dineway 0.2.31 → 0.2.32

package/dist/astro/routes/api/mcp.mjs

@@ -1,45 +1,53 @@
 import "../../../dialect-helpers-fk43GbDb.mjs";
 import "../../../base64-F8-DUraK.mjs";
-import "../../../types-DXwmu5rT.mjs";
-import "../../../loader-BFsHwbxI.mjs";
+import "../../../types-BpSTdH1H.mjs";
+import "../../../loader-BDje8ME2.mjs";
 import "../../../object-cache-D51qOseS.mjs";
 import "../../../revision-De7OmYVD.mjs";
-import "../../../content-DW-BRHF4.mjs";
-import "../../../media-Dnpc2hW8.mjs";
+import "../../../content-CVCrcuvD.mjs";
+import "../../../media-dvRjj4po.mjs";
 import "../../../options-1dBRkoCl.mjs";
-import "../../../site-activity-MiKT38qx.mjs";
-import { t as ReviewRequestRepository } from "../../../review-requests-D-lhld0A.mjs";
-import { a as HITL_REQUEST_STATUSES, i as HITL_REQUEST_PRIORITIES, o as HitlRequestRepository, t as PublicationAuthorizationError } from "../../../publication-authorization-BQpdXnha.mjs";
-import { C as ASSIGNMENT_STATUSES, S as ASSIGNMENT_PRIORITIES, _ as toPublicContextDiff, a as EntityResolver, b as HitlRequestService, d as SettingsHitlPayloadBuilder, g as RiskPolicyEvaluator, h as SchemaHitlPayloadBuilder, i as ActorExpertiseService, n as AssignmentService, r as HandoffSnapshotStore, t as WorkflowHitlCoordinator, v as toPublicContextEntry, x as ASSIGNMENT_ACTOR_TYPES, y as toPublicContextEntryPage } from "../../../site-context-CqNMaJ5s.mjs";
-import "../../../request-cache-DoT2mKBT.mjs";
-import { a as ContextRepository, i as parseSiteBriefingScope, r as formatSiteBriefingText, t as SiteBriefingAssembler } from "../../../briefing-32h1e5FV.mjs";
-import { t as SITE_CONTEXT_TYPES } from "../../../context-types-fEeyXC1D.mjs";
-import "../../../content-refresh-iarREtUO.mjs";
-import "../../../fts-manager-Bv4U_Qw0.mjs";
+import "../../../site-activity-7oezuHXK.mjs";
+import { n as ReviewRequestRepository } from "../../../review-requests-DICrYH2-.mjs";
+import { a as HITL_REQUEST_STATUSES, i as HITL_REQUEST_PRIORITIES, o as HitlRequestRepository, t as PublicationAuthorizationError } from "../../../publication-authorization-C-vYPGD8.mjs";
+import { C as ASSIGNMENT_STATUSES, S as ASSIGNMENT_PRIORITIES, _ as toPublicContextDiff, a as EntityResolver, b as HitlRequestService, d as SettingsHitlPayloadBuilder, g as RiskPolicyEvaluator, h as SchemaHitlPayloadBuilder, i as ActorExpertiseService, n as AssignmentService, r as HandoffSnapshotStore, t as WorkflowHitlCoordinator, v as toPublicContextEntry, x as ASSIGNMENT_ACTOR_TYPES, y as toPublicContextEntryPage } from "../../../site-context-CA7rbxux.mjs";
+import "../../../request-cache-BruBnFAR.mjs";
+import { i as parseSiteBriefingScope, o as ContextRepository, r as formatSiteBriefingText, t as SiteBriefingAssembler } from "../../../briefing-BgQTljQt.mjs";
+import { t as SITE_CONTEXT_TYPES } from "../../../context-types-CPWAJRs5.mjs";
+import "../../../content-refresh-QvBIyb_g.mjs";
+import "../../../fts-manager-DX7ZkrCa.mjs";
 import "../../../public-discovery-CyDzK1-S.mjs";
-import "../../../registry-Czz6avGn.mjs";
-import "../../../settings-Bx3wzDK_.mjs";
-import { t as ReviewPayloadBuilder } from "../../../review-payload-BuLgXTY6.mjs";
-import { n as VERSION } from "../../../version-BIlVseq9.mjs";
-import "../../../query-DQOB6OEA.mjs";
-import "../../../zod-generator-3jqAzlTK.mjs";
-import "../../../schema-DxDfwabF.mjs";
-import { t as DinewaySecretsError } from "../../../secrets-MqvM60s_.mjs";
-import { t as IntegrationCredentialStore } from "../../../store-BtCoeap4.mjs";
-import { t as apiError } from "../../../error-BPA9T0AW.mjs";
-import { Dn as contentBylineInputSchema, P as settingsUpdateBody, Tn as bylineUpdateBody, fn as contentSeoInput, xn as bylineCreateBody } from "../../../redirects-C9pg6Dcg.mjs";
-import "../../../byline-fields-C4OeOttq.mjs";
-import "../../../status-BdZSXIP_.mjs";
+import "../../../registry-D-IV_h50.mjs";
+import "../../../settings-CAsQLi0N.mjs";
+import { n as DinewayToolsService, t as DinewayToolsError } from "../../../service-DeX1PRNt.mjs";
+import "../../../runs-DEujUDOj.mjs";
