattern).map((collection) => {
 			const { regex, paramNames } = patternToRegex(collection.urlPattern);
 			return {

package/dist/{query-DPC5GT6e.mjs → query-qvv6Rar8.mjs}

@@ -1,7 +1,7 @@
-import { r as getDb } from "./loader-BCr2VSzt.mjs";
+import { r as getDb } from "./loader-CsX5pTud.mjs";
 import { n as cachedQuery, t as CacheNamespace } from "./object-cache-D51qOseS.mjs";
 import { r as requestCached } from "./request-cache-CBFjCwSt.mjs";
-import { n as SchemaRegistry } from "./registry-D3n4-yUl.mjs";
+import { n as SchemaRegistry } from "./registry-BwcF6gAj.mjs";
 
 //#region src/schema/query.ts
 /**

package/dist/{rate-limit-DvGL45wH.mjs → rate-limit-BIuuIxP3.mjs}

@@ -1,5 +1,5 @@
-import { t as apiError } from "./error-Jz0EtEwI.mjs";
-import { n as normalizeTrustedHeaders } from "./trusted-proxy-NySPw95m.mjs";
+import { t as apiError } from "./error-DWL9Pwyt.mjs";
+import { n as normalizeTrustedHeaders } from "./trusted-proxy-j2KYPN4r.mjs";
 import { sql } from "kysely";
 
 //#region src/auth/rate-limit.ts

package/dist/{redirect-8B-gorhg.mjs → redirect-B_9GwIZd.mjs}

@@ -1,5 +1,5 @@
 import { a as currentTimestampValue } from "./dialect-helpers-fk43GbDb.mjs";
-import { i as encodeCursor, r as decodeCursor } from "./types-C9F2TLQV.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-CFvpEEOl.mjs";
 import { i as matchPattern, n as interpolateDestination, r as isPattern, t as compilePattern } from "./patterns-CoqlXUvk.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";

package/dist/{redirects-DdPaQiWQ.mjs → redirects-Cj4lrY_X.mjs}

@@ -1,5 +1,6 @@
-import { t as isSafeHref } from "./url-C05Zz4pW.mjs";
-import { n as isTerminalStatus, t as REDIRECT_RULE_STATUSES } from "./status-xz9JACSX.mjs";
+import { r as publicDiscoveryRulesSchema } from "./public-discovery-BlJ80Hoh.mjs";
+import { t as isSafeHref } from "./url-BG-3f-Vy.mjs";
+import { n as isTerminalStatus, t as REDIRECT_RULE_STATUSES } from "./status-DvSRKIiF.mjs";
 import { z } from "zod";
 
 //#region src/api/schemas/common.ts
@@ -539,6 +540,7 @@ const createCollectionBody = z.object({
 	source: z.string().regex(collectionSourcePattern).optional(),
 	urlPattern: urlPatternSchema.optional(),
 	urlField: urlFieldSchema.optional(),
+	publicDiscovery: publicDiscoveryRulesSchema.nullish(),
 	hasSeo: z.boolean().optional()
 }).meta({ id: "CreateCollectionBody" });
 const updateCollectionBody = z.object({
@@ -549,6 +551,7 @@ const updateCollectionBody = z.object({
 	supports: z.array(collectionSupportValues).optional(),
 	urlPattern: urlPatternSchema.nullish(),
 	urlField: urlFieldSchema.nullish(),
+	publicDiscovery: publicDiscoveryRulesSchema.nullish(),
 	hasSeo: z.boolean().optional(),
 	commentsEnabled: z.boolean().optional(),
 	commentsModeration: z.enum([
@@ -605,6 +608,7 @@ const collectionSchema = z.object({
 	source: z.string().nullable(),
 	urlPattern: z.string().nullable(),
 	urlField: z.string().nullish(),
+	publicDiscovery: publicDiscoveryRulesSchema.nullish(),
 	hasSeo: z.boolean(),
 	createdAt: z.string(),
 	updatedAt: z.string()

