dineway 0.2.33 → 0.2.35

package/dist/db/index.mjs

@@ -1,5 +1,6 @@
-import { i as runMigrations, n as getMigrationStatus, r as rollbackMigration } from "../runner-DJiRFyLI.mjs";
-import "../dialect-helpers-fk43GbDb.mjs";
+import { a as runMigrations, i as rollbackMigration, r as getMigrationStatus } from "../runner-CVeq0266.mjs";
+import "../d1-binding-D6HZa3ks.mjs";
+import "../dialect-helpers-C6xtO-Ui.mjs";
 
 //#region src/db/adapters.ts
 /**
@@ -40,11 +41,13 @@ function libsql(config) {
 		type: "sqlite"
 	};
 }
-/** Remote libSQL over HTTP, suitable for Cloudflare Workers and ChatGPT Sites. */
-function libsqlHttp(config = {}) {
+const BINDING_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/** Cloudflare D1 binding. Schema migrations run explicitly before deployment. */
+function d1(config = { binding: "DB" }) {
+	if (!BINDING_NAME.test(config.binding)) throw new Error("D1 binding must be a valid identifier.");
 	return {
-		entrypoint: "dineway/db/libsql-http",
-		config,
+		entrypoint: "dineway/db/d1",
+		config: { binding: config.binding },
 		type: "sqlite"
 	};
 }
@@ -67,4 +70,4 @@ function postgres(config) {
 }
 
 //#endregion
-export { getMigrationStatus, libsql, libsqlHttp, postgres, rollbackMigration, runMigrations, sqlite };
+export { d1, getMigrationStatus, libsql, postgres, rollbackMigration, runMigrations, sqlite };

package/dist/db/libsql.d.mts

@@ -1,4 +1,4 @@
-import { r as LibsqlConfig } from "../adapters-DHt3f2lu.mjs";
+import { i as LibsqlConfig } from "../adapters-Rol-inz6.mjs";
 import { Dialect } from "kysely";
 
 //#region src/db/libsql.d.ts

package/dist/db/libsql.mjs

@@ -1,7 +1,50 @@
-import { t as LibsqlDialect } from "../libsql-dialect-CANq6UNI.mjs";
-import { SqliteDialect } from "kysely";
+import { SqliteAdapter, SqliteDialect } from "kysely";
 import BetterSqlite3 from "better-sqlite3";
+import { LibsqlDialect } from "@libsql/kysely-libsql";
 
+//#region src/db/libsql-dialect.ts
+const MIGRATION_LOCK_LEASE_MS = 5 * 6e4;
+const MIGRATION_LOCK_WAIT_MS = 3e4;
+const MIGRATION_LOCK_POLL_MS = 50;
+function sleep(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
+}
+var LibsqlMigrationLockAdapter = class extends SqliteAdapter {
+	#claims = /* @__PURE__ */ new Map();
+	async acquireMigrationLock(db, options) {
+		const queryDb = options.lockTableSchema ? db.withSchema(options.lockTableSchema) : db;
+		const claimKey = `${options.lockTableSchema ?? ""}.${options.lockTable}:${options.lockRowId}`;
+		const waitDeadline = Date.now() + MIGRATION_LOCK_WAIT_MS;
+		for (;;) {
+			const now = Date.now();
+			const claim = now + MIGRATION_LOCK_LEASE_MS;
+			if ((await queryDb.updateTable(options.lockTable).set({ is_locked: claim }).where("id", "=", options.lockRowId).where((expression) => expression.or([expression("is_locked", "=", 0), expression("is_locked", "<=", now)])).executeTakeFirst()).numUpdatedRows === 1n) {
+				this.#claims.set(claimKey, claim);
+				return;
+			}
+			if (now >= waitDeadline) throw new Error("Timed out waiting for the libSQL migration lock");
+			await sleep(MIGRATION_LOCK_POLL_MS);
+		}
+	}
+	async releaseMigrationLock(db, options) {
+		const claimKey = `${options.lockTableSchema ?? ""}.${options.lockTable}:${options.lockRowId}`;
+		const claim = this.#claims.get(claimKey);
+		if (claim === void 0) return;
+		const queryDb = options.lockTableSchema ? db.withSchema(options.lockTableSchema) : db;
+		try {
+			await queryDb.updateTable(options.lockTable).set({ is_locked: 0 }).where("id", "=", options.lockRowId).where("is_locked", "=", claim).execute();
+		} finally {
+			this.#claims.delete(claimKey);
+		}
+	}
+};
+var LibsqlDialect$1 = class extends LibsqlDialect {
+	createAdapter() {
+		return new LibsqlMigrationLockAdapter();
+	}
+};
+
+//#endregion
 //#region src/db/libsql.ts
 /**
 * libSQL runtime adapter
@@ -17,7 +60,7 @@ import BetterSqlite3 from "better-sqlite3";
 */
 function createDialect(config) {
 	if (config.url === ":memory:" || config.url.startsWith("file:")) return new SqliteDialect({ database: new BetterSqlite3(config.url === ":memory:" ? config.url : config.url.slice(5)) });
-	return new LibsqlDialect({
+	return new LibsqlDialect$1({
 		url: config.url,
 		authToken: config.authToken
 	});

