dineway 0.2.33 → 0.2.35

package/dist/astro/middleware.mjs

@@ -1,109 +1,116 @@
-import { i as runMigrations } from "../runner-DJiRFyLI.mjs";
+import { a as runMigrations, o as assertD1Migrations, t as MIGRATION_NAMES } from "../runner-CVeq0266.mjs";
 import "../connection-DJ3GzHVH.mjs";
-import { t as validateIdentifier } from "../validate-VPnKoIzW.mjs";
-import { s as isSqlite } from "../dialect-helpers-fk43GbDb.mjs";
-import { i as setI18nConfig } from "../config-CVssduLe.mjs";
-import { _ as DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES, d as EmailPipeline, g as definePlugin, h as runPluginMigrations, m as resolveExclusiveHooks, p as createHookPipeline, u as PluginRouteRegistry, v as readBoundedPluginRouteBody } from "../plugins-DXyLI3Hb.mjs";
+import { n as d1Database } from "../d1-binding-D6HZa3ks.mjs";
 import { createRequestMetrics, getRequestContext, runWithContext } from "../request-context.mjs";
+import { atomicBatch, isD1Database } from "../database/batch.mjs";
+import { s as isSqlite } from "../dialect-helpers-C6xtO-Ui.mjs";
+import { i as setI18nConfig } from "../config-XW5tMrH8.mjs";
+import { _ as readBoundedPluginRouteBody, d as EmailPipeline, g as DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES, h as definePlugin, m as resolveExclusiveHooks, p as createHookPipeline, u as PluginRouteRegistry } from "../plugins-f48yrwfI.mjs";
 import { createRecorder, flushRecorder, formatServerTimingHeader, isInstrumentationEnabled, isServerTimingEnabled, kyselyLogOption } from "../database/instrumentation.mjs";
-import "../base64-F8-DUraK.mjs";
-import "../types-BpSTdH1H.mjs";
-import { o as isMissingTableError, r as getDb } from "../loader-BDje8ME2.mjs";
-import { t as after } from "../after-BfniwgIf.mjs";
-import "../object-cache-D51qOseS.mjs";
-import { t as RevisionRepository } from "../revision-De7OmYVD.mjs";
-import { t as ContentRepository } from "../content-CVCrcuvD.mjs";
-import { t as MediaRepository } from "../media-dvRjj4po.mjs";
-import "../user-D0NJ7gYf.mjs";
-import "../taxonomy-BOBTJ_aE.mjs";
-import "../comment-_nvJSS-A.mjs";
-import { t as OptionsRepository } from "../options-1dBRkoCl.mjs";
-import "../audit-CYjfxG9i.mjs";
-import "../site-activity-7oezuHXK.mjs";
-import { n as ReviewRequestRepository } from "../review-requests-DICrYH2-.mjs";
-import { n as PublicationAuthorizationService, r as publicationReceipt, s as ContentReleaseGrantRepository, t as PublicationAuthorizationError } from "../publication-authorization-C-vYPGD8.mjs";
-import "../site-context-CA7rbxux.mjs";
-import { t as PluginContextFactory } from "../context-MftkHbWx.mjs";
-import "../menus-CpuR4Qkm.mjs";
-import "../redirect-DG-o0CKV.mjs";
-import { r as requestCached } from "../request-cache-BruBnFAR.mjs";
-import "../byline-registry-rkr73qSE.mjs";
-import { a as initWithLock, i as createInitLock, r as processCachedAsync, t as createProcessCache } from "../process-cache-B-L-A9zg.mjs";
-import "../field-defs-cache-CwrIyZFT.mjs";
-import "../byline-Ctil4rij.mjs";
-import { n as normalizeMediaValue } from "../normalize-Ev3FiBMx.mjs";
-import "../enrich-KErvJOuI.mjs";
-import "../seo-DWHdo5aW.mjs";
-import { $ as handleContentUpdate, A as handleRevisionGet, B as handleContentDiscardDraft, D as handleMediaGet, E as handleMediaDelete, F as handleContentCompare, G as handleContentListTrashed, H as handleContentGet, I as handleContentCountScheduled, J as handleContentRestore, K as handleContentPermanentDelete, L as handleContentCountTrashed, M as handleRevisionRestore, O as handleMediaList, P as handleContentAuthors, Q as handleContentUnschedule, R as handleContentCreate, T as handleMediaCreate, U as handleContentGetIncludingTrashed, V as handleContentDuplicate, W as handleContentList, X as handleContentTranslations, Y as handleContentSchedule, Z as handleContentUnpublish, d as createPluginBundleStore, et as decodeRev, j as handleRevisionList, k as handleMediaUpdate, q as handleContentPublish, tt as validateRev, z as handleContentDelete } from "../api-CTf1SLmg.mjs";
-import "../dashboard-ZJ7sMcBI.mjs";
-import { d as PluginStateRepository } from "../briefing-BgQTljQt.mjs";