package/dist/{redirects-D2SVS1zo.mjs → redirects-DvsWZIiC.mjs}

@@ -1,8 +1,8 @@
 import { t as OptionsRepository } from "./options-DQPTH5n0.mjs";
-import { t as RedirectRepository } from "./redirect-8B-gorhg.mjs";
+import { t as RedirectRepository } from "./redirect-B_9GwIZd.mjs";
 import { a as validateDestinationParams, i as matchPattern, n as interpolateDestination, o as validatePattern, r as isPattern, t as compilePattern } from "./patterns-CoqlXUvk.mjs";
-import { i as invalidateRedirectCache } from "./cache-BuVpjvBc.mjs";
-import { n as isTerminalStatus } from "./status-xz9JACSX.mjs";
+import { i as invalidateRedirectCache } from "./cache-Cf5yPNNw.mjs";
+import { n as isTerminalStatus } from "./status-DvSRKIiF.mjs";
 
 //#region src/redirects/loops.ts
 /**

package/dist/{registry-D3n4-yUl.mjs → registry-BwcF6gAj.mjs}

@@ -1,13 +1,14 @@
-import { a as __exportAll } from "./runner-BWZ87FK-.mjs";
+import { a as __exportAll } from "./runner-CQnzfBpD.mjs";
 import { t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
 import { i as currentTimestamp, l as listTablesLike, n as columnExists, u as tableExists } from "./dialect-helpers-fk43GbDb.mjs";
 import { n as contentLocaleUpdatedIndexName, t as contentLocaleCreatedIndexName } from "./content-index-names-Bbu1FY1r.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-B-1_U3oF.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-Dh8yqZt3.mjs";
 import { t as withTransaction } from "./transaction-Chz7SBGr.mjs";
 import { a as RESERVED_COLLECTION_SLUGS, o as RESERVED_FIELD_SLUGS, r as FIELD_TYPE_TO_COLUMN } from "./types-B7TDDFMG.mjs";
-import { a as markContentMediaUsageCollectionStaleSafely, n as deleteContentMediaUsageCollection } from "./content-refresh-CHBBZGwf.mjs";
-import { t as FTSManager } from "./fts-manager-C7pxxk6B.mjs";
+import { a as markContentMediaUsageCollectionStaleSafely, n as deleteContentMediaUsageCollection } from "./content-refresh-BkGWtwUN.mjs";
+import { t as FTSManager } from "./fts-manager-D4K5mA0j.mjs";
 import { t as buildStableHash } from "./stable-hash-DshcXvRE.mjs";
+import { t as parsePublicDiscoveryRules } from "./public-discovery-BlJ80Hoh.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 
@@ -143,6 +144,7 @@ var SchemaRegistry = class {
 		if (input.urlField) this.validateSlug(input.urlField, "field");
 		await this.checkLabelUniqueness(input.label, input.labelSingular);
 		await this.checkUrlPatternUniqueness(input.urlPattern);
+		const publicDiscovery = input.publicDiscovery == null ? void 0 : parsePublicDiscoveryRules(input.publicDiscovery);
 		const id = ulid();
 		const hasSeo = input.hasSeo ?? input.supports?.includes("seo") ?? false;
 		await withTransaction(this.db, async (trx) => {
@@ -158,7 +160,8 @@ var SchemaRegistry = class {
 				has_seo: hasSeo ? 1 : 0,
 				comments_enabled: input.commentsEnabled ? 1 : 0,
 				url_pattern: input.urlPattern ?? null,
-				url_field: input.urlField || null
+				url_field: input.urlField || null,
+				public_discovery: publicDiscovery ? JSON.stringify(publicDiscovery) : null
 			}).execute();
 			await this.createContentTable(input.slug, trx);
 		});
@@ -182,6 +185,7 @@ var SchemaRegistry = class {
 			await this.checkUrlPatternUniqueness(input.urlPattern, slug);
 		}
 		const now = (/* @__PURE__ */ new Date()).toISOString();
+		const publicDiscovery = input.publicDiscovery === void 0 ? existing.publicDiscovery : input.publicDiscovery === null ? void 0 : parsePublicDiscoveryRules(input.publicDiscovery);
 		const supportsArray = input.supports ?? existing.supports;
 		const hasSeo = input.hasSeo !== void 0 ? input.hasSeo : input.supports !== void 0 ? supportsArray.includes("seo") : existing.hasSeo;
 		return withTransaction(this.db, async (trx) => {
@@ -193,6 +197,7 @@ var SchemaRegistry = class {
 				supports: input.supports ? JSON.stringify(input.supports) : JSON.stringify(existing.supports),
 				url_pattern: input.urlPattern !== void 0 ? input.urlPattern ?? null : existing.urlPattern ?? null,
 				url_field: input.urlField !== void 0 ? input.urlField || null : existing.urlField ?? null,
+				public_discovery: publicDiscovery ? JSON.stringify(publicDiscovery) : null,
 				has_seo: hasSeo ? 1 : 0,
 				comments_enabled: input.commentsEnabled !== void 0 ? input.commentsEnabled ? 1 : 0 : existing.commentsEnabled ? 1 : 0,
 				comments_moderation: input.commentsModeration ?? existing.commentsModeration,
@@ -655,6 +660,7 @@ var SchemaRegistry = class {
 			hasSeo: row.has_seo === 1,
 			urlPattern: row.url_pattern ?? void 0,
 			urlField: row.url_field ?? void 0,
+			publicDiscovery: row.public_discovery == null ? void 0 : parsePublicDiscoveryRules(JSON.parse(row.public_discovery)),
 			commentsEnabled: row.comments_enabled === 1,
 			commentsModeration: moderation === "all" || moderation === "first_time" || moderation === "none" ? moderation : "first_time",
 			commentsClosedAfterDays: row.comments_closed_after_days ?? 90,