package/dist/db/postgres.d.mts

@@ -1,4 +1,4 @@
-import { a as PostgresConfig } from "../adapters-DHt3f2lu.mjs";
+import { a as PostgresConfig } from "../adapters-Rol-inz6.mjs";
 import { PostgresDialect } from "kysely";
 
 //#region src/db/postgres.d.ts

package/dist/db/sqlite.d.mts

@@ -1,4 +1,4 @@
-import { o as SqliteConfig } from "../adapters-DHt3f2lu.mjs";
+import { o as SqliteConfig } from "../adapters-Rol-inz6.mjs";
 import { Dialect } from "kysely";
 
 //#region src/db/sqlite.d.ts

package/dist/{device-flow-eOcL5m0Q.mjs → device-flow-Prqg6ycD.mjs}

@@ -1,9 +1,10 @@
-import { t as withTransaction } from "./transaction-BGQgnwUi.mjs";
-import { a as hashApiToken, n as TOKEN_PREFIXES, r as generatePrefixedToken, t as ALL_VALID_SCOPES } from "./api-tokens-CmT83Bgj.mjs";
-import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-B9x8delL.mjs";
-import { o as lookupOAuthClient } from "./oauth-clients-tovQ4D4h.mjs";
-import { t as lookupUserRoleAndStatus } from "./oauth-user-lookup-B451pZmd.mjs";
-import { clampScopes } from "@dineway-ai/auth";
+import { AtomicWriteConflict, atomicBatch, rowUnchanged } from "./database/batch.mjs";
+import { r as currentIsoTimestampValue } from "./dialect-helpers-C6xtO-Ui.mjs";
+import { a as hashApiToken, n as TOKEN_PREFIXES, r as generatePrefixedToken, t as ALL_VALID_SCOPES } from "./api-tokens-DA18zxza.mjs";
+import { a as filterExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, o as getExperimentalSiteContextWorkflowScopesDisabledMessage, r as disabledExperimentalSiteContextWorkflowScopes } from "./experimental-workflows-fzJHB3ZI.mjs";
+import { t as readTokenAuthority } from "./oauth-authority-DOjME4Hh.mjs";
+import { sql } from "kysely";
+import { clampScopes, toRoleLevel } from "@dineway-ai/auth";
 import { generateCodeVerifier } from "arctic";
 