-import "../context-types-CPWAJRs5.mjs";
-import { i as markContentMediaUsageCollectionStale, o as refreshContentMediaUsageAfterWrite, r as findNonTranslatableSiblingContentIds, t as deleteContentMediaUsage } from "../content-refresh-QvBIyb_g.mjs";
-import { n as hashString } from "../hash-jhbF98tT.mjs";
-import { t as FTSManager } from "../fts-manager-DX7ZkrCa.mjs";
-import "../public-discovery-CyDzK1-S.mjs";
-import { n as SchemaRegistry } from "../registry-D-IV_h50.mjs";
-import { r as createPublicMediaUrlResolver } from "../url-C_pLSrGZ.mjs";
-import "../settings-CAsQLi0N.mjs";
-import "../briefing-r3hXCDQC.mjs";
-import { t as ReviewPayloadBuilder } from "../review-payload-f1L4lzQg.mjs";
-import { a as SiteAiGateway, t as SiteIntegrationRuns } from "../runs-DEujUDOj.mjs";
-import { o as validateEncryptionKeyAtStartup } from "../secrets-AdCrGg1c.mjs";
-import "../ssrf-C7tTSD1r.mjs";
-import "../evidence-6IUv9ML3.mjs";
-import "../submission-C47cHBIg.mjs";
-import "../review-requests-BTKfeWlS.mjs";
-import { n as VERSION, t as COMMIT } from "../version-CJqc1mwj.mjs";
-import "../query-DcB9uGTW.mjs";
-import "../zod-generator-DS5oZNaL.mjs";
-import "../schema-IjuRxkqq.mjs";
-import "../discovery-CJkuHGhZ.mjs";
-import "../seo-GfovzqpU.mjs";
-import "../bylines-BcuBpzVi.mjs";
-import "../byline-fields-DiCyW6eQ.mjs";
-import "../sections-BPFOEMK6.mjs";
-import "../settings-BKEHw6Bu.mjs";
-import { t as IntegrationCredentialStore } from "../store-c4qx3gVh.mjs";
-import "../integration-credentials-qudN6yRr.mjs";
-import "../resolve-pZ4NQM-X.mjs";
-import "../taxonomies-93DV-1QT.mjs";
-import "../taxonomies-ALDiRQ84.mjs";
-import { r as normalizeManifestRoute } from "../manifest-schema-CfKD0thC.mjs";
-import "../parse-IsGn-5lt.mjs";
-import "../redirects-N8gmWhVM.mjs";
-import "../byline-fields-QpmruT5r.mjs";
-import "../status-Bba6RbkS.mjs";
-import { t as getTrustedProxyHeaders } from "../trusted-proxy-CdEl6g6B.mjs";
-import "../rate-limit-DEkoxTsP.mjs";
-import { a as invalidateUrlPatternCache } from "../query-CrW2yI6G.mjs";
-import "../preview-BXmS1SXL.mjs";
-import "../parser-C9rzPuSZ.mjs";
-import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-BW0the1R.mjs";
-import { n as CronExecutor } from "../cron-mGVPQ5e6.mjs";
-import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-Bfi_exVg.mjs";
-import "../api-tokens-CmT83Bgj.mjs";
-import { n as createActivePluginMcpRegistry } from "../mcp-reviewed-executor-DmhM3Cy6.mjs";
-import { n as redactActivityRecord } from "../activity-CfryM8jO.mjs";
-import "../activity-events-BVo9rMUz.mjs";
-import { i as experimentalSiteContextWorkflowsEnabled } from "../experimental-workflows-B9x8delL.mjs";
-import "../utils-BK2efsHv.mjs";
-import "../search-DxUKN9Zz.mjs";
-import "../import-DqRAgsKr.mjs";
-import "../tokens-c-qxNqzC.mjs";
-import "../comment-reaction-DhVgJ17S.mjs";
-import "../menus-CZbz5L_V.mjs";
-import "../bylines-v_ZUQnR-.mjs";
-import "../widgets-Cm5Qx2Np.mjs";
-import "../validate-C9g9iX3q.mjs";
-import "../apply-Bs2jXsms.mjs";
-import "../load-fCOciq0Q.mjs";
+import "../base64-Cz-aU0X1.mjs";
+import "../types-BqxIv8Il.mjs";
+import { o as isMissingTableError, r as getDb } from "../loader-Cgsx23wU.mjs";
+import "../actor-DxUAJgQX.mjs";
+import "../atomic-authority-CnBQJ14T.mjs";
+import { n as hasBackgroundTaskContext, t as after } from "../after-BVaUn7bK.mjs";
+import "../object-cache-BGjIlY9s.mjs";
+import { t as RevisionRepository } from "../revision-090sZyGc.mjs";
+import { t as ContentRepository } from "../content-D9xKUSno.mjs";
+import { t as MediaRepository } from "../media-BZqwtRTZ.mjs";
+import "../user-1-YV30lf.mjs";
+import "../taxonomy-DWxxLpp5.mjs";
+import "../comment-kgLTdtQD.mjs";
+import { t as OptionsRepository } from "../options-BcqHWpc-.mjs";
+import "../audit-F5iWkbcJ.mjs";
+import "../site-activity-BrN2NviL.mjs";
+import { r as ReviewRequestRepository } from "../review-requests-BF2eEKr8.mjs";
+import { n as PublicationAuthorizationService, r as publicationReceipt, s as ContentReleaseGrantRepository, t as PublicationAuthorizationError } from "../publication-authorization-Dq_20SZR.mjs";
+import "../site-context-D9oETfxF.mjs";