+import { t as DinewaySecretsError } from "../../../secrets-AdCrGg1c.mjs";
+import "../../../ssrf-C7tTSD1r.mjs";
+import "../../../evidence-6IUv9ML3.mjs";
+import { n as submitAutomatedReview } from "../../../submission-C47cHBIg.mjs";
+import { n as VERSION } from "../../../version-9orir5LL.mjs";
+import "../../../query-DcB9uGTW.mjs";
+import "../../../zod-generator-DS5oZNaL.mjs";
+import "../../../schema-IjuRxkqq.mjs";
+import { t as IntegrationCredentialStore } from "../../../store-c4qx3gVh.mjs";
+import { t as apiError } from "../../../error-DLg1H2LT.mjs";
+import { Dn as contentBylineInputSchema, P as settingsUpdateBody, Tn as bylineUpdateBody, fn as contentSeoInput, xn as bylineCreateBody } from "../../../redirects-N8gmWhVM.mjs";
+import "../../../byline-fields-QpmruT5r.mjs";
+import "../../../status-Bba6RbkS.mjs";
 import "../../../api/schemas/index.mjs";
-import { i as hasScope } from "../../../api-tokens-CZ472rzA.mjs";
-import { r as registerPluginMcpRegistry, t as createReviewedPluginMcpCommandExecutor } from "../../../mcp-reviewed-executor-BUEO0Osb.mjs";
-import { n as resolveActorIdentity } from "../../../actor-BraTCiOp.mjs";
-import "../../../activity-DTJtloA1.mjs";
-import { d as logSchemaActivity, o as logContentActivity, p as logSiteActivitySafely, r as contentMcpToolSource, t as activityChangedKeys, x as schemaMcpToolSource } from "../../../activity-events-C1U22VYR.mjs";
-import "../../../utils-iGiCys50.mjs";
-import "../../../search-D-wOjRiP.mjs";
-import { f as readStoredForgewayAccount, n as DinewayToolsService, p as refreshForgewayAccountCredentials, s as createForgewayAccountClient, t as DinewayToolsError, u as normalizeForgewayApiUrl } from "../../../service-BB1n90wh.mjs";
-import { n as convertDataForWrite, t as convertDataForRead } from "../../../portable-text-U85hOafW.mjs";
+import { i as hasScope } from "../../../api-tokens-CmT83Bgj.mjs";
+import { r as registerPluginMcpRegistry, t as createReviewedPluginMcpCommandExecutor } from "../../../mcp-reviewed-executor-DmhM3Cy6.mjs";
+import { n as resolveActorIdentity } from "../../../actor-DrJJsvy6.mjs";
+import "../../../activity-CfryM8jO.mjs";
+import { d as logSchemaActivity, o as logContentActivity, p as logSiteActivitySafely, r as contentMcpToolSource, t as activityChangedKeys, x as schemaMcpToolSource } from "../../../activity-events-BVo9rMUz.mjs";
+import "../../../utils-BK2efsHv.mjs";
+import "../../../search-DxUKN9Zz.mjs";
+import { n as prepareReviewerApproval } from "../../../worker-D7OccgB8.mjs";
+import "../../../policy-950odoX_.mjs";
+import { a as createForgewayAccountClient, c as normalizeForgewayApiUrl, d as refreshForgewayAccountCredentials, u as readStoredForgewayAccount } from "../../../forgeway-account-lYJ8iX3G.mjs";
+import { n as convertDataForWrite, t as convertDataForRead } from "../../../portable-text-tIk9_uz_.mjs";
+import { t as createSiteIntegrationService } from "../../../service-DbgjHWyW.mjs";
+import { t as revokeReview } from "../../../revocation-CkTOhdlw.mjs";
 import { z } from "zod";
 import { Role, canActOnOwn, hasPermission } from "@dineway-ai/auth";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -103,7 +111,8 @@ const endpointInputSchema = z.object({
 	header_params: jsonObjectSchema.optional(),
 	body_type: z.string().trim().min(1).optional()
 }).strict();
-async function serviceOrThrow(options) {
+async function serviceOrThrow(options, extra, mode = "site_byok") {
+	if (mode === "site_byok" && options.resolveSiteService) return options.resolveSiteService(extra);
 	const service = options.service ?? await options.resolveService?.();
 	if (!service) throw new DinewayToolsError("Dineway Tools is unavailable in this runtime.", "TOOLS_UNAVAILABLE");
 	return service;
@@ -130,12 +139,6 @@ function errorResult$1(error) {
 		isError: true
 	};
 }
-async function credentialFor(provider, billingMode, extra, options) {
-	if (billingMode === "hosted") return void 0;
-	const credential = await options.resolveCredential(provider, options.getContext(extra));