 //#region src/api/handlers/device-flow.ts
@@ -200,57 +201,72 @@ async function handleDeviceTokenExchange(db, input) {
 				message: "Invalid device code state"
 			}
 		};
-		return await withTransaction(db, async (trx) => {
-			const consumed = await trx.deleteFrom("_dineway_device_codes").where("device_code", "=", input.device_code).where("status", "=", "authorized").where("user_id", "is not", null).returningAll().executeTakeFirst();
-			if (!consumed?.user_id) return {
-				success: false,
-				error: {
-					code: "INVALID_GRANT",
-					message: "Invalid device code"
-				}
-			};
-			const scopes = filterExperimentalSiteContextWorkflowScopes(JSON.parse(consumed.scopes));
-			if (scopes.length === 0) return {
-				success: false,
-				error: {
-					code: "INVALID_GRANT",
-					message: "Device code no longer supports any permitted scopes"
-				}
-			};
-			const accessToken = generatePrefixedToken(TOKEN_PREFIXES.OAUTH_ACCESS);
-			const accessExpires = expiresAt(ACCESS_TOKEN_TTL_SECONDS);
-			const refreshToken = generatePrefixedToken(TOKEN_PREFIXES.OAUTH_REFRESH);
-			const refreshExpires = expiresAt(REFRESH_TOKEN_TTL_SECONDS);
-			await trx.insertInto("_dineway_oauth_tokens").values({
-				token_hash: accessToken.hash,
-				token_type: "access",
-				user_id: consumed.user_id,
-				scopes: JSON.stringify(scopes),
-				client_type: "cli",
-				expires_at: accessExpires,
-				refresh_token_hash: refreshToken.hash
-			}).execute();
-			await trx.insertInto("_dineway_oauth_tokens").values({
-				token_hash: refreshToken.hash,
-				token_type: "refresh",
-				user_id: consumed.user_id,
-				scopes: JSON.stringify(scopes),
-				client_type: "cli",
-				expires_at: refreshExpires,
-				refresh_token_hash: null
-			}).execute();
-			return {
-				success: true,
-				data: {
-					access_token: accessToken.raw,
-					refresh_token: refreshToken.raw,
-					token_type: "Bearer",
-					expires_in: ACCESS_TOKEN_TTL_SECONDS,
-					scope: scopes.join(" ")
-				}
-			};
+		const authority = await readTokenAuthority(db, row.user_id);
+		if (!authority.user || authority.user.disabled) return {
+			success: false,
+			error: {
+				code: "INVALID_GRANT",
+				message: "User account is unavailable"
+			}
+		};
+		const scopes = clampScopes(filterExperimentalSiteContextWorkflowScopes(JSON.parse(row.scopes)), authority.user.role, { includeExperimental: experimentalSiteContextWorkflowsEnabled() });
+		if (scopes.length === 0) return {
+			success: false,
+			error: {
+				code: "INVALID_GRANT",
+				message: "Device code no longer supports any permitted scopes"
+			}
+		};
+		const accessToken = generatePrefixedToken(TOKEN_PREFIXES.OAUTH_ACCESS);
+		const accessExpires = expiresAt(ACCESS_TOKEN_TTL_SECONDS);
+		const refreshToken = generatePrefixedToken(TOKEN_PREFIXES.OAUTH_REFRESH);
+		const refreshExpires = expiresAt(REFRESH_TOKEN_TTL_SECONDS);
+		await atomicBatch(db, {
+			checks: [
+				rowUnchanged("_dineway_device_codes", row),
+				...authority.checks,
+				sql`EXISTS (SELECT 1 FROM _dineway_device_codes WHERE device_code = ${input.device_code} AND expires_at > ${currentIsoTimestampValue(db)})`
+			],
+			statements: [
+				db.deleteFrom("_dineway_device_codes").where("device_code", "=", input.device_code).compile(),
+				db.insertInto("_dineway_oauth_tokens").values({
+					token_hash: accessToken.hash,
+					token_type: "access",
+					user_id: row.user_id,
+					scopes: JSON.stringify(scopes),
+					client_type: "cli",
+					expires_at: accessExpires,
+					refresh_token_hash: refreshToken.hash
+				}).compile(),
+				db.insertInto("_dineway_oauth_tokens").values({
+					token_hash: refreshToken.hash,
+					token_type: "refresh",
+					user_id: row.user_id,
+					scopes: JSON.stringify(scopes),
+					client_type: "cli",
+					expires_at: refreshExpires,
+					refresh_token_hash: null
+				}).compile()
+			]
 		});
-	} catch {
+		return {
+			success: true,
+			data: {
+				access_token: accessToken.raw,
+				refresh_token: refreshToken.raw,
+				token_type: "Bearer",
+				expires_in: ACCESS_TOKEN_TTL_SECONDS,
+				scope: scopes.join(" ")
+			}
+		};
+	} catch (error) {
+		if (error instanceof AtomicWriteConflict) return {
+			success: false,
+			error: {
+				code: "INVALID_GRANT",
+				message: "Device code or account authorization changed"
+			}
+		};
 		return {
 			success: false,
 			error: {
@@ -291,8 +307,24 @@ async function handleDeviceAuthorize(db, userId, userRole, input) {
 				}
 			};
 		}
+		const authority = await readTokenAuthority(db, userId);
+		if (!authority.user || authority.user.disabled) return {
+			success: false,
+			error: {
+				code: "FORBIDDEN",
+				message: "User account is unavailable"
+			}
+		};
+		const checks = [
+			rowUnchanged("_dineway_device_codes", match),
+			...authority.checks,
+			sql`EXISTS (SELECT 1 FROM _dineway_device_codes WHERE device_code = ${match.device_code} AND expires_at > ${currentIsoTimestampValue(db)})`
+		];
 		if ((input.action ?? "approve") === "deny") {
-			await db.updateTable("_dineway_device_codes").set({ status: "denied" }).where("device_code", "=", match.device_code).execute();
+			await atomicBatch(db, {
+				checks,
+				statements: [db.updateTable("_dineway_device_codes").set({ status: "denied" }).where("device_code", "=", match.device_code).compile()]
+			});
 			return {
 				success: true,
 				data: { authorized: false }
@@ -306,7 +338,7 @@ async function handleDeviceAuthorize(db, userId, userRole, input) {
 				message: getExperimentalSiteContextWorkflowScopesDisabledMessage()
 			}
 		};
-		const effectiveScopes = clampScopes(requestedScopes, userRole, { includeExperimental: experimentalSiteContextWorkflowsEnabled() });