+import { t as PluginContextFactory } from "../context-C5lPtfeh.mjs";
+import "../menus-5liJusbp.mjs";
+import "../redirect-HLI3wT5Y.mjs";
+import { r as requestCached } from "../request-cache-DPmV5nk4.mjs";
+import "../byline-registry-CkuVVeJJ.mjs";
+import { a as initWithLock, i as createInitLock, r as processCachedAsync, t as createProcessCache } from "../process-cache-MHM4Sqzs.mjs";
+import "../field-defs-cache-BKKFFf_V.mjs";
+import "../byline-DEZKlzD9.mjs";
+import { n as normalizeMediaValue } from "../normalize-5rct_U0I.mjs";
+import "../enrich-BjF-J4sF.mjs";
+import { A as validateRev, C as handleContentUpdate, O as decodeRev, S as handleContentUnschedule, _ as handleContentPublish, a as handleContentCompare, b as handleContentTranslations, c as handleContentCreate, d as handleContentDuplicate, f as handleContentGet, g as handleContentPermanentDelete, h as handleContentListTrashed, i as handleContentAuthors, k as encodeRev, l as handleContentDelete, m as handleContentList, o as handleContentCountScheduled, p as handleContentGetIncludingTrashed, s as handleContentCountTrashed, t as ReviewPayloadBuilder, u as handleContentDiscardDraft, v as handleContentRestore, x as handleContentUnpublish, y as handleContentSchedule } from "../review-payload-LLIi1sxO.mjs";
+import "../seo-DYpc_rQ1.mjs";
+import "../submission-BLvkvewK.mjs";
+import "../context-types-DLD_HnKT.mjs";
+import { u as PluginStateRepository } from "../briefing-5zf0YZbR.mjs";
+import { a as SiteAiGateway, t as SiteIntegrationRuns } from "../runs-B8kCirJ6.mjs";
+import { n as runWithRuntimeEnvironment } from "../runtime-env-v-1UXPAH.mjs";
+import { o as validateEncryptionKeyAtStartup } from "../secrets-BP2YTPWn.mjs";
+import { i as markContentMediaUsageCollectionStale, r as findNonTranslatableSiblingContentIds, s as refreshContentMediaUsageAfterWrite, t as deleteContentMediaUsage } from "../content-refresh-9M9cc55-.mjs";
+import "../ssrf-COxLChKv.mjs";
+import { n as hashString } from "../hash-DvMZXj2L.mjs";
+import { t as FTSManager } from "../fts-manager-DA74x_uP.mjs";
+import "../public-discovery-CTql6jdZ.mjs";
+import { n as SchemaRegistry } from "../registry-DcV93OL_.mjs";
+import { r as createPublicMediaUrlResolver } from "../url-Ce0qtSdB.mjs";
+import "../settings-DRFy8JQx.mjs";
+import "../evidence-krrA3uiG.mjs";
+import "../dashboard-BnD5krLg.mjs";
+import "../briefing-DiupPvyN.mjs";
+import "../review-requests-C7prIbCo.mjs";
+import { n as VERSION, t as COMMIT } from "../version-DpT-k_Ny.mjs";
+import { A as handleRevisionGet, D as handleMediaGet, E as handleMediaDelete, M as handleRevisionRestore, O as handleMediaList, T as handleMediaCreate, d as createPluginBundleStore, j as handleRevisionList, k as handleMediaUpdate } from "../api-CwhrR7H5.mjs";
+import "../query-BkWWdxyb.mjs";
+import "../zod-generator-BzACAoR5.mjs";
+import "../schema-DFeC5axi.mjs";
+import "../discovery-CYcZJ1o3.mjs";
+import "../seo-Bypxm1iD.mjs";
+import "../bylines-gSAfpHl4.mjs";
+import "../byline-fields-CY6V0ew1.mjs";
+import "../sections-CkoQY7Z9.mjs";
+import "../settings-2p7TuNWG.mjs";
+import { t as IntegrationCredentialStore } from "../store-CjmmGlVw.mjs";
+import "../integration-credentials-Br16M1VE.mjs";
+import "../resolve-CpOV2jt_.mjs";
+import "../taxonomies-DW6Fps-w.mjs";
+import "../taxonomies-C5ayPp3T.mjs";
+import { r as normalizeManifestRoute } from "../manifest-schema-DBXM_g8l.mjs";
+import "../parse-BscLr3p2.mjs";
+import "../redirects-DpRiuRWn.mjs";
+import "../byline-fields-DGNKitg3.mjs";
+import "../status-DBSB6tdS.mjs";
+import { t as getTrustedProxyHeaders } from "../trusted-proxy-CvDP0g0F.mjs";
+import "../rate-limit-RaBJEgyt.mjs";
+import { a as invalidateUrlPatternCache } from "../query-D6oNo9iz.mjs";
+import "../preview-E1xKZGsX.mjs";
+import "../parser-ehIlj32k.mjs";
+import { n as runPluginMigrations } from "../migrations-C7YXse7V.mjs";
+import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-C6yGqnGD.mjs";
+import { n as CronExecutor } from "../cron-BVYo08mi.mjs";
+import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-CpvgEN1w.mjs";
+import "../api-tokens-DA18zxza.mjs";
