dineway 0.2.46 → 0.2.48

package/dist/{migration-BhVzGnj0.mjs → retention-gks1TiDo.mjs}

@@ -1,27 +1,78 @@
 import { atomicBatch, rowUnchanged } from "./database/batch.mjs";
-import { a as validateContentStorage, i as resolveContentPartition, n as contentDigest, o as ContentStorageError, t as canonicalContentJson } from "./config---A7Bg68.mjs";
-import { b as prepareContentChangeJournal, d as prepareContentProjection, h as cancelContentMigration, l as assertContentIndexFields, r as getContentStorage, u as contentProjectionValues, v as readContentPartitionRoute, y as contentChangeSequence } from "./runtime-BLoyGKUx.mjs";
-import { n as readRevisionDataBatch, r as storedRevisionIndex } from "./revisions-CQZI886L.mjs";
-import { t as ContentRepository } from "./content-BZBomTNV.mjs";
-import { o as invalidateCollectionCache } from "./object-cache-Ue6kAfzf.mjs";
-import { i as contentWriteConfiguration, k as snapshotPartitionDependencies } from "./content-write-Bt_eiX9o.mjs";
-import { o as contentVersionSchema } from "./version-store-DyYULGd3.mjs";
-import { a as contentItemSchema } from "./content-C8i4DyTt.mjs";
+import { a as validateContentStorage, i as resolveContentPartition, n as contentDigest, o as ContentStorageError, t as canonicalContentJson } from "./config-BhQacL9l.mjs";
+import { _ as prepareContentProjection, b as contentChangeSequence, d as cancelContentMigration, g as contentProjectionValues, h as assertContentIndexFields, i as getContentStorage, m as readContentPartitionRoute, x as prepareContentChangeJournal } from "./runtime-CeGWfwh3.mjs";
+import { n as readRevisionDataBatch, r as storedRevisionIndex } from "./revisions-DG2-WBDb.mjs";
+import { t as ContentRepository } from "./content-CIWw08LO.mjs";
+import { o as invalidateCollectionCache } from "./object-cache-DRx6IjWR.mjs";
+import { i as contentWriteConfiguration, k as snapshotPartitionDependencies } from "./content-write-BjTJiZhK.mjs";
+import { a as contentVersionSchema } from "./version-store-xhBmPoC-.mjs";
+import { a as contentItemSchema } from "./content-CghEEm3k.mjs";
 import { sql } from "kysely";
 import { z } from "zod";
 
 //#region src/content-storage/config-migration.ts
+function referenceLayout(config) {
+	return Object.fromEntries(Object.entries(config.rules).map(([collection, rule]) => {
+		const key = rule.partitionBy;
+		if (!("references" in key) || !key.references) return [collection, rule];
+		const references = Object.fromEntries(Object.entries(key.references).map(([name, reference]) => {
+			const { fields: _fields, ...dependency } = reference;
+			return [name, dependency];
+		}));
+		return [collection, {
+			...rule,
+			partitionBy: {
+				...key,
+				references
+			}
+		}];
+	}));
+}
+function dataLayout(config) {
+	return canonicalContentJson({
+		version: config.version,
+		rules: referenceLayout(config),
+		stores: Object.fromEntries(Object.entries(config.stores).map(([name, { provider, identity }]) => [name, {
+			provider,
+			identity
+		}]))
+	});
+}
+/** Explicitly stage compatible bindings or a resolver input projection with the same routing contract. */
+async function stageContentStorageBindings(db, previous, next) {
+	validateContentStorage(previous);
+	validateContentStorage(next);
+	if (dataLayout(previous) !== dataLayout(next)) throw new ContentStorageError("INVALID_CONFIG", "Changing database bindings must preserve the Content type rules, physical stores and routing version.");
+	const before = await contentDigest(previous), after = await contentDigest(next);
+	await atomicBatch(db, {
+		checks: [
+			sql`EXISTS (SELECT 1 FROM _dineway_content_storage_config WHERE id='active' AND version=${previous.version} AND digest IN (${before},${after}))`,
+			sql`NOT EXISTS (SELECT 1 FROM _dineway_content_storage_config WHERE id='bindings' AND digest<>${after})`,
+			...canonicalContentJson(previous.rules) === canonicalContentJson(next.rules) ? [] : [sql`NOT EXISTS (SELECT 1 FROM _dineway_content_partitions WHERE state<>'active')`, sql`NOT EXISTS (SELECT 1 FROM _dineway_content_operations WHERE state='pending')`]
+		],
+		statements: [sql`INSERT INTO _dineway_content_storage_config (id,version,digest) SELECT 'bindings',version,${after} FROM _dineway_content_storage_config WHERE id='active' AND digest<>${after} ON CONFLICT(id) DO NOTHING`.compile(db)]
+	});
+}
 /** Explicit deployment step. Mapping changes retain the source until its data migration completes. */
 async function migrateContentStorageConfig(db, previous, next) {
 	validateContentStorage(previous);
 	validateContentStorage(next);
 	await assertContentIndexFields(db, next);
-	if (previous.version === next.version) throw new ContentStorageError("INVALID_CONFIG", "A routing configuration change requires a new version.");
+	if (previous.version === next.version) {
+		await stageContentStorageBindings(db, previous, next);
+		const before = await contentDigest(previous), after = await contentDigest(next);
+		await atomicBatch(db, {
+			checks: [sql`EXISTS (SELECT 1 FROM _dineway_content_storage_config WHERE id='active' AND version=${next.version} AND (digest=${after} OR (digest=${before} AND EXISTS (SELECT 1 FROM _dineway_content_storage_config WHERE id='bindings' AND digest=${after}))))`],
+			statements: [sql`UPDATE _dineway_content_storage_config SET digest=${after} WHERE id='active'`.compile(db), sql`DELETE FROM _dineway_content_storage_config WHERE id='bindings' AND digest=${after}`.compile(db)]
+		});
+		return;
+	}
 	const oldDigest = await contentDigest(previous);
 	const digest = await contentDigest(next);
 	const installed = (await sql`SELECT version,digest FROM _dineway_content_storage_config WHERE id='active'`.execute(db)).rows[0];
 	if (installed?.version === next.version && installed.digest === digest) return;
 	const checks = [
+		sql`NOT EXISTS (SELECT 1 FROM _dineway_content_storage_config WHERE id='bindings')`,
 		sql`NOT EXISTS (SELECT 1 FROM _dineway_content_hook_deliveries WHERE delivered_at IS NULL)`,
 		sql`EXISTS (SELECT 1 FROM _dineway_content_storage_config WHERE id='active' AND version=${previous.version} AND digest=${oldDigest})`,
 		sql`NOT EXISTS (SELECT 1 FROM _dineway_content_partitions WHERE state<>'active')`
@@ -564,4 +615,43 @@ async function rollbackContentMigration(db, migration, archive) {
 }
 