+		const effectiveScopes = clampScopes(requestedScopes, toRoleLevel(Math.min(userRole, authority.user.role)), { includeExperimental: experimentalSiteContextWorkflowsEnabled() });
 		if (effectiveScopes.length === 0) return {
 			success: false,
 			error: {
@@ -314,16 +346,26 @@ async function handleDeviceAuthorize(db, userId, userRole, input) {
 				message: "Your role does not permit any of the requested scopes"
 			}
 		};
-		await db.updateTable("_dineway_device_codes").set({
-			status: "authorized",
-			user_id: userId,
-			scopes: JSON.stringify(effectiveScopes)
-		}).where("device_code", "=", match.device_code).execute();
+		await atomicBatch(db, {
+			checks,
+			statements: [db.updateTable("_dineway_device_codes").set({
+				status: "authorized",
+				user_id: userId,
+				scopes: JSON.stringify(effectiveScopes)
+			}).where("device_code", "=", match.device_code).compile()]
+		});
 		return {
 			success: true,
 			data: { authorized: true }
 		};
-	} catch {
+	} catch (error) {
+		if (error instanceof AtomicWriteConflict) return {
+			success: false,
+			error: {
+				code: "INVALID_CODE",
+				message: "Device code or account authorization changed"
+			}
+		};
 		return {
 			success: false,
 			error: {
@@ -365,8 +407,7 @@ async function handleTokenRefresh(db, input) {
 			}
 		};
 		if (new Date(row.expires_at) < /* @__PURE__ */ new Date()) {
-			await db.deleteFrom("_dineway_oauth_tokens").where("token_hash", "=", refreshHash).execute();
-			await db.deleteFrom("_dineway_oauth_tokens").where("refresh_token_hash", "=", refreshHash).execute();
+			await db.deleteFrom("_dineway_oauth_tokens").where((eb) => eb.or([eb("token_hash", "=", refreshHash), eb("refresh_token_hash", "=", refreshHash)])).execute();
 			return {
 				success: false,
 				error: {
@@ -375,7 +416,8 @@ async function handleTokenRefresh(db, input) {
 				}
 			};
 		}
-		const userInfo = await lookupUserRoleAndStatus(db, row.user_id);
+		const authority = await readTokenAuthority(db, row.user_id, row.client_id);
+		const userInfo = authority.user;
 		if (!userInfo) {
 			await db.deleteFrom("_dineway_oauth_tokens").where("user_id", "=", row.user_id).execute();
 			return {
@@ -398,12 +440,11 @@ async function handleTokenRefresh(db, input) {
 		}
 		let scopes = clampScopes(filterExperimentalSiteContextWorkflowScopes(JSON.parse(row.scopes)), userInfo.role, { includeExperimental: experimentalSiteContextWorkflowsEnabled() });
 		if (row.client_id) {
-			const client = await lookupOAuthClient(db, row.client_id);
+			const client = authority.client;
 			if (client?.scopes?.length) scopes = scopes.filter((s) => client.scopes.includes(s));
 		}
-		if (scopes.length === 0) {
-			await db.deleteFrom("_dineway_oauth_tokens").where("token_hash", "=", refreshHash).execute();
-			await db.deleteFrom("_dineway_oauth_tokens").where("refresh_token_hash", "=", refreshHash).execute();
+		if (scopes.length === 0 || row.client_id && !authority.client) {
+			await db.deleteFrom("_dineway_oauth_tokens").where((eb) => eb.or([eb("token_hash", "=", refreshHash), eb("refresh_token_hash", "=", refreshHash)])).execute();
 			return {
 				success: false,
 				error: {
@@ -412,18 +453,25 @@ async function handleTokenRefresh(db, input) {
 				}
 			};
 		}
-		await db.deleteFrom("_dineway_oauth_tokens").where("refresh_token_hash", "=", refreshHash).where("token_type", "=", "access").execute();
 		const accessToken = generatePrefixedToken(TOKEN_PREFIXES.OAUTH_ACCESS);
 		const accessExpires = expiresAt(ACCESS_TOKEN_TTL_SECONDS);
-		await db.insertInto("_dineway_oauth_tokens").values({
-			token_hash: accessToken.hash,
-			token_type: "access",
-			user_id: row.user_id,
-			scopes: JSON.stringify(scopes),
-			client_type: row.client_type,
-			expires_at: accessExpires,
-			refresh_token_hash: refreshHash
-		}).execute();
+		await atomicBatch(db, {
+			checks: [
+				rowUnchanged("_dineway_oauth_tokens", row),
+				...authority.checks,
+				sql`EXISTS (SELECT 1 FROM _dineway_oauth_tokens WHERE token_hash = ${refreshHash} AND expires_at > ${currentIsoTimestampValue(db)})`
+			],
+			statements: [db.deleteFrom("_dineway_oauth_tokens").where("refresh_token_hash", "=", refreshHash).where("token_type", "=", "access").compile(), db.insertInto("_dineway_oauth_tokens").values({
+				token_hash: accessToken.hash,
+				token_type: "access",
+				user_id: row.user_id,
+				scopes: JSON.stringify(scopes),
+				client_type: row.client_type,
+				expires_at: accessExpires,
+				refresh_token_hash: refreshHash,
+				client_id: row.client_id
+			}).compile()]
+		});
 		return {
 			success: true,
 			data: {
@@ -455,19 +503,7 @@ async function handleTokenRefresh(db, input) {
 async function handleTokenRevoke(db, input) {
 	try {
 		const hash = hashApiToken(input.token);
-		const row = await db.selectFrom("_dineway_oauth_tokens").select([
-			"token_hash",
-			"token_type",
-			"refresh_token_hash"
-		]).where("token_hash", "=", hash).executeTakeFirst();
-		if (!row) return {
-			success: true,
-			data: { revoked: true }
-		};
-		if (row.token_type === "refresh") {
-			await db.deleteFrom("_dineway_oauth_tokens").where("refresh_token_hash", "=", hash).execute();
-			await db.deleteFrom("_dineway_oauth_tokens").where("token_hash", "=", hash).execute();
-		} else await db.deleteFrom("_dineway_oauth_tokens").where("token_hash", "=", hash).execute();
+		await db.deleteFrom("_dineway_oauth_tokens").where((eb) => eb.or([eb("token_hash", "=", hash), eb("refresh_token_hash", "=", hash)])).execute();
 		return {
 			success: true,
 			data: { revoked: true }