+import { n as createActivePluginMcpRegistry } from "../mcp-reviewed-executor-RJ71uyQb.mjs";
+import { n as redactActivityRecord } from "../activity-BbtYp_4V.mjs";
+import "../activity-events-CiFN61xq.mjs";
+import { i as experimentalSiteContextWorkflowsEnabled } from "../experimental-workflows-fzJHB3ZI.mjs";
+import "../utils-BoWkoty8.mjs";
+import "../search-C9qOBgvo.mjs";
+import "../import-CayDCPaH.mjs";
+import "../tokens-I3tSjoFI.mjs";
+import "../comment-reaction-Cun5eIXL.mjs";
+import "../menus-2o-DVcwA.mjs";
+import "../bylines-CXyKpVLQ.mjs";
+import "../widgets-DbOctkXv.mjs";
+import "../validate-CupwWNWL.mjs";
+import "../apply-BTfAReIv.mjs";
+import "../load-B2oitobd.mjs";
 import "../index.mjs";
-import { t as getAuthMode } from "../mode-DJeacFCZ.mjs";
-import { i as runPublicationTransaction, r as validateReviewMedia, t as ReviewAutomationWorker } from "../worker-Bhuu7eqS.mjs";
-import "../policy-DKdNMv8y.mjs";
-import { t as cleanupExpiredChallenges } from "../challenge-store-CDKfye2r.mjs";
-import { t as resolveSessionUser } from "../session-user-D8WwGEPH.mjs";
+import { n as d1ReleaseRevision, t as assertD1Release } from "../state-D8AogXCV.mjs";
+import { t as getAuthMode } from "../mode-BJwb_MgK.mjs";
+import { i as runPublicationTransaction, r as validateReviewMedia, t as ReviewAutomationWorker } from "../worker-wjRq4FI9.mjs";
+import "../policy-CrK1vl8l.mjs";
+import { t as cleanupExpiredChallenges } from "../challenge-store-DFGsDtCj.mjs";
+import { t as resolveSessionUser } from "../session-user-DacoiKrJ.mjs";
 import { Kysely, sql } from "kysely";
+import { getSecret } from "astro:env/server";
 import { defineMiddleware } from "astro:middleware";
 import virtualConfig from "virtual:dineway/config";
 import { createDialect } from "virtual:dineway/dialect";
@@ -319,6 +326,16 @@ var NodeCronScheduler = class {
 
 //#endregion
 //#region src/plugins/scheduler/piggyback.ts
+/**
+* Piggyback cron scheduler — request-driven fallback.
+*
+* Checks for overdue tasks on each incoming request, debounced to at most
+* once per 60 seconds. Fire-and-forget (does not block the request).
+*
+* Used when no long-lived background timer is available, or during
+* development when a dedicated scheduler process is not configured.
+*
+*/
 /** Minimum interval between tick attempts (ms) */
 const DEBOUNCE_MS = 60 * 1e3;
 var PiggybackScheduler = class {
@@ -350,9 +367,10 @@ var PiggybackScheduler = class {
 		const now = Date.now();
 		if (now - this.lastTickAt < DEBOUNCE_MS) return;
 		this.lastTickAt = now;
-		const tasks = [this.executor.tick(), this.executor.recoverStaleLocks()];
-		if (this.systemCleanup) tasks.push(this.systemCleanup());
-		Promise.allSettled(tasks).then((results) => {
+		after(async () => {
+			const tasks = [this.executor.tick(), this.executor.recoverStaleLocks()];
+			if (this.systemCleanup) tasks.push(this.systemCleanup());
+			const results = await Promise.allSettled(tasks);
 			for (const r of results) if (r.status === "rejected") console.error("[cron:piggyback] Tick task failed:", r.reason);
 		});
 	}
@@ -360,10 +378,18 @@ var PiggybackScheduler = class {
 
 //#endregion
 //#region src/plugins/scheduler/strategy.ts
+/**
+* Scheduler strategy helpers.
+*
+* Prefer the request-driven fallback on runtimes without long-lived timers.
+* In long-lived Node-style processes, timer handles expose `unref()`, which
+* lets background polling avoid keeping the process alive unnecessarily.
+*/
 function hasUnref(handle) {
 	return typeof handle === "object" && handle !== null && "unref" in handle && typeof handle.unref === "function";
 }
 function shouldUsePiggybackScheduler(createTimer = () => globalThis.setTimeout(() => {}, 0), cancelTimer = (handle) => globalThis.clearTimeout(handle)) {
+	if (hasBackgroundTaskContext()) return true;
 	const handle = createTimer();
 	cancelTimer(handle);
 	return !hasUnref(handle);
@@ -427,11 +453,13 @@ async function publishDueContent(db, options = {}) {
 //#region src/site-context/confirmed-publication.ts
 /** Internal runtime boundary. Native review, policy state, release and content commit
 * together; notification hooks and media-usage refresh belong after its commit.
