dineway 0.2.38 → 0.2.40

package/dist/astro/middleware.d.mts

@@ -1,3 +1,5 @@
+import "../types-B--VyN3n.mjs";
+import { t as PublishedRef } from "../scheduled-publish-BxdShRGs.mjs";
 import * as astro from "astro";
 
 //#region src/astro/middleware.d.ts
@@ -9,5 +11,11 @@ import * as astro from "astro";
  */
 declare const RUNTIME_INIT_DEADLINE_MS: number;
 declare const onRequest: astro.MiddlewareHandler;
+/** Run maintenance from a platform scheduler, with the same release gate as HTTP requests. */
+declare function runScheduledTasks(options?: {
+  onPublished?: (refs: PublishedRef[]) => Promise<void>;
+}): Promise<{
+  published: PublishedRef[];
+}>;
 //#endregion
-export { RUNTIME_INIT_DEADLINE_MS, onRequest as default, onRequest };
+export { RUNTIME_INIT_DEADLINE_MS, onRequest as default, onRequest, runScheduledTasks };

package/dist/astro/middleware.mjs

@@ -1,119 +1,119 @@
-import { a as runMigrations, o as assertD1Migrations, t as MIGRATION_NAMES } from "../runner-CVeq0266.mjs";
+import { a as runMigrations, o as assertD1Migrations, t as MIGRATION_NAMES } from "../runner-CRU7BXjr.mjs";
+import { createRequestMetrics, getRequestContext, runWithContext, runWithPageCache, withPrimaryDatabase } from "../request-context.mjs";
+import { after, hasBackgroundTaskContext } from "../after.mjs";
 import "../connection-DJ3GzHVH.mjs";
-import { n as d1Database } from "../d1-binding-D6HZa3ks.mjs";
-import { createRequestMetrics, getRequestContext, runWithContext, runWithPageCache } from "../request-context.mjs";
+import { t as d1Database } from "../d1-binding-DrLMBUxu.mjs";
 import { atomicBatch, isD1Database } from "../database/batch.mjs";
 import { s as isSqlite } from "../dialect-helpers-C6xtO-Ui.mjs";
 import { i as setI18nConfig } from "../config-XW5tMrH8.mjs";
-import { _ as readBoundedPluginRouteBody, d as EmailPipeline, g as DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES, h as definePlugin, m as resolveExclusiveHooks, p as createHookPipeline, u as PluginRouteRegistry } from "../plugins-CE6y1ImU.mjs";
+import { _ as readBoundedPluginRouteBody, d as EmailPipeline, g as DEFAULT_PLUGIN_RAW_BODY_LIMIT_BYTES, h as definePlugin, m as resolveExclusiveHooks, p as createHookPipeline, u as PluginRouteRegistry } from "../plugins-pfraURNp.mjs";
 import { createRecorder, flushRecorder, formatServerTimingHeader, isInstrumentationEnabled, isServerTimingEnabled, kyselyLogOption } from "../database/instrumentation.mjs";
 import "../base64-Cz-aU0X1.mjs";
-import "../types-BqxIv8Il.mjs";
-import { o as isMissingTableError, r as getDb } from "../loader-Cgsx23wU.mjs";
+import "../types-RFzE_V1M.mjs";
+import { o as isMissingTableError, r as getDb } from "../loader-Dp6zLmQm.mjs";
 import "../actor-DxUAJgQX.mjs";
 import "../atomic-authority-CnBQJ14T.mjs";
-import { n as hasBackgroundTaskContext, t as after } from "../after-BVaUn7bK.mjs";
-import "../object-cache-DYGlsI-R.mjs";
-import { t as RevisionRepository } from "../revision-090sZyGc.mjs";
-import { t as ContentRepository } from "../content-Bf6Z1KsW.mjs";
-import { t as MediaRepository } from "../media-BZqwtRTZ.mjs";
-import "../user-1-YV30lf.mjs";
-import "../taxonomy-CAd9SL-L.mjs";
-import "../comment-DX7gSK1w.mjs";
-import { t as OptionsRepository } from "../options-BcqHWpc-.mjs";
-import "../audit-F5iWkbcJ.mjs";
-import "../site-activity-BrN2NviL.mjs";
-import { r as ReviewRequestRepository } from "../review-requests-BF2eEKr8.mjs";
-import { n as PublicationAuthorizationService, r as publicationReceipt, s as ContentReleaseGrantRepository, t as PublicationAuthorizationError } from "../publication-authorization-DEf-rGSM.mjs";
-import "../site-context-BBmRiuZl.mjs";
-import { t as PluginContextFactory } from "../context-4B6AEEJg.mjs";