package/dist/{dialect-helpers-fk43GbDb.mjs → dialect-helpers-C6xtO-Ui.mjs}

@@ -1,4 +1,4 @@
-import { n as validateJsonFieldName, t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
+import { n as validateJsonFieldName, t as validateIdentifier } from "./validate-Co3j6T_K.mjs";
 import { sql } from "kysely";
 
 //#region src/database/dialect-helpers.ts

package/dist/{discovery-CJkuHGhZ.mjs → discovery-CYcZJ1o3.mjs}

@@ -1,8 +1,8 @@
-import { t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
-import { i as encodeCursor, r as decodeCursor } from "./types-BpSTdH1H.mjs";
-import { n as publicDiscoveryExclusions } from "./public-discovery-CyDzK1-S.mjs";
-import { n as SchemaRegistry } from "./registry-D-IV_h50.mjs";
-import { t as resolveContentUrl } from "./public-url-oudwI7K0.mjs";
+import { t as validateIdentifier } from "./validate-Co3j6T_K.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-BqxIv8Il.mjs";
+import { n as publicDiscoveryExclusions } from "./public-discovery-CTql6jdZ.mjs";
+import { n as SchemaRegistry } from "./registry-DcV93OL_.mjs";
+import { t as resolveContentUrl } from "./public-url-DNt9A1yS.mjs";
 import { sql } from "kysely";
 