-* Requires actual transactions, with no unsupported-adapter or retry fallback. */
+* Uses a transaction or explicit atomic checks; failed writes are never retried. */
 async function publishConfirmedContent(db, input, authorize, policies) {
 	if (input.actor.actorType !== "user" || input.actor.authMetadata.auth_method !== "session" || !input.actor.actorId.trim()) throw new PublicationAuthorizationError("ACTOR_NOT_ALLOWED", "Explicit publication confirmation requires a human session");
-	if (!input.expectedRev.trim() || !input.expectedDraftRevisionId?.trim() || !(input.expectedLiveRevisionId === null || typeof input.expectedLiveRevisionId === "string" && input.expectedLiveRevisionId.trim()) || typeof authorize !== "function") throw new PublicationAuthorizationError("CONFIRMATION_REQUIRED", "An exact preview and host authorization are required");
+	if (!input.expectedRev.trim() || !input.expectedDraftRevisionId?.trim() || !(input.expectedLiveRevisionId === null || typeof input.expectedLiveRevisionId === "string" && input.expectedLiveRevisionId.trim()) || !(typeof authorize === "function" || typeof authorize === "object" && authorize !== null && typeof authorize.prepare === "function")) throw new PublicationAuthorizationError("CONFIRMATION_REQUIRED", "An exact preview and host authorization are required");
 	if (db.isTransaction) throw new PublicationAuthorizationError("PUBLICATION_TRANSACTION_REQUIRED", "Confirmed publication must own its commit boundary");
+	if (typeof authorize !== "function") return publishConfirmedBatch(db, input, authorize, policies);
+	if (isD1Database(db)) throw new PublicationAuthorizationError("PUBLICATION_TRANSACTION_REQUIRED", "D1 confirmation requires an authorizer with explicit atomic checks");
 	return db.transaction().setIsolationLevel("serializable").execute((transaction) => runWithContext({
 		editMode: false,
 		...getRequestContext(),
@@ -518,6 +546,107 @@ async function publishConfirmedContent(db, input, authorize, policies) {
 		};
 	}));
 }
+async function publishConfirmedBatch(db, input, authorize, policies) {
+	const authorizationChecks = await authorize.prepare(db, input);
+	if (!authorizationChecks.length) throw new PublicationAuthorizationError("ACTOR_NOT_ALLOWED", "Host authorization must provide commit-time checks");
+	await atomicBatch(db, {
+		checks: authorizationChecks,
+		statements: []
+	});
+	const repo = new ContentRepository(db);
+	const snapshot = await repo.snapshot(input.collection, input.id);
+	const current = await handleContentGet(db, input.collection, input.id);
+	if (!snapshot || !current.success || current.data.item.id !== input.id) throw new PublicationAuthorizationError("CONTENT_TARGET_INVALID", "Confirmation requires a native content ID");
+	const replay = async () => {
+		const saved = await handleContentGet(db, input.collection, input.id);
+		const observed = await repo.snapshot(input.collection, input.id);
+		if (!saved.success || !observed || saved.data._rev !== encodeRev(observed.item) || saved.data.item.liveRevisionId !== observed.item.liveRevisionId || saved.data.item.draftRevisionId !== observed.item.draftRevisionId) return null;
+		const prior = await new ContentReleaseGrantRepository(db).findConfirmedPublication({
+			collection: input.collection,
+			entryId: input.id,
+			reviewedRev: input.expectedRev,
+			draftRevisionId: input.expectedDraftRevisionId,
+			liveRevisionId: input.expectedLiveRevisionId,
+			actorId: input.actor.actorId
+		});
+		if (!prior || saved.data.item.status !== "published" || saved.data.item.liveRevisionId !== prior.draftRevisionId || saved.data.item.version !== decodeRev(prior.reviewedRev)?.version || prior.authorizedAuthMetadata?.realm !== input.actor.authMetadata.realm || saved.data.item.draftRevisionId && saved.data.item.draftRevisionId !== saved.data.item.liveRevisionId) return null;
+		await atomicBatch(db, {
+			checks: [observed.check, ...authorizationChecks],
+			statements: []
+		});
+		return {
+			publication: {
+				...saved.data,
+				receipt: publicationReceipt(prior, "published"),
+				replayed: true
+			},
+			previousContent: saved.data.item
+		};
+	};
+	const prior = await replay();
+	if (prior) return prior;
+	if (current.data._rev !== input.expectedRev || snapshot.item.draftRevisionId !== input.expectedDraftRevisionId || snapshot.item.liveRevisionId !== input.expectedLiveRevisionId) throw new PublicationAuthorizationError("CONTENT_CHANGED", "The draft changed. Review the latest preview before publishing");
+	const handlers = {
+		handleContentGet: (collection, id) => handleContentGet(db, collection, id),
+		handleContentCompare: (collection, id) => handleContentCompare(db, collection, id),