-	if (!credential) throw new DinewayToolsError(`No site BYOK credential is configured for provider ${provider}. Configure it in Settings > Integrations or explicitly select hosted billing.`, "SITE_BYOK_CREDENTIAL_MISSING");
-	return credential;
-}
 function mapInput(input) {
 	if (!input) return {};
 	return {
@@ -149,8 +152,9 @@ function mapInput(input) {
 function registerDinewayTools(server, options) {
 	server.registerTool("tools_discover", {
 		title: "Discover Dineway Tools",
-		description: "Search hundreds of Forgeway integration endpoints using natural language. Use inspect before run.",
+		description: "Search the site Integration catalog by text relevance, or select hosted Forgeway discovery. Use inspect before run.",
 		inputSchema: z.object({
+			billing_mode: billingModeSchema,
 			query: z.string().trim().min(1).max(500),
 			limit: z.number().int().min(1).max(100).default(10),
 			min_score: z.number().min(0).max(1).optional()
@@ -159,7 +163,7 @@ function registerDinewayTools(server, options) {
 	}, async (args, extra) => {
 		options.authorizeRead(extra);
 		try {
-			return result(await (await serviceOrThrow(options)).discover({
+			return result(await (await serviceOrThrow(options, extra, args.billing_mode)).discover({
 				query: args.query,
 				limit: args.limit,
 				minScore: args.min_score
@@ -172,6 +176,7 @@ function registerDinewayTools(server, options) {
 		title: "Inspect a Dineway Tool",
 		description: "Inspect one integration endpoint's input schema, output shape, risk policy, and credit price before running it.",
 		inputSchema: z.object({
+			billing_mode: billingModeSchema,
 			provider: z.string().trim().min(1).max(100),
 			endpoint: z.string().trim().min(1).max(500)
 		}),
@@ -179,7 +184,10 @@ function registerDinewayTools(server, options) {
 	}, async (args, extra) => {
 		options.authorizeRead(extra);
 		try {
-			return result(await (await serviceOrThrow(options)).inspect(args));
+			return result(await (await serviceOrThrow(options, extra, args.billing_mode)).inspect({
+				provider: args.provider,
+				endpoint: args.endpoint
+			}));
 		} catch (error) {
 			return errorResult$1(error);
 		}
@@ -201,12 +209,10 @@ function registerDinewayTools(server, options) {
 		options.authorizeRun(extra);
 		try {
 			if (args.confirm_side_effect && !args.idempotency_key) throw new DinewayToolsError("An idempotency key is required when confirming an endpoint with side effects.", "IDEMPOTENCY_KEY_REQUIRED");
-			const credential = await credentialFor(args.provider, args.billing_mode, extra, options);
-			return result(await (await serviceOrThrow(options)).run({
+			return result(await (await serviceOrThrow(options, extra, args.billing_mode)).run({
 				provider: args.provider,
 				endpoint: args.endpoint,
 				input: mapInput(args.input),
-				credential,
 				forceRefresh: args.force_refresh,
 				confirmSideEffect: args.confirm_side_effect
 			}, { idempotencyKey: args.idempotency_key }));
@@ -217,12 +223,15 @@ function registerDinewayTools(server, options) {
 	server.registerTool("tools_get_run", {
 		title: "Get a Dineway Tools Run",
 		description: "Read the current state and result of one integration run.",
-		inputSchema: z.object({ run_id: z.string().uuid() }),
+		inputSchema: z.object({
+			run_id: z.string().uuid(),
+			billing_mode: billingModeSchema
+		}),
 		annotations: readAnnotations
 	}, async (args, extra) => {
 		options.authorizeRead(extra);
 		try {
-			return result(await (await serviceOrThrow(options)).getRun(args.run_id));
+			return result(await (await serviceOrThrow(options, extra, args.billing_mode)).getRun(args.run_id));
 		} catch (error) {
 			return errorResult$1(error);
 		}
@@ -231,6 +240,7 @@ function registerDinewayTools(server, options) {
 		title: "List Dineway Tools Runs",
 		description: "List recent integration runs with cursor pagination.",
 		inputSchema: z.object({
+			billing_mode: billingModeSchema,
 			limit: z.number().int().min(1).max(100).default(20),
 			cursor: z.string().trim().min(1).optional()
 		}),
@@ -238,7 +248,10 @@ function registerDinewayTools(server, options) {
 	}, async (args, extra) => {
 		options.authorizeRead(extra);