-import "../menus-BJvvB0n9.mjs";
-import "../redirect-HLI3wT5Y.mjs";
-import { r as requestCached } from "../request-cache-DPmV5nk4.mjs";
-import "../byline-registry-CkuVVeJJ.mjs";
-import { a as initWithLock, i as createInitLock, r as processCachedAsync, t as createProcessCache } from "../process-cache-MHM4Sqzs.mjs";
-import "../field-defs-cache-BKKFFf_V.mjs";
-import "../byline-BCPYEtzy.mjs";
-import { n as normalizeMediaValue } from "../normalize-5rct_U0I.mjs";
-import "../enrich-BjF-J4sF.mjs";
-import { A as validateRev, C as handleContentUpdate, O as decodeRev, S as handleContentUnschedule, _ as handleContentPublish, a as handleContentCompare, b as handleContentTranslations, c as handleContentCreate, d as handleContentDuplicate, f as handleContentGet, g as handleContentPermanentDelete, h as handleContentListTrashed, i as handleContentAuthors, k as encodeRev, l as handleContentDelete, m as handleContentList, o as handleContentCountScheduled, p as handleContentGetIncludingTrashed, s as handleContentCountTrashed, t as ReviewPayloadBuilder, u as handleContentDiscardDraft, v as handleContentRestore, x as handleContentUnpublish, y as handleContentSchedule } from "../review-payload-CzN5RQL4.mjs";
-import "../seo-B3cQl1r2.mjs";
-import "../submission-eaVl2STP.mjs";
-import "../context-types-DLD_HnKT.mjs";
-import { u as PluginStateRepository } from "../briefing-BiBHuHqK.mjs";
-import { a as SiteAiGateway, t as SiteIntegrationRuns } from "../runs-B8kCirJ6.mjs";
-import { n as runWithRuntimeEnvironment } from "../runtime-env-v-1UXPAH.mjs";
-import { o as validateEncryptionKeyAtStartup } from "../secrets-BP2YTPWn.mjs";
-import { i as markContentMediaUsageCollectionStale, r as findNonTranslatableSiblingContentIds, s as refreshContentMediaUsageAfterWrite, t as deleteContentMediaUsage } from "../content-refresh-9M9cc55-.mjs";
-import "../ssrf-COxLChKv.mjs";
-import { n as hashString } from "../hash-DvMZXj2L.mjs";
-import { t as FTSManager } from "../fts-manager-DA74x_uP.mjs";
-import "../public-discovery-CTql6jdZ.mjs";
-import { n as SchemaRegistry } from "../registry-DcV93OL_.mjs";
-import { r as createPublicMediaUrlResolver } from "../url-Ce0qtSdB.mjs";
-import "../settings-dNtUakSt.mjs";
-import "../evidence-CoLCtvqq.mjs";
-import "../dashboard-DHv8q_NK.mjs";
-import "../briefing-DQYj9x6H.mjs";
-import "../review-requests-CQX7T3MV.mjs";
-import { n as VERSION, t as COMMIT } from "../version-9AyJ5JWH.mjs";
-import { A as handleRevisionGet, D as handleMediaGet, E as handleMediaDelete, M as handleRevisionRestore, O as handleMediaList, T as handleMediaCreate, d as createPluginBundleStore, j as handleRevisionList, k as handleMediaUpdate } from "../api-qTefA3vh.mjs";
-import "../query-DnK6LJdA.mjs";
-import "../zod-generator-BzACAoR5.mjs";
-import "../schema-DFeC5axi.mjs";
-import "../discovery-CYcZJ1o3.mjs";
-import "../seo-Bypxm1iD.mjs";
-import "../bylines-BkRyEw1m.mjs";
-import "../byline-fields-CY6V0ew1.mjs";
-import "../sections-CkoQY7Z9.mjs";
-import "../settings-DiAKrrP4.mjs";
-import { t as IntegrationCredentialStore } from "../store-CjmmGlVw.mjs";
-import "../integration-credentials-Br16M1VE.mjs";
-import "../resolve-CpOV2jt_.mjs";
-import "../taxonomies-Cz2F2QAm.mjs";
-import "../taxonomies-H63wRvul.mjs";
-import { r as normalizeManifestRoute } from "../manifest-schema-DBXM_g8l.mjs";
-import "../parse-BscLr3p2.mjs";
-import "../redirects-DpRiuRWn.mjs";
-import "../byline-fields-DGNKitg3.mjs";
-import "../status-DBSB6tdS.mjs";
-import { t as getTrustedProxyHeaders } from "../trusted-proxy-CvDP0g0F.mjs";
-import "../rate-limit-RaBJEgyt.mjs";
-import { a as invalidateUrlPatternCache } from "../query-COquV-XH.mjs";
-import "../preview-E1xKZGsX.mjs";