+		handleContentPublish: (collection, id, options) => handleContentPublish(db, collection, id, options),
+		handleContentSchedule: (collection, id, at) => handleContentSchedule(db, collection, id, at),
+		handleContentUnschedule: (collection, id) => handleContentUnschedule(db, collection, id)
+	};
+	const reviewed = await new ReviewPayloadBuilder(handlers).buildContentReviewPayload({
+		collection: input.collection,
+		id: input.id,
+		summary: input.summary
+	});
+	if (reviewed.reviewedRev !== input.expectedRev || reviewed.draftRevisionId !== input.expectedDraftRevisionId || reviewed.liveRevisionId !== input.expectedLiveRevisionId) throw new PublicationAuthorizationError("CONTENT_CHANGED", "The confirmed preview changed");
+	const prepared = await new ReviewRequestRepository(db).prepareCreateApproved({
+		...reviewed,
+		requestedByActorType: "user",
+		requestedByActorId: input.actor.actorId,
+		requestedAuthMetadata: redactActivityRecord(input.actor.authMetadata)
+	}, {
+		resolvedByActorType: "user",
+		resolvedByActorId: input.actor.actorId,
+		resolvedAuthMetadata: redactActivityRecord(input.actor.authMetadata)
+	});
+	const service = new PublicationAuthorizationService({
+		db,
+		handlers,
+		policies,
+		preparedReview: {
+			...prepared,
+			batch: {
+				checks: [snapshot.check, ...prepared.batch.checks ?? []],
+				statements: prepared.batch.statements
+			},
+			authorizationChecks
+		}
+	});
+	try {
+		const published = await service.publishPreparedContent({
+			actor: input.actor,
+			collection: input.collection,
+			id: input.id,
+			editorialReviewRequestId: prepared.review.id,
+			sourceType: "api_route",
+			sourceName: input.sourceName ?? "host_confirmed_publication"
+		});
+		const saved = await handleContentGet(db, input.collection, input.id);
+		if (!saved.success) throw new PublicationAuthorizationError(saved.error.code, saved.error.message);
+		return {
+			publication: {
+				...saved.data,
+				receipt: published.receipt,
+				replayed: false
+			},
+			previousContent: current.data.item
+		};
+	} catch (error) {
+		const committed = await replay();
+		if (committed) return committed;
+		throw error;
+	}
+}
 
 //#endregion
 //#region src/dineway-runtime.ts
@@ -1194,7 +1323,8 @@ var DinewayRuntime = class DinewayRuntime {
 				dialect: deps.createDialect(dbConfig.config),
 				log: kyselyLogOption()
 			});
-			await runMigrations(db);
+			if (d1Database(db)) await assertD1Migrations(db, "_dineway_migrations", MIGRATION_NAMES);
+			else await runMigrations(db);
 			try {
 				const [collectionCount, setupOption] = await Promise.all([db.selectFrom("_dineway_collections").select((eb) => eb.fn.countAll().as("count")).executeTakeFirstOrThrow(), db.selectFrom("options").select("value").where("name", "=", "dineway:setup_complete").executeTakeFirst()]);
 				const setupDone = (() => {
@@ -1205,9 +1335,9 @@ var DinewayRuntime = class DinewayRuntime {
 					}
 				})();
 				if (collectionCount.count === 0 && !setupDone) {
-					const { applySeed } = await import("../apply-Bs2jXsms.mjs").then((n) => n.n);
-					const { loadSeed } = await import("../load-fCOciq0Q.mjs").then((n) => n.r);
-					const { validateSeed } = await import("../validate-C9g9iX3q.mjs").then((n) => n.n);
+					const { applySeed } = await import("../apply-BTfAReIv.mjs").then((n) => n.n);
+					const { loadSeed } = await import("../load-B2oitobd.mjs").then((n) => n.r);
+					const { validateSeed } = await import("../validate-CupwWNWL.mjs").then((n) => n.n);
 					const seed = await loadSeed();
 					if (validateSeed(seed).valid) {
 						await applySeed(db, seed, { onConflict: "skip" });
@@ -1506,8 +1636,7 @@ var DinewayRuntime = class DinewayRuntime {
 		return result;
 	}
 	async handleContentUpdate(collection, id, body) {
-		const repo = new ContentRepository(this.db);
-		const resolvedItem = await repo.findByIdOrSlug(collection, id, body.locale);
+		const resolvedItem = await new ContentRepository(this.db).findByIdOrSlug(collection, id, body.locale);
 		const resolvedId = resolvedItem?.id ?? id;
 		if (body._rev) {
 			if (!resolvedItem) return {
@@ -1527,55 +1656,23 @@ var DinewayRuntime = class DinewayRuntime {
 			};
 		}
 		const previousContent = await this.previousContentForNotification(collection, resolvedId);
-		const { _rev: _discardedRev, ...bodyWithoutRev } = body;
-		let processedData = bodyWithoutRev.data;
-		if (bodyWithoutRev.data) {
-			if (this.hooks.hasHooks("content:beforeSave")) processedData = (await this.hooks.runContentBeforeSave(bodyWithoutRev.data, collection, false)).content;
+		let processedData = body.data;
+		if (body.data) {