 		try {
-			return result(await (await serviceOrThrow(options)).listRuns(args));
+			return result(await (await serviceOrThrow(options, extra, args.billing_mode)).listRuns({
+				limit: args.limit,
+				cursor: args.cursor
+			}));
 		} catch (error) {
 			return errorResult$1(error);
 		}
@@ -254,9 +267,7 @@ function registerDinewayTools(server, options) {
 	}, async (args, extra) => {
 		options.authorizeRun(extra);
 		try {
-			const service = await serviceOrThrow(options);
-			const credential = await credentialFor((await service.getRun(args.run_id)).provider, args.billing_mode, extra, options);
-			return result(await service.stopRun(args.run_id, { credential }));
+			return result(await (await serviceOrThrow(options, extra, args.billing_mode)).stopRun(args.run_id));
 		} catch (error) {
 			return errorResult$1(error);
 		}
@@ -334,7 +345,7 @@ function getDineway(extra) {
 }
 async function getCollectionFields(dineway, collection) {
 	try {
-		const { SchemaRegistry } = await import("../../../schema-DxDfwabF.mjs").then((n) => n.t);
+		const { SchemaRegistry } = await import("../../../schema-IjuRxkqq.mjs").then((n) => n.t);
 		return (await new SchemaRegistry(dineway.db).getCollectionWithFields(collection))?.fields ?? null;
 	} catch {
 		return null;
@@ -351,7 +362,7 @@ async function applyReadMarkdown(dineway, collection, items) {
 	for (const item of items) if (item.data && typeof item.data === "object") item.data = convertDataForRead(item.data, fields, false);
 }
 async function invalidateBylines() {
-	const { invalidateBylineCache } = await import("../../../bylines-Cy5KBNpg.mjs").then((n) => n.t);
+	const { invalidateBylineCache } = await import("../../../bylines-v_ZUQnR-.mjs").then((n) => n.t);
 	invalidateBylineCache();
 }
 function canReadDrafts(extra) {
@@ -740,6 +751,15 @@ function createMcpServer(options = {}) {
 	registerDinewayTools(server, {
 		service: options.dinewayToolsService,
 		resolveService: options.resolveDinewayToolsService,
+		resolveSiteService: async (extra) => {
+			const payload = getExtra(extra);
+			const actor = resolveActorIdentity(actorLocals(payload));
+			return options.dinewayToolsService ?? createSiteIntegrationService({
+				db: payload.dineway.db,
+				storage: payload.dineway.storage ?? void 0,
+				credentials: new IntegrationCredentialStore(payload.dineway.db)
+			}, `${actor.actorType}:${actor.actorId}`);
+		},
 		authorizeRead: (extra) => {
 			requireScope(extra, "tools:read");
 			requireRole(extra, Role.AUTHOR);
@@ -747,9 +767,7 @@ function createMcpServer(options = {}) {
 		authorizeRun: (extra) => {
 			requireScope(extra, "tools:run");
 			requireRole(extra, Role.AUTHOR);
-		},
-		getContext: (extra) => getDineway(extra),
-		resolveCredential: async (provider, dineway) => await options.resolveDinewayToolsCredential?.(provider, dineway) ?? null
+		}
 	});
 	server.registerTool("site_briefing_get", {
 		title: "Get Site Briefing",
@@ -1083,27 +1101,14 @@ function createMcpServer(options = {}) {
 			if (!existing.success) return unwrap(existing);
 			requireOwnership(extra, extractContentAuthorId(existing.data), "content:publish_own", "content:publish_any");
 			const resolvedId = extractContentId(existing.data) ?? target.id;
-			const built = await new ReviewPayloadBuilder(payload.dineway).buildContentReviewPayload({
+			const { item: request, created } = await submitAutomatedReview(payload.dineway.db, payload.dineway, {
 				collection: target.collection,
 				id: resolvedId,
-				actionType: args.action_type,
-				summary: args.summary
-			});
-			const request = await new ReviewRequestRepository(payload.dineway.db).create({
-				collection: built.collection,
-				entryId: built.entryId,
-				scope: built.scope,
-				liveRevisionId: built.liveRevisionId,
-				draftRevisionId: built.draftRevisionId,
-				reviewedRev: built.reviewedRev,
-				actionType: built.actionType,
-				actionHash: built.actionHash,
+				summary: args.summary,
 				riskReason: args.risk_reason,
-				reviewPayload: built.reviewPayload,
-				requestedByActorType: actor.actorType,