 //#region src/seo/canonical-url.ts

package/dist/{enrich-KErvJOuI.mjs → enrich-BjF-J4sF.mjs}

@@ -1,4 +1,4 @@
-import { n as normalizeMime } from "./mime-CDTtL7jE.mjs";
+import { n as normalizeMime } from "./mime-D_ae-u_U.mjs";
 import { encode } from "blurhash";
 import { imageSize } from "image-size";
 

package/dist/{evidence-6IUv9ML3.mjs → evidence-krrA3uiG.mjs}

@@ -1,10 +1,10 @@
-import { i as encodeBase64url } from "./base64-F8-DUraK.mjs";
-import { t as MediaRepository } from "./media-dvRjj4po.mjs";
-import { t as buildStableHash } from "./stable-hash-DF7R5eN8.mjs";
-import { a as selectActiveBriefingContextEntries, i as parseSiteBriefingScope, o as ContextRepository } from "./briefing-BgQTljQt.mjs";
-import { s as loadContentMediaUsageFields } from "./content-refresh-QvBIyb_g.mjs";
-import { n as sha256, s as readBoundedBytes } from "./runs-DEujUDOj.mjs";
-import { r as ssrfSafeFetch } from "./ssrf-C7tTSD1r.mjs";
+import { i as encodeBase64url } from "./base64-Cz-aU0X1.mjs";
+import { t as MediaRepository } from "./media-BZqwtRTZ.mjs";
+import { t as buildStableHash } from "./stable-hash-DEtJgcp7.mjs";
+import { a as selectActiveBriefingContextEntries, d as ContextRepository, i as parseSiteBriefingScope } from "./briefing-5zf0YZbR.mjs";
+import { n as sha256, s as readBoundedBytes } from "./runs-B8kCirJ6.mjs";
+import { c as loadContentMediaUsageFields } from "./content-refresh-9M9cc55-.mjs";
+import { r as ssrfSafeFetch } from "./ssrf-COxLChKv.mjs";
 import { imageSize } from "image-size";
 
 //#region src/review-automation/evidence.ts

package/dist/{field-defs-cache-CwrIyZFT.mjs → field-defs-cache-BKKFFf_V.mjs}

@@ -1,9 +1,9 @@
-import { a as __exportAll } from "./runner-DJiRFyLI.mjs";
+import { c as __exportAll } from "./runner-CVeq0266.mjs";
 import { getRequestContext } from "./request-context.mjs";
-import { t as after } from "./after-BfniwgIf.mjs";
-import { r as requestCached } from "./request-cache-BruBnFAR.mjs";
-import { n as BylineSchemaRegistry } from "./byline-registry-rkr73qSE.mjs";
-import { n as invalidateProcessCache, r as processCachedAsync, t as createProcessCache } from "./process-cache-B-L-A9zg.mjs";
+import { t as after } from "./after-BVaUn7bK.mjs";
+import { r as requestCached } from "./request-cache-DPmV5nk4.mjs";
+import { n as BylineSchemaRegistry } from "./byline-registry-CkuVVeJJ.mjs";
+import { n as invalidateProcessCache, r as processCachedAsync, t as createProcessCache } from "./process-cache-MHM4Sqzs.mjs";
 
 //#region src/bylines/field-defs-cache.ts
 var field_defs_cache_exports = /* @__PURE__ */ __exportAll({ getBylineFieldDefs: () => getBylineFieldDefs });

package/dist/{forgeway-account-lYJ8iX3G.mjs → forgeway-account-CnWOIusE.mjs}

@@ -1,6 +1,6 @@
 import { join } from "node:path";
-import { ForgewayClient } from "@forgeway/sdk";
 import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
+import { ForgewayClient } from "@forgeway/sdk";
 import { homedir } from "node:os";
 
 //#region src/cli/commands/deploy/utils/forgeway-secrets.ts