+			if (this.hooks.hasHooks("content:beforeSave")) processedData = (await this.hooks.runContentBeforeSave(body.data, collection, false)).content;
 			processedData = await this.runSandboxedBeforeSave(processedData, collection, false);
 			processedData = await this.normalizeMediaFields(collection, processedData);
 		}
-		let usesDraftRevisions = false;
-		if (processedData) try {
-			if ((await this.schemaRegistry.getCollectionWithFields(collection))?.supports?.includes("revisions")) {
-				usesDraftRevisions = true;
-				const revisionRepo = new RevisionRepository(this.db);
-				const existing = await repo.findById(collection, resolvedId);
-				if (existing) {
-					let baseData;
-					if (existing.draftRevisionId) baseData = (await revisionRepo.findById(existing.draftRevisionId))?.data ?? existing.data;
-					else baseData = existing.data;
-					const mergedData = {
-						...baseData,
-						...processedData
-					};
-					if (bodyWithoutRev.slug !== void 0) mergedData._slug = bodyWithoutRev.slug;
-					if (bodyWithoutRev.skipRevision && existing.draftRevisionId) await revisionRepo.updateData(existing.draftRevisionId, mergedData);
-					else {
-						const revision = await revisionRepo.create({
-							collection,
-							entryId: resolvedId,
-							data: mergedData,
-							authorId: bodyWithoutRev.authorId ?? void 0
-						});
-						validateIdentifier(collection, "collection");
-						const tableName = `ec_${collection}`;
-						await sql`
-								UPDATE ${sql.ref(tableName)}
-								SET draft_revision_id = ${revision.id},
-									updated_at = ${(/* @__PURE__ */ new Date()).toISOString()}
-								WHERE id = ${resolvedId}
-							`.execute(this.db);
-						revisionRepo.pruneOldRevisions(collection, resolvedId, 50).catch(() => {});
-					}
-				}
-			}
-		} catch {}
+		const usesDraftRevisions = !!processedData && (await this.schemaRegistry.getCollection(collection))?.supports.includes("revisions") === true;
 		const result = await handleContentUpdate(this.db, collection, resolvedId, {
-			...bodyWithoutRev,
-			data: usesDraftRevisions ? void 0 : processedData,
-			slug: usesDraftRevisions ? void 0 : bodyWithoutRev.slug,
-			authorId: bodyWithoutRev.authorId,
-			bylines: bodyWithoutRev.bylines
+			...body,
+			data: processedData,
+			_rev: body._rev ?? (resolvedItem ? encodeRev(resolvedItem) : void 0)
+		}, {
+			stageDraft: true,
+			skipRevision: body.skipRevision
+		});
+		if (result.success && usesDraftRevisions && !body.skipRevision) after(async () => {
+			await new RevisionRepository(this.db).pruneOldRevisions(collection, resolvedId, 50);
 		});
 		if (result.success && result.data) {
 			const contentIdsToRefresh = [resolvedId];
@@ -1654,6 +1751,19 @@ var DinewayRuntime = class DinewayRuntime {
 		return new PublicationAuthorizationService({
 			db: this.db,
 			policies,
+			onUnscheduleCommitted: async (collection, id) => {
+				const result = await this.handleContentGet(collection, id);
+				if (!result.success) throw new Error("Committed content could not be loaded");
+				await this.refreshContentUsageAfterSuccessfulWrite(collection, [id]);
+				this.runAfterUnscheduleHooks(contentItemToRecord(result.data.item), collection);
+			},
+			onPublicationCommitted: async (operation, collection, id, previous) => {
+				const result = await this.handleContentGet(collection, id);
+				if (!result.success) throw new Error("Committed publication could not be loaded");
+				await this.refreshContentUsageAfterSuccessfulWrite(collection, [id]);
+				if (operation === "publish") this.runAfterPublishHooks(contentItemToRecord(result.data.item), collection, contentItemToRecord(previous));
+				else this.runAfterScheduleHooks(contentItemToRecord(result.data.item), collection);
+			},
 			validateReview: (review) => validateReviewMedia(this.db, this, this.storage ?? void 0, review),
 			handlers: {
 				handleContentGet: this.handleContentGet.bind(this),
@@ -2392,7 +2502,7 @@ function addRequestMetricTimings(timings, metrics) {
 /** Public routes that require the runtime (sitemap, robots.txt, etc.) */
 const PUBLIC_RUNTIME_ROUTES = new Set(["/sitemap.xml", "/robots.txt"]);
 const SITEMAP_COLLECTION_RE = /^\/sitemap-[a-z][a-z0-9_]*\.xml$/;
-const onRequest = defineMiddleware(async (context, next) => {
+const handleRequestWithRuntime = defineMiddleware(async (context, next) => {
 	const { locals, cookies, request } = context;
 	const url = context.url;
 	const queryRecorder = isInstrumentationEnabled() ? createRecorder(url.pathname, request.method, request.headers.get("x-dineway-perf-phase") ?? "default") : void 0;
@@ -2412,7 +2522,7 @@ const onRequest = defineMiddleware(async (context, next) => {