-				requestedByActorId: actor.actorId,
-				requestedAuthMetadata: actor.authMetadata
+				actor
 			});
+			if (!created) return jsonResult({ request });
 			await logSiteActivitySafely(payload.dineway.db, locals, {
 				actionType: "review.submitted",
 				subjectType: "review_request",
@@ -1152,6 +1157,7 @@ function createMcpServer(options = {}) {
 		const payload = getExtra(extra);
 		const locals = actorLocals(payload);
 		const actor = resolveActorIdentity(locals);
+		if (args.decision === "approved") await prepareReviewerApproval(payload.dineway.db, payload.dineway, payload.dineway.storage ?? void 0, args.id);
 		const request = await new ReviewRequestRepository(payload.dineway.db).resolve(args.id, {
 			decision: args.decision,
 			resolvedByActorType: actor.actorType,
@@ -1178,6 +1184,24 @@ function createMcpServer(options = {}) {
 		});
 		return jsonResult({ request });
 	});
+	server.registerTool("review_request_revoke", {
+		title: "Revoke Review Approval",
+		description: "Revoke an existing approval and block future release. Requires Admin. Published content stays live.",
+		inputSchema: z.object({
+			id: z.string().min(1),
+			reason: z.string().trim().min(1).max(2e3)
+		})
+	}, async (args, extra) => {
+		requireScope(extra, "admin");
+		requireRole(extra, Role.ADMIN);
+		const payload = getExtra(extra);
+		try {
+			const item = await revokeReview(payload.dineway.db, args.id, resolveActorIdentity(actorLocals(payload)), args.reason, "mcp_tool");
+			return item ? jsonResult({ request: item }) : errorResult("Active approval not found");
+		} catch {
+			return errorResult("Failed to revoke approval");
+		}
+	});
 	server.registerTool("assignment_create", {
 		title: "Create Assignment",
 		description: "Create a workflow assignment attached to a Dineway scope. Assignments are durable human-agent handoffs and must use explicit lifecycle transitions instead of ad hoc status patches.",
@@ -2402,7 +2426,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DxDfwabF.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-IjuRxkqq.mjs").then((n) => n.t);
 			return jsonResult({ items: await new SchemaRegistry(ec.db).listCollections() });
 		} catch (error) {
 			return errorResult(error);
@@ -2418,7 +2442,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DxDfwabF.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-IjuRxkqq.mjs").then((n) => n.t);
 			const collection = await new SchemaRegistry(ec.db).getCollectionWithFields(args.slug);
 			if (!collection) return errorResult(`Collection '${args.slug}' not found`);
 			return jsonResult(collection);
@@ -2448,7 +2472,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DxDfwabF.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-IjuRxkqq.mjs").then((n) => n.t);
 			const collection = await new SchemaRegistry(ec.db).createCollection({
 				slug: args.slug,
 				label: args.label,
@@ -2512,7 +2536,7 @@ function createMcpServer(options = {}) {
 					request
 				});
 			}
-			const { SchemaRegistry } = await import("../../../schema-DxDfwabF.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-IjuRxkqq.mjs").then((n) => n.t);
 			await new SchemaRegistry(ec.db).deleteCollection(args.slug, { force: args.force });
 			ec.invalidateManifest();
 			await logSchemaActivity(ec.db, locals, {
@@ -2576,7 +2600,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DxDfwabF.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-IjuRxkqq.mjs").then((n) => n.t);
 			const field = await new SchemaRegistry(ec.db).createField(args.collection, {
 				slug: args.slug,
 				label: args.label,
@@ -2645,7 +2669,7 @@ function createMcpServer(options = {}) {
 					request
 				});
 			}
-			const { SchemaRegistry } = await import("../../../schema-DxDfwabF.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-IjuRxkqq.mjs").then((n) => n.t);
 			await new SchemaRegistry(ec.db).deleteField(args.collection, args.fieldSlug);
 			ec.invalidateManifest();
 			await logSchemaActivity(ec.db, locals, {
@@ -2778,7 +2802,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { searchWithDb } = await import("../../../search-D-wOjRiP.mjs").then((n) => n.t);