-import "../parser-ehIlj32k.mjs";
-import { n as runPluginMigrations } from "../migrations-C7YXse7V.mjs";
-import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-C6yGqnGD.mjs";
-import { n as CronExecutor } from "../cron-BVYo08mi.mjs";
-import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-CpvgEN1w.mjs";
-import "../api-tokens-DA18zxza.mjs";
-import { n as createActivePluginMcpRegistry } from "../mcp-reviewed-executor-B_65l7Hq.mjs";
-import { n as redactActivityRecord } from "../activity-BbtYp_4V.mjs";
-import "../activity-events-CiFN61xq.mjs";
-import { i as experimentalSiteContextWorkflowsEnabled } from "../experimental-workflows-fzJHB3ZI.mjs";
-import "../utils-BoWkoty8.mjs";
-import "../search-C9qOBgvo.mjs";
-import "../import-Bg-IiofM.mjs";
-import "../tokens-I3tSjoFI.mjs";
-import "../comment-reaction-Cun5eIXL.mjs";
-import "../menus-DNcY6Do7.mjs";
-import "../bylines-Do1KuJkk.mjs";
-import "../widgets-DbOctkXv.mjs";
-import "../validate-CupwWNWL.mjs";
-import "../apply-CC0OQb8V.mjs";
-import "../load-B2oitobd.mjs";
+import "../object-cache-mxCW-Rpt.mjs";
+import { t as RevisionRepository } from "../revision-W6FDfDqx.mjs";
+import { t as ContentRepository } from "../content-CIKsrvU9.mjs";
+import { t as MediaRepository } from "../media-C5ba8fvI.mjs";
+import "../user-Btai9rl3.mjs";
+import "../taxonomy-DN6i1upz.mjs";
+import "../comment-DAQfUjqt.mjs";
+import { t as OptionsRepository } from "../options-JiLWB6Bt.mjs";
+import "../audit-Cl495Ze3.mjs";
+import "../site-activity-DU0UPDji.mjs";
+import { r as ReviewRequestRepository } from "../review-requests-CUVn0RBl.mjs";
+import { n as PublicationAuthorizationService, r as publicationReceipt, s as ContentReleaseGrantRepository, t as PublicationAuthorizationError } from "../publication-authorization-B_HJSnzR.mjs";
+import "../site-context-Dic2jHuw.mjs";
+import { t as PluginContextFactory } from "../context-DAs_MZjJ.mjs";
+import "../menus-CyNpBQrX.mjs";
+import "../redirect-BQFa1THe.mjs";
+import { r as requestCached } from "../request-cache-8_ifFzVw.mjs";
+import "../byline-registry-CJihchD1.mjs";
+import { a as initWithLock, i as createInitLock, r as processCachedAsync, t as createProcessCache } from "../process-cache-C19OA3am.mjs";
+import "../field-defs-cache-aXUeXJdC.mjs";
+import "../byline-TYk2kad6.mjs";
+import { n as normalizeMediaValue } from "../normalize-aTwryvvi.mjs";
+import "../enrich-B7PIJ8Iy.mjs";
+import { A as validateRev, C as handleContentUpdate, O as decodeRev, S as handleContentUnschedule, _ as handleContentPublish, a as handleContentCompare, b as handleContentTranslations, c as handleContentCreate, d as handleContentDuplicate, f as handleContentGet, g as handleContentPermanentDelete, h as handleContentListTrashed, i as handleContentAuthors, k as encodeRev, l as handleContentDelete, m as handleContentList, o as handleContentCountScheduled, p as handleContentGetIncludingTrashed, s as handleContentCountTrashed, t as ReviewPayloadBuilder, u as handleContentDiscardDraft, v as handleContentRestore, x as handleContentUnpublish, y as handleContentSchedule } from "../review-payload-Bap86e75.mjs";
+import "../seo-Bs_DUxJf.mjs";
+import "../submission-DJmRejGR.mjs";
+import "../context-types-CPWAJRs5.mjs";
+import { u as PluginStateRepository } from "../briefing-COw-WcYz.mjs";
+import { a as SiteAiGateway, t as SiteIntegrationRuns } from "../runs-BtaAiLTw.mjs";
+import { n as runWithRuntimeEnvironment } from "../runtime-env-CPTzh0mZ.mjs";
+import { o as validateEncryptionKeyAtStartup } from "../secrets-D_pergcD.mjs";
+import { i as markContentMediaUsageCollectionStale, r as findNonTranslatableSiblingContentIds, s as refreshContentMediaUsageAfterWrite, t as deleteContentMediaUsage } from "../content-refresh-BilzqcLt.mjs";