 				if (!isSetupVerified() && !context.isPrerendered) {
 					const setupStart = startServerTiming(serverTimings);
 					try {
-						const { getDb } = await import("../loader-BDje8ME2.mjs").then((n) => n.i);
+						const { getDb } = await import("../loader-Cgsx23wU.mjs").then((n) => n.i);
 						await (await getDb()).selectFrom("_dineway_migrations").selectAll().limit(1).execute();
 						markSetupVerified();
 					} catch (error) {
@@ -2547,6 +2657,7 @@ const onRequest = defineMiddleware(async (context, next) => {
 	};
 	if (queryRecorder || metrics) try {
 		return await runWithContext({
+			...getRequestContext(),
 			editMode: false,
 			...queryRecorder ? { queryRecorder } : {},
 			...metrics ? { metrics } : {}
@@ -2556,6 +2667,23 @@ const onRequest = defineMiddleware(async (context, next) => {
 	}
 	return handleRequest();
 });
+const onRequest = defineMiddleware((context, next) => runWithRuntimeEnvironment(getSecret, async () => {
+	if (getConfig()?.database?.entrypoint !== "dineway/db/d1" || context.isPrerendered) return handleRequestWithRuntime(context, next);
+	try {
+		const { getDb } = await import("../loader-Cgsx23wU.mjs").then((n) => n.i);
+		await assertD1Release(await getDb(), d1ReleaseRevision(getPlugins()));
+	} catch (error) {
+		console.error("Dineway D1 release check failed:", error);
+		return new Response("Database maintenance is in progress. Please try again shortly.", {
+			status: 503,
+			headers: {
+				"Cache-Control": "no-store",
+				"Retry-After": "30"
+			}
+		});
+	}
+	return handleRequestWithRuntime(context, next);
+}));
 
 //#endregion
 export { RUNTIME_INIT_DEADLINE_MS, onRequest as default, onRequest };

package/dist/astro/routes/api/admin/allowed-domains/_domain_.mjs

@@ -1,10 +1,10 @@
-import "../../../../../context-types-CPWAJRs5.mjs";
-import "../../../../../public-discovery-CyDzK1-S.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DLg1H2LT.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-IsGn-5lt.mjs";
-import { S as allowedDomainUpdateBody } from "../../../../../redirects-N8gmWhVM.mjs";
-import "../../../../../byline-fields-QpmruT5r.mjs";
-import "../../../../../status-Bba6RbkS.mjs";
+import "../../../../../context-types-DLD_HnKT.mjs";
+import "../../../../../public-discovery-CTql6jdZ.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-B-44r5TD.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BscLr3p2.mjs";
+import { S as allowedDomainUpdateBody } from "../../../../../redirects-DpRiuRWn.mjs";
+import "../../../../../byline-fields-DGNKitg3.mjs";
+import "../../../../../status-DBSB6tdS.mjs";
 import "../../../../../api/schemas/index.mjs";
 import { Role, roleFromLevel } from "@dineway-ai/auth";
 import { createKyselyAdapter } from "@dineway-ai/auth/adapters/kysely";

package/dist/astro/routes/api/admin/allowed-domains/index.mjs

@@ -1,10 +1,10 @@
-import "../../../../../context-types-CPWAJRs5.mjs";
-import "../../../../../public-discovery-CyDzK1-S.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DLg1H2LT.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-IsGn-5lt.mjs";
-import { x as allowedDomainCreateBody } from "../../../../../redirects-N8gmWhVM.mjs";
-import "../../../../../byline-fields-QpmruT5r.mjs";
-import "../../../../../status-Bba6RbkS.mjs";
+import "../../../../../context-types-DLD_HnKT.mjs";
+import "../../../../../public-discovery-CTql6jdZ.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-B-44r5TD.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BscLr3p2.mjs";
+import { x as allowedDomainCreateBody } from "../../../../../redirects-DpRiuRWn.mjs";
+import "../../../../../byline-fields-DGNKitg3.mjs";
+import "../../../../../status-DBSB6tdS.mjs";
 import "../../../../../api/schemas/index.mjs";
 import { Role, roleFromLevel } from "@dineway-ai/auth";
 import { createKyselyAdapter } from "@dineway-ai/auth/adapters/kysely";

package/dist/astro/routes/api/admin/api-tokens/_id_.mjs

@@ -1,7 +1,7 @@
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-DLg1H2LT.mjs";
-import "../../../../../api-tokens-CmT83Bgj.mjs";
-import { i as handleApiTokenRevoke } from "../../../../../api-tokens-CSomx-l3.mjs";
-import { t as rejectApiTokenAuthControlWrite } from "../../../../../auth-control-guard-CITT8ZA_.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-B-44r5TD.mjs";
+import "../../../../../api-tokens-DA18zxza.mjs";
+import { i as handleApiTokenRevoke } from "../../../../../api-tokens-OAgvq4xg.mjs";
+import { t as rejectApiTokenAuthControlWrite } from "../../../../../auth-control-guard-DPOSBNFI.mjs";
 import { Role } from "@dineway-ai/auth";
 
 //#region src/astro/routes/api/admin/api-tokens/[id].ts