+			const { searchWithDb } = await import("../../../search-DxUKN9Zz.mjs").then((n) => n.t);
 			return jsonResult(await searchWithDb(ec.db, args.query, {
 				collections: args.collections,
 				locale: args.locale,
@@ -2804,7 +2828,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-BfL607qj.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-Ctil4rij.mjs").then((n) => n.n);
 			return jsonResult(await new BylineRepository(ec.db).findMany({
 				search: args.search,
 				isGuest: args.isGuest,
@@ -2826,7 +2850,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-BfL607qj.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-Ctil4rij.mjs").then((n) => n.n);
 			const byline = await new BylineRepository(ec.db).findById(args.id);
 			if (!byline) return errorResult(`Byline '${args.id}' not found`);
 			return jsonResult(byline);
@@ -2844,7 +2868,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleBylineCreate } = await import("../../../bylines-DpjxbnYL.mjs").then((n) => n.t);
+			const { handleBylineCreate } = await import("../../../bylines-BcuBpzVi.mjs").then((n) => n.t);
 			const result = await handleBylineCreate(ec.db, args);
 			if (result.success) await invalidateBylines();
 			return unwrap(result);
@@ -2864,7 +2888,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleBylineUpdate } = await import("../../../bylines-DpjxbnYL.mjs").then((n) => n.t);
+			const { handleBylineUpdate } = await import("../../../bylines-BcuBpzVi.mjs").then((n) => n.t);
 			const { id, ...input } = args;
 			const result = await handleBylineUpdate(ec.db, id, input);
 			if (result.success) await invalidateBylines();
@@ -2883,7 +2907,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-BfL607qj.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-Ctil4rij.mjs").then((n) => n.n);
 			if (!await new BylineRepository(ec.db).delete(args.id)) return errorResult(`Byline '${args.id}' not found`);
 			await invalidateBylines();
 			return jsonResult({ deleted: args.id });
@@ -2900,7 +2924,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleBylineTranslations } = await import("../../../bylines-DpjxbnYL.mjs").then((n) => n.t);
+			const { handleBylineTranslations } = await import("../../../bylines-BcuBpzVi.mjs").then((n) => n.t);
 			return unwrap(await handleBylineTranslations(ec.db, args.id));
 		} catch (error) {
 			return errorResult(error);
@@ -2915,7 +2939,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleTaxonomyList } = await import("../../../taxonomies-BMArg_t1.mjs").then((n) => n.l);
+			const { handleTaxonomyList } = await import("../../../taxonomies-ALDiRQ84.mjs").then((n) => n.l);
 			return unwrap(await handleTaxonomyList(ec.db, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2935,12 +2959,12 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleTaxonomyList } = await import("../../../taxonomies-BMArg_t1.mjs").then((n) => n.l);
+			const { handleTaxonomyList } = await import("../../../taxonomies-ALDiRQ84.mjs").then((n) => n.l);
 			const listResult = await handleTaxonomyList(ec.db, { locale: args.locale });
 			if (!listResult.success) return unwrap(listResult);
 			if (!listResult.data.taxonomies.find((t) => t.name === args.taxonomy)) return errorResult(`Taxonomy '${args.taxonomy}' not found`);
-			const { TaxonomyRepository } = await import("../../../taxonomy-DKG0n_q8.mjs").then((n) => n.n);
-			const { decodeCursor, encodeCursor } = await import("../../../types-DXwmu5rT.mjs").then((n) => n.a);
+			const { TaxonomyRepository } = await import("../../../taxonomy-BOBTJ_aE.mjs").then((n) => n.n);
+			const { decodeCursor, encodeCursor } = await import("../../../types-BpSTdH1H.mjs").then((n) => n.a);
 			const repo = new TaxonomyRepository(ec.db);
 			const limit = Math.min(args.limit ?? 50, 100);
 			const terms = await repo.findByName(args.taxonomy, { locale: args.locale });
@@ -2989,7 +3013,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleTermCreate } = await import("../../../taxonomies-BMArg_t1.mjs").then((n) => n.l);