+import "../ssrf-C9dyjU8O.mjs";
+import { n as hashString } from "../hash-D2Rqd2J2.mjs";
+import { t as FTSManager } from "../fts-manager-BrPpYtK0.mjs";
+import "../public-discovery-BGyhuD5U.mjs";
+import { n as SchemaRegistry } from "../registry-Dclv9iHv.mjs";
+import { r as createPublicMediaUrlResolver } from "../url-DUz3LbCs.mjs";
+import "../settings-DsBzKeUQ.mjs";
+import "../evidence-Vnp_fQbC.mjs";
+import "../dashboard-BAjWCGCP.mjs";
+import "../briefing-DsD-Ouwc.mjs";
+import "../review-requests-CcSUTm_l.mjs";
+import { n as VERSION, t as COMMIT } from "../version-CISd4wX_.mjs";
+import { A as handleRevisionGet, D as handleMediaGet, E as handleMediaDelete, M as handleRevisionRestore, O as handleMediaList, T as handleMediaCreate, d as createPluginBundleStore, j as handleRevisionList, k as handleMediaUpdate } from "../api-CQishNjZ.mjs";
+import "../query-DLeahg3x.mjs";
+import "../zod-generator-DkrWuID7.mjs";
+import "../schema-CosVhHJt.mjs";
+import "../discovery-V0e0Gg8j.mjs";
+import "../seo-B-5PsaJO.mjs";
+import "../bylines-6T9iVC9j.mjs";
+import "../byline-fields-BKj5f3Ub.mjs";
+import "../sections-BqqYq9RW.mjs";
+import "../settings-CyJ2-MKx.mjs";
+import { t as IntegrationCredentialStore } from "../store-32e6dfD-.mjs";
+import "../integration-credentials-DMEXZU2J.mjs";
+import "../resolve-DEKC4qVa.mjs";
+import "../taxonomies-lWGNLKgn.mjs";
+import "../taxonomies-BFsUR7kc.mjs";
+import { r as normalizeManifestRoute } from "../manifest-schema-CCvogfrP.mjs";
+import "../parse-THHCpJLB.mjs";
+import "../redirects-CVfxefrz.mjs";
+import "../byline-fields-DZ46DF10.mjs";
+import "../status-Bjf_uSrW.mjs";
+import { t as getTrustedProxyHeaders } from "../trusted-proxy-hYufGFPK.mjs";
+import "../rate-limit-BsBr_U9g.mjs";
+import { a as invalidateUrlPatternCache } from "../query-xspvw7Ui.mjs";
+import "../preview-Bh7D7F27.mjs";
+import "../parser-kettsjWc.mjs";
+import { n as runPluginMigrations } from "../migrations-CLlX25HO.mjs";
+import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-CjORiJQ_.mjs";
+import { n as CronExecutor } from "../cron-C7HCJPPl.mjs";
+import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-GqK6hgMJ.mjs";
+import "../api-tokens-0N3nafqZ.mjs";
+import { n as createActivePluginMcpRegistry } from "../mcp-reviewed-executor-B8Gbin3T.mjs";
+import { n as redactActivityRecord } from "../activity-LXZdjKwI.mjs";
+import "../activity-events-DoqeOM8x.mjs";
+import { i as experimentalSiteContextWorkflowsEnabled } from "../experimental-workflows-BbxpWwBy.mjs";
+import "../utils-CYxGuO_P.mjs";
+import "../search-BI9uKr7U.mjs";
+import "../import-C2-v4FCs.mjs";
+import "../tokens-D-StaTAQ.mjs";
+import "../comment-reaction-Dp3G7UZc.mjs";
+import "../menus-w5xwT-f5.mjs";
+import "../bylines-CvTSCAw9.mjs";
+import "../widgets-BOrDZdQ3.mjs";
+import "../validate-C05z0m7M.mjs";
+import "../apply-D4rZHDyg.mjs";
+import "../load-DvCVppOF.mjs";
 import "../index.mjs";
-import { n as d1ReleaseRevision, t as assertD1Release } from "../state-jyNZ6-7L.mjs";
-import { t as getAuthMode } from "../mode-CPf_KZ37.mjs";
-import { i as runPublicationTransaction, r as validateReviewMedia, t as ReviewAutomationWorker } from "../worker-hQbWAsIT.mjs";
-import "../policy-Dej7NJFD.mjs";
-import { t as cleanupExpiredChallenges } from "../challenge-store-D-_-VavY.mjs";
-import { t as resolveSessionUser } from "../session-user-DeqTcAmR.mjs";
+import { n as d1ReleaseRevision, t as assertD1Release } from "../state-jx6Yiwsm.mjs";
+import { t as getAuthMode } from "../mode-BJwb_MgK.mjs";
+import { i as runPublicationTransaction, r as validateReviewMedia, t as ReviewAutomationWorker } from "../worker-CKU70ODm.mjs";