package/dist/{request-meta-DZTiCIQR.mjs → request-meta-C0druWvK.mjs}

@@ -1,4 +1,4 @@
-import { n as normalizeTrustedHeaders, t as getTrustedProxyHeaders } from "./trusted-proxy-NySPw95m.mjs";
+import { n as normalizeTrustedHeaders, t as getTrustedProxyHeaders } from "./trusted-proxy-j2KYPN4r.mjs";
 
 //#region src/plugins/request-meta.ts
 /**

package/dist/{review-requests-BQbmYLnz.mjs → review-requests-B2tCLjdA.mjs}

@@ -1,5 +1,5 @@
-import { t as ReviewRequestRepository } from "./review-requests-D5CJ4JCy.mjs";
-import { t as ReviewPayloadBuilder } from "./review-payload-BysRWpxS.mjs";
+import { t as ReviewRequestRepository } from "./review-requests-Bo4jcxtU.mjs";
+import { t as ReviewPayloadBuilder } from "./review-payload-Cg9dtFgV.mjs";
 
 //#region src/api/handlers/review-requests.ts
 async function handleReviewRequestCreate(db, handlers, input) {

package/dist/{review-requests-D5CJ4JCy.mjs → review-requests-Bo4jcxtU.mjs}

@@ -1,4 +1,4 @@
-import { i as encodeCursor, r as decodeCursor } from "./types-C9F2TLQV.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-CFvpEEOl.mjs";
 import { ulid } from "ulidx";
 
 //#region src/database/repositories/review-requests.ts

package/dist/{review-route-helpers-DYiujAPM.mjs → review-route-helpers-CeYzVpNa.mjs}

@@ -1,5 +1,5 @@
-import { n as resolveActorIdentity } from "./actor-D3A5PNkH.mjs";
-import { p as logSiteActivitySafely } from "./activity-events-DpvhcjTP.mjs";
+import { n as resolveActorIdentity } from "./actor-Bu9whHez.mjs";
+import { p as logSiteActivitySafely } from "./activity-events-u9wIH8CQ.mjs";
 
 //#region src/api/review-route-helpers.ts
 function resolveReviewRouteActor(locals) {