+			const { handleTermCreate } = await import("../../../taxonomies-ALDiRQ84.mjs").then((n) => n.l);
 			return unwrap(await handleTermCreate(ec.db, args.taxonomy, {
 				slug: args.slug,
 				label: args.label,
@@ -3019,7 +3043,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleTermUpdate } = await import("../../../taxonomies-BMArg_t1.mjs").then((n) => n.l);
+			const { handleTermUpdate } = await import("../../../taxonomies-ALDiRQ84.mjs").then((n) => n.l);
 			return unwrap(await handleTermUpdate(ec.db, args.taxonomy, args.termSlug, {
 				slug: args.slug,
 				label: args.label,
@@ -3044,7 +3068,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleTermDelete } = await import("../../../taxonomies-BMArg_t1.mjs").then((n) => n.l);
+			const { handleTermDelete } = await import("../../../taxonomies-ALDiRQ84.mjs").then((n) => n.l);
 			return unwrap(await handleTermDelete(ec.db, args.taxonomy, args.termSlug, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -3059,7 +3083,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleTermTranslations } = await import("../../../taxonomies-BMArg_t1.mjs").then((n) => n.l);
+			const { handleTermTranslations } = await import("../../../taxonomies-ALDiRQ84.mjs").then((n) => n.l);
 			return unwrap(await handleTermTranslations(ec.db, args.id));
 		} catch (error) {
 			return errorResult(error);
@@ -3074,7 +3098,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuList } = await import("../../../menus-F1fYny2w.mjs").then((n) => n.d);
+			const { handleMenuList } = await import("../../../menus-CpuR4Qkm.mjs").then((n) => n.d);
 			return unwrap(await handleMenuList(ec.db, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -3092,7 +3116,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuGet } = await import("../../../menus-F1fYny2w.mjs").then((n) => n.d);
+			const { handleMenuGet } = await import("../../../menus-CpuR4Qkm.mjs").then((n) => n.d);
 			return unwrap(await handleMenuGet(ec.db, args.name, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -3107,7 +3131,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuTranslations } = await import("../../../menus-F1fYny2w.mjs").then((n) => n.d);
+			const { handleMenuTranslations } = await import("../../../menus-CpuR4Qkm.mjs").then((n) => n.d);
 			return unwrap(await handleMenuTranslations(ec.db, args.id));
 		} catch (error) {
 			return errorResult(error);
@@ -3127,7 +3151,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuCreate } = await import("../../../menus-F1fYny2w.mjs").then((n) => n.d);
+			const { handleMenuCreate } = await import("../../../menus-CpuR4Qkm.mjs").then((n) => n.d);
 			return unwrap(await handleMenuCreate(ec.db, {
 				name: args.name,
 				label: args.label,
@@ -3151,7 +3175,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuUpdate } = await import("../../../menus-F1fYny2w.mjs").then((n) => n.d);
+			const { handleMenuUpdate } = await import("../../../menus-CpuR4Qkm.mjs").then((n) => n.d);
 			return unwrap(await handleMenuUpdate(ec.db, args.name, {
 				label: args.label,
 				locale: args.locale
@@ -3173,7 +3197,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuDelete } = await import("../../../menus-F1fYny2w.mjs").then((n) => n.d);
+			const { handleMenuDelete } = await import("../../../menus-CpuR4Qkm.mjs").then((n) => n.d);
 			return unwrap(await handleMenuDelete(ec.db, args.name, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -3208,7 +3232,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuSetItems } = await import("../../../menus-F1fYny2w.mjs").then((n) => n.d);
+			const { handleMenuSetItems } = await import("../../../menus-CpuR4Qkm.mjs").then((n) => n.d);
 			return unwrap(await handleMenuSetItems(ec.db, args.name, args.items, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -3255,7 +3279,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getDineway(extra);
 		try {
-			const { handleSettingsGet } = await import("../../../settings-CYt46_A5.mjs").then((n) => n.r);
+			const { handleSettingsGet } = await import("../../../settings-BKEHw6Bu.mjs").then((n) => n.r);
 			return unwrap(await handleSettingsGet(ec.db, ec.storage));