+import "../policy-D2USlibj.mjs";
+import { t as cleanupExpiredChallenges } from "../challenge-store-DFGsDtCj.mjs";
+import { t as resolveSessionUser } from "../session-user-B8yYh0g5.mjs";
 import { Kysely, sql } from "kysely";
 import { getSecret } from "astro:env/server";
 import { defineMiddleware } from "astro:middleware";
 import virtualConfig from "virtual:dineway/config";
-import { createDialect } from "virtual:dineway/dialect";
+import { createCoalescingDialect, createDialect, createRequestScopedDb } from "virtual:dineway/dialect";
 import { mediaProviders } from "virtual:dineway/media-providers";
 import { plugins } from "virtual:dineway/plugins";
 import { createSandboxRunner, sandboxEnabled } from "virtual:dineway/sandbox-runner";
@@ -1150,25 +1150,33 @@ var DinewayRuntime = class DinewayRuntime {
 		const storage = DinewayRuntime.getStorage(deps);
 		let pluginStates = /* @__PURE__ */ new Map();
 		let siteInfo;
-		await Promise.all([phase("rt.plugins", "Plugin states", async () => {
-			try {
-				const states = await db.selectFrom("_plugin_state").select(["plugin_id", "status"]).execute();
-				pluginStates = new Map(states.map((s) => [s.plugin_id, s.status]));
-			} catch {}
-		}), phase("rt.site", "Site info options", async () => {
-			try {
-				const siteOptions = await new OptionsRepository(db).getMany([
-					"dineway:site_title",
-					"dineway:site_url",
-					"dineway:locale"
-				]);
-				siteInfo = {
-					siteName: siteOptions.get("dineway:site_title") ?? void 0,
-					siteUrl: siteOptions.get("dineway:site_url") ?? void 0,
-					locale: siteOptions.get("dineway:locale") ?? void 0
-				};
-			} catch {}
-		})]);
+		const initDb = deps.createCoalescingDialect && deps.config.database && !getRequestContext()?.db ? new Kysely({
+			dialect: deps.createCoalescingDialect(deps.config.database.config),
+			log: kyselyLogOption()
+		}) : db;
+		try {
+			await Promise.all([phase("rt.plugins", "Plugin states", async () => {
+				try {
+					const states = await initDb.selectFrom("_plugin_state").select(["plugin_id", "status"]).execute();
+					pluginStates = new Map(states.map((s) => [s.plugin_id, s.status]));
+				} catch {}
+			}), phase("rt.site", "Site info options", async () => {
+				try {
+					const siteOptions = await new OptionsRepository(initDb).getMany([
+						"dineway:site_title",
+						"dineway:site_url",
+						"dineway:locale"
+					]);
+					siteInfo = {
+						siteName: siteOptions.get("dineway:site_title") ?? void 0,
+						siteUrl: siteOptions.get("dineway:site_url") ?? void 0,
+						locale: siteOptions.get("dineway:locale") ?? void 0
+					};
+				} catch {}
+			})]);
+		} finally {
+			if (initDb !== db) await initDb.destroy();
+		}
 		const enabledPlugins = /* @__PURE__ */ new Set();
 		for (const plugin of deps.plugins) {
 			const status = pluginStates.get(plugin.id);
@@ -1336,9 +1344,9 @@ var DinewayRuntime = class DinewayRuntime {
 					}
 				})();
 				if (collectionCount.count === 0 && !setupDone) {
-					const { applySeed } = await import("../apply-CC0OQb8V.mjs").then((n) => n.n);
-					const { loadSeed } = await import("../load-B2oitobd.mjs").then((n) => n.r);
-					const { validateSeed } = await import("../validate-CupwWNWL.mjs").then((n) => n.n);
+					const { applySeed } = await import("../apply-D4rZHDyg.mjs").then((n) => n.n);
+					const { loadSeed } = await import("../load-DvCVppOF.mjs").then((n) => n.r);
+					const { validateSeed } = await import("../validate-C05z0m7M.mjs").then((n) => n.n);
 					const seed = await loadSeed();
 					if (validateSeed(seed).valid) {
 						await applySeed(db, seed, { onConflict: "skip" });
@@ -2277,6 +2285,120 @@ var DinewayRuntime = class DinewayRuntime {
 	}
 };
 