 		} catch (error) {
 			return errorResult(error);
@@ -3292,7 +3316,7 @@ function createMcpServer(options = {}) {
 					request
 				});
 			}
-			const { handleSettingsUpdate } = await import("../../../settings-CYt46_A5.mjs").then((n) => n.r);
+			const { handleSettingsUpdate } = await import("../../../settings-BKEHw6Bu.mjs").then((n) => n.r);
 			const result = await handleSettingsUpdate(ec.db, ec.storage, settingsInput);
 			if (!result.success) return unwrap(result);
 			await logSiteActivitySafely(ec.db, locals, {
@@ -3370,7 +3394,6 @@ const POST = async ({ request, locals }) => {
 			toolsService ??= createDinewayToolsRuntimeService();
 			return toolsService;
 		},
-		resolveDinewayToolsCredential: (provider, handlers) => new IntegrationCredentialStore(handlers.db).resolveForRuntime(provider),
 		pluginMcpRegistry: dineway.getPluginMcpRegistry(),
 		executePluginMcpCommand: createReviewedPluginMcpCommandExecutor()
 	});

package/dist/astro/routes/api/media/_id_/confirm.mjs

@@ -1,16 +1,16 @@
 import "../../../../../base64-F8-DUraK.mjs";
-import "../../../../../types-DXwmu5rT.mjs";
-import { t as MediaRepository } from "../../../../../media-Dnpc2hW8.mjs";
-import { t as enrichImageMetadata } from "../../../../../enrich-Uw_OA9Ve.mjs";
-import "../../../../../context-types-fEeyXC1D.mjs";
+import "../../../../../types-BpSTdH1H.mjs";
+import { t as MediaRepository } from "../../../../../media-dvRjj4po.mjs";
+import { t as enrichImageMetadata } from "../../../../../enrich-KErvJOuI.mjs";
+import "../../../../../context-types-CPWAJRs5.mjs";
 import "../../../../../public-discovery-CyDzK1-S.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-BPA9T0AW.mjs";
-import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-CJC9DGe9.mjs";
-import { Bt as mediaConfirmBody } from "../../../../../redirects-C9pg6Dcg.mjs";
-import "../../../../../byline-fields-C4OeOttq.mjs";
-import "../../../../../status-BdZSXIP_.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DLg1H2LT.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-IsGn-5lt.mjs";
+import { Bt as mediaConfirmBody } from "../../../../../redirects-N8gmWhVM.mjs";
+import "../../../../../byline-fields-QpmruT5r.mjs";
+import "../../../../../status-Bba6RbkS.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as requirePerm, t as requireOwnerPerm } from "../../../../../authorize-Dg75h4BN.mjs";
+import { n as requirePerm, t as requireOwnerPerm } from "../../../../../authorize-KcI0pAfN.mjs";
 
 //#region src/astro/routes/api/media/[id]/confirm.ts
 const prerender = false;

package/dist/astro/routes/api/media/_id_.mjs

@@ -1,13 +1,13 @@
-import "../../../../context-types-fEeyXC1D.mjs";
+import "../../../../context-types-CPWAJRs5.mjs";
 import "../../../../public-discovery-CyDzK1-S.mjs";
 import { t as addInternalMediaUrl } from "../../../../url-C_pLSrGZ.mjs";
-import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../error-BPA9T0AW.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-CJC9DGe9.mjs";
-import { Jt as mediaUpdateBody } from "../../../../redirects-C9pg6Dcg.mjs";
-import "../../../../byline-fields-C4OeOttq.mjs";
-import "../../../../status-BdZSXIP_.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DLg1H2LT.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-IsGn-5lt.mjs";
+import { Jt as mediaUpdateBody } from "../../../../redirects-N8gmWhVM.mjs";
+import "../../../../byline-fields-QpmruT5r.mjs";
+import "../../../../status-Bba6RbkS.mjs";
 import "../../../../api/schemas/index.mjs";
-import { n as requirePerm, t as requireOwnerPerm } from "../../../../authorize-Dg75h4BN.mjs";
+import { n as requirePerm, t as requireOwnerPerm } from "../../../../authorize-KcI0pAfN.mjs";
 
 //#region src/astro/routes/api/media/[id].ts
 const prerender = false;

package/dist/astro/routes/api/media/file/_...key_.mjs

@@ -1,4 +1,4 @@
-import { r as handleError, t as apiError } from "../../../../../error-BPA9T0AW.mjs";
+import { r as handleError, t as apiError } from "../../../../../error-DLg1H2LT.mjs";
 
 //#region src/astro/routes/api/media/file/[...key].ts
 const prerender = false;