+//#endregion
+//#region src/astro/middleware/scoped-db.ts
+/**
+* Request-scoped database lifecycle helpers.
+*
+* Extracted from middleware.ts so they can be unit-tested without pulling in
+* the virtual:dineway/* module graph. The middleware imports these to settle a
+* request-scoped db adapter's lifecycle around the response.
+*/
+/**
+* Astro attaches AstroCookies to outgoing responses via a well-known global
+* symbol. Cloning a Response (`new Response(body, init)`) drops non-header
+* metadata, so any helper that wraps the response must explicitly forward this
+* symbol or `cookies.set()` calls will be silently dropped. `Symbol.for`
+* returns the same registry symbol everywhere, so this matches the copy in
+* middleware.ts.
+*/
+const ASTRO_COOKIES_SYMBOL$2 = Symbol.for("astro.cookies");
+/**
+* Run a request-scoped db's `close()` once the response body has finished
+* streaming. Astro streams HTML and components issue DB queries during that
+* stream, so a connection-backed adapter (e.g. Postgres over Hyperdrive) must
+* not be torn down until the body is flushed. Bodyless responses (redirects,
+* 304s, errors) close immediately. A guard makes close idempotent and a stream
+* `cancel` (client disconnect) still triggers it so connections never leak.
+*
+* No-op for adapters without a `close` (D1): the response passes through.
+*/
+function wrapResponseForScopedClose(response, close) {
+	let closed = false;
+	const runClose = () => {
+		if (closed) return;
+		closed = true;
+		try {
+			close();
+		} catch (error) {
+			console.error("[dineway] request-scoped db close failed:", error);
+		}
+	};
+	if (!response.body) {
+		runClose();
+		return response;
+	}
+	const transform = new TransformStream({
+		flush: runClose,
+		cancel: runClose
+	});
+	const wrapped = new Response(response.body.pipeThrough(transform), response);
+	const astroCookies = Reflect.get(response, ASTRO_COOKIES_SYMBOL$2);
+	if (astroCookies !== void 0) Reflect.set(wrapped, ASTRO_COOKIES_SYMBOL$2, astroCookies);
+	wrapped.headers.delete("Content-Length");
+	return wrapped;
+}
+/**
+* Run the request body under a request-scoped db, then settle its lifecycle:
+* `commit()` runs before the response is returned (so per-request state like a
+* D1 bookmark cookie is persisted in the headers, even if render throws), while
+* `close()` (if any) is deferred to stream-end so a connection-backed adapter
+* isn't torn down mid-render. On error the connection is closed immediately
+* before rethrowing so it never leaks.
+*
+* On the error path both `commit()` and `close()` are defended: a throw from
+* either is logged and swallowed so it can't replace the propagating render
+* error (which is the one the caller needs to see). On the success path
+* `commit()` is guarded too — if it throws, the connection is closed before the
+* failure is surfaced, so it never leaks. For the current adapters `commit()`
+* is a no-op (Hyperdrive) or a cookie write (D1, no `close`) and `close()` is
+* fire-and-forget, so these guards only matter for a future connection-backed
+* adapter with throwing teardown, but the helper is generic and must not leak
+* or mask.
+*/
+async function finishScoped(scoped, run) {
+	let response;
+	try {
+		response = await run();
+	} catch (error) {
+		commitSafely(scoped.commit);
+		closeSafely(scoped.close);
+		throw error;
+	}
+	try {
+		scoped.commit();
+	} catch (error) {
+		closeSafely(scoped.close);
+		throw error;
+	}
+	return scoped.close ? wrapResponseForScopedClose(response, scoped.close) : response;
+}
+/**
+* Run commit() swallowing any error. Used where an exception is already
+* propagating (or about to be thrown) and a commit failure must neither mask it
+* nor skip the subsequent close().
+*/
+function commitSafely(commit) {
+	try {
+		commit();
+	} catch (error) {
+		console.error("[dineway] request-scoped db commit failed during error handling:", error);
+	}
+}
+/**
+* Run close() swallowing any error. Used on the error/commit-failure paths
+* where another exception is the one the caller must see; a throwing teardown
+* must not replace it.
+*/
+function closeSafely(close) {
+	if (!close) return;
+	try {
+		close();
+	} catch (error) {
+		console.error("[dineway] request-scoped db close failed during error handling:", error);
+	}
+}
+
 //#endregion
 //#region src/astro/middleware/stream-end-metrics.ts
 /**
@@ -2409,6 +2531,7 @@ function buildDependencies(config) {
 		config,
 		plugins: getPlugins(),
 		createDialect,
+		createCoalescingDialect,
 		createStorage,
 		sandboxEnabled,
 		sandboxedPluginEntries: sandboxedPlugins || [],
@@ -2510,6 +2633,37 @@ const handleRequestWithRuntime = defineMiddleware(async (context, next) => {
 	const serverTimings = createServerTimings();
 	const metrics = serverTimings || queryRecorder ? createRequestMetrics(performance.now()) : void 0;
 	const middlewareStart = startServerTiming(serverTimings);
+	const renderWithDatabase = async () => {
+		const parent = getRequestContext();
+		const config = getConfig();
+		if (!config?.database?.supportsRequestScope || context.isPrerendered || parent?.databaseMode === "primary" || parent?.db || locals.__dinewayRequestDb) return next();
+		const user = cookies.get("astro-session") ? await resolveSessionUser(context.session) : void 0;
+		const scoped = createRequestScopedDb({
+			config: config.database.config,
+			isAuthenticated: !!user || !!locals.user || request.headers.has("authorization"),
+			isWrite: !["GET", "HEAD"].includes(request.method) || url.pathname.startsWith("/_dineway") || url.searchParams.has("_preview"),
+			cookies,
+			url
+		});
+		if (!scoped) return next();
+		const { getDb } = await import("../loader-Dp6zLmQm.mjs").then((n) => n.i);
+		const primaryDb = await getDb();
+		let authenticated = !!user || !!locals.user || request.headers.has("authorization");
+		return runWithContext({
+			editMode: false,
+			...parent,
+			db: scoped.db,
+			dbIsIsolated: false,
+			primaryDb
+		}, () => finishScoped({
+			...scoped,
+			commit: () => scoped.commit(authenticated)
+		}, async () => {
+			const response = await next();
+			authenticated = url.pathname.startsWith("/_dineway/api/auth/") ? !!await resolveSessionUser(context.session) || request.headers.has("authorization") : !!locals.user || !!user || request.headers.has("authorization");
+			return response;
+		}));
+	};
 	const handleRequest = async () => {
 		const isDinewayRoute = url.pathname.startsWith("/_dineway");
 		const isApplicationApiRoute = url.pathname.startsWith("/api/");
@@ -2523,7 +2677,7 @@ const handleRequestWithRuntime = defineMiddleware(async (context, next) => {
 				if (!isSetupVerified() && !context.isPrerendered) {
 					const setupStart = startServerTiming(serverTimings);
 					try {
-						const { getDb } = await import("../loader-Cgsx23wU.mjs").then((n) => n.i);
+						const { getDb } = await import("../loader-Dp6zLmQm.mjs").then((n) => n.i);
 						await (await getDb()).selectFrom("_dineway_migrations").selectAll().limit(1).execute();
 						markSetupVerified();
 					} catch (error) {
@@ -2546,6 +2700,7 @@ const handleRequestWithRuntime = defineMiddleware(async (context, next) => {
 							collectPageFragments: runtime.collectPageFragments.bind(runtime),
 							ensureSearchHealthy: runtime.ensureSearchHealthy.bind(runtime),
 							getPublicMediaUrl: createPublicMediaUrlResolver(runtime.storage),
+							storage: runtime.storage,
 							config
 						};
 					} catch {}
@@ -2553,7 +2708,7 @@ const handleRequestWithRuntime = defineMiddleware(async (context, next) => {
 					if (serverTimings && initSubTimings) serverTimings.push(...initSubTimings);
 				}
 				const renderStart = startServerTiming(serverTimings);
-				const response = await next();
+				const response = await renderWithDatabase();
 				addServerTiming(serverTimings, "render", renderStart, "Page render");
 				addServerTiming(serverTimings, "mw", middlewareStart, "Total middleware");
 				addRequestMetricTimings(serverTimings, metrics);
@@ -2617,7 +2772,9 @@ const handleRequestWithRuntime = defineMiddleware(async (context, next) => {
 					ensureSearchHealthy: runtime.ensureSearchHealthy.bind(runtime),
 					runScheduledTasks: runtime.runScheduledTasks.bind(runtime),
 					storage: runtime.storage,
-					db: runtime.db,
+					get db() {
+						return runtime.db;
+					},
 					getPublicMediaUrl: createPublicMediaUrlResolver(runtime.storage),
 					hooks: runtime.hooks,
 					email: runtime.email,
@@ -2634,7 +2791,7 @@ const handleRequestWithRuntime = defineMiddleware(async (context, next) => {
 				console.error("Dineway middleware error:", error);
 			}
 			const renderStart = startServerTiming(serverTimings);
-			const response = await next();
+			const response = await renderWithDatabase();
 			addServerTiming(serverTimings, "render", renderStart, "Page render");
 			addServerTiming(serverTimings, "mw", middlewareStart, "Total middleware");
 			addRequestMetricTimings(serverTimings, metrics);
@@ -2669,9 +2826,9 @@ const handleRequestWithRuntime = defineMiddleware(async (context, next) => {
 	return handleRequest();
 });
 const onRequest = defineMiddleware((context, next) => runWithPageCache(context.cache?.enabled && !context.locals.__dinewayRequestDb ? context.cache : void 0, () => runWithRuntimeEnvironment(getSecret, async () => {
-	if (getConfig()?.database?.entrypoint !== "dineway/db/d1" || context.isPrerendered) return handleRequestWithRuntime(context, next);
+	if (getConfig()?.database?.entrypoint !== "@dineway-ai/cloudflare/db/d1" || context.isPrerendered) return handleRequestWithRuntime(context, next);
 	try {
-		const { getDb } = await import("../loader-Cgsx23wU.mjs").then((n) => n.i);
+		const { getDb } = await import("../loader-Dp6zLmQm.mjs").then((n) => n.i);
 		await assertD1Release(await getDb(), d1ReleaseRevision(getPlugins()));
 	} catch (error) {
 		console.error("Dineway D1 release check failed:", error);
@@ -2685,6 +2842,18 @@ const onRequest = defineMiddleware((context, next) => runWithPageCache(context.c
 	}
 	return handleRequestWithRuntime(context, next);
 })));
+/** Run maintenance from a platform scheduler, with the same release gate as HTTP requests. */
+async function runScheduledTasks(options = {}) {
+	return withPrimaryDatabase(() => runWithRuntimeEnvironment(getSecret, async () => {
+		const config = getConfig();
+		if (!config) throw new Error("Dineway is not configured.");
+		if (config.database?.entrypoint === "@dineway-ai/cloudflare/db/d1") {
+			const { getDb } = await import("../loader-Dp6zLmQm.mjs").then((n) => n.i);
+			await assertD1Release(await getDb(), d1ReleaseRevision(getPlugins()));
+		}
+		return (await getRuntime(config)).runScheduledTasks(options);
+	}));
+}
 
 //#endregion
-export { RUNTIME_INIT_DEADLINE_MS, onRequest as default, onRequest };
+export { RUNTIME_INIT_DEADLINE_MS, onRequest as default, onRequest, runScheduledTasks };

package/dist/astro/routes/api/admin/allowed-domains/_domain_.mjs

@@ -1,10 +1,10 @@
-import "../../../../../context-types-DLD_HnKT.mjs";
-import "../../../../../public-discovery-CTql6jdZ.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-B-44r5TD.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BscLr3p2.mjs";
-import { S as allowedDomainUpdateBody } from "../../../../../redirects-DpRiuRWn.mjs";
-import "../../../../../byline-fields-DGNKitg3.mjs";
-import "../../../../../status-DBSB6tdS.mjs";
+import "../../../../../context-types-CPWAJRs5.mjs";
+import "../../../../../public-discovery-BGyhuD5U.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-B5a45Tfb.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-THHCpJLB.mjs";
+import { S as allowedDomainUpdateBody } from "../../../../../redirects-CVfxefrz.mjs";
+import "../../../../../byline-fields-DZ46DF10.mjs";
+import "../../../../../status-Bjf_uSrW.mjs";
 import "../../../../../api/schemas/index.mjs";
 import { Role, roleFromLevel } from "@dineway-ai/auth";
 import { createKyselyAdapter } from "@dineway-ai/auth/adapters/kysely";

package/dist/astro/routes/api/admin/allowed-domains/index.mjs

@@ -1,10 +1,10 @@
-import "../../../../../context-types-DLD_HnKT.mjs";
-import "../../../../../public-discovery-CTql6jdZ.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-B-44r5TD.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BscLr3p2.mjs";
-import { x as allowedDomainCreateBody } from "../../../../../redirects-DpRiuRWn.mjs";
-import "../../../../../byline-fields-DGNKitg3.mjs";
-import "../../../../../status-DBSB6tdS.mjs";
+import "../../../../../context-types-CPWAJRs5.mjs";
+import "../../../../../public-discovery-BGyhuD5U.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-B5a45Tfb.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-THHCpJLB.mjs";
+import { x as allowedDomainCreateBody } from "../../../../../redirects-CVfxefrz.mjs";
+import "../../../../../byline-fields-DZ46DF10.mjs";
+import "../../../../../status-Bjf_uSrW.mjs";
 import "../../../../../api/schemas/index.mjs";
 import { Role, roleFromLevel } from "@dineway-ai/auth";
 import { createKyselyAdapter } from "@dineway-ai/auth/adapters/kysely";

package/dist/astro/routes/api/admin/api-tokens/_id_.mjs

@@ -1,7 +1,7 @@
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-B-44r5TD.mjs";
-import "../../../../../api-tokens-DA18zxza.mjs";
-import { i as handleApiTokenRevoke } from "../../../../../api-tokens-OAgvq4xg.mjs";
-import { t as rejectApiTokenAuthControlWrite } from "../../../../../auth-control-guard-DPOSBNFI.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-B5a45Tfb.mjs";
+import "../../../../../api-tokens-0N3nafqZ.mjs";
+import { i as handleApiTokenRevoke } from "../../../../../api-tokens-CNHnKO57.mjs";
+import { t as rejectApiTokenAuthControlWrite } from "../../../../../auth-control-guard-DbjgJdlo.mjs";
 import { Role } from "@dineway-ai/auth";
 
 //#region src/astro/routes/api/admin/api-tokens/[id].ts

package/dist/astro/routes/api/admin/api-tokens/index.mjs

@@ -1,9 +1,9 @@
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-B-44r5TD.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BscLr3p2.mjs";
-import { t as ALL_VALID_SCOPES } from "../../../../../api-tokens-DA18zxza.mjs";
-import { c as requestedExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, s as getExperimentalSiteContextWorkflowsDisabledMessage } from "../../../../../experimental-workflows-fzJHB3ZI.mjs";
-import { n as handleApiTokenCreate, r as handleApiTokenList } from "../../../../../api-tokens-OAgvq4xg.mjs";
-import { t as rejectApiTokenAuthControlWrite } from "../../../../../auth-control-guard-DPOSBNFI.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-B5a45Tfb.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-THHCpJLB.mjs";
+import { t as ALL_VALID_SCOPES } from "../../../../../api-tokens-0N3nafqZ.mjs";
+import { c as requestedExperimentalSiteContextWorkflowScopes, i as experimentalSiteContextWorkflowsEnabled, s as getExperimentalSiteContextWorkflowsDisabledMessage } from "../../../../../experimental-workflows-BbxpWwBy.mjs";
+import { n as handleApiTokenCreate, r as handleApiTokenList } from "../../../../../api-tokens-CNHnKO57.mjs";
+import { t as rejectApiTokenAuthControlWrite } from "../../../../../auth-control-guard-DbjgJdlo.mjs";
 import { Role } from "@dineway-ai/auth";
 import { z } from "zod";