 //#endregion
-export { verifyContentMigration as a, captureContentMigrationSnapshot as c, stageContentMigrationEntry as i, contentMigrationSnapshotSchema as l, completeContentMigration as n, verifyContentMigrationPage as o, rollbackContentMigration as r, bootstrapContentDirectoryPage as s, activateContentMigrationEntry as t, migrateContentStorageConfig as u };
+//#region src/content-storage/retention.ts
+/** Read-only inventory. A page is an observation, never a deletion authorization. */
+async function inventoryContentVersions(primary, physical, store, collection, after = 0, limit = 50, now = /* @__PURE__ */ new Date()) {
+	if (!Number.isSafeInteger(after) || after < 0 || !Number.isInteger(limit) || limit < 1 || limit > 100) throw new ContentStorageError("INVALID_CONFIG", "Select a valid version inventory page.");
+	if (!(await sql`SELECT physical_schema FROM _dineway_content_store_collections WHERE collection=${collection}`.execute(physical)).rows[0]) throw new ContentStorageError("INVALID_CONFIG", "Unknown physical content type.");
+	const sizes = [...(await sql`SELECT name FROM pragma_table_info(${"ec_" + collection})`.execute(physical)).rows.map(({ name }) => sql`coalesce(length(CAST(${sql.ref("c." + name)} AS BLOB)),0)`), ...[
+		"collection",
+		"entry_id",
+		"version",
+		"operation_id",
+		"digest",
+		"command",
+		"data",
+		"created_at"
+	].map((key) => sql`length(CAST(${sql.ref("v." + key)} AS BLOB))`)];
+	const groups = Array.from({ length: Math.ceil(sizes.length / 12) }, (_, i) => sql`(${sql.join(sizes.slice(i * 12, i * 12 + 12), sql` + `)})`);
+	const rows = (await sql`SELECT v.rowid AS cursor,v.entry_id,v.version,json_extract(v.command,'$.partition') AS partition,v.created_at,
+		${sql.join(groups, sql` + `)} AS payload_bytes FROM _dineway_content_versions v
+		JOIN ${sql.table("ec_" + collection)} c ON c.id=v.entry_id AND c._dineway_storage_version=v.version
+		WHERE v.collection=${collection} AND v.rowid>${after} ORDER BY v.rowid LIMIT ${limit}`.execute(physical)).rows;
+	const cutoff = (/* @__PURE__ */ new Date(now.getTime() - 7 * 864e5)).toISOString();
+	return {
+		store,
+		collection,
+		versions: (await sql`
+		WITH candidate AS (SELECT value AS v FROM json_each(${JSON.stringify(rows)})),
+		page AS (SELECT json_extract(v,'$.cursor') AS cursor,json_extract(v,'$.entry_id') AS entry_id,json_extract(v,'$.version') AS version,
+		json_extract(v,'$.partition') AS partition,json_extract(v,'$.created_at') AS created_at,json_extract(v,'$.payload_bytes') AS payload_bytes FROM candidate)
+		SELECT p.*,CASE WHEN EXISTS(SELECT 1 FROM _dineway_content_locations l WHERE l.collection=${collection} AND l.entry_id=p.entry_id AND l.store=${store} AND l.version=p.version)
+		OR EXISTS(SELECT 1 FROM revisions r WHERE r.collection=${collection} AND r.entry_id=p.entry_id AND json_extract(r.data,'$.__dineway_content_storage__.store')=${store} AND json_extract(r.data,'$.__dineway_content_storage__.version')=p.version) THEN 'referenced'
+		WHEN p.created_at>=${cutoff} OR EXISTS(SELECT 1 FROM _dineway_content_changes j WHERE j.collection=${collection} AND j.entry_id=p.entry_id AND j.changed_at>=${cutoff})
+		OR EXISTS(SELECT 1 FROM _dineway_content_operations o WHERE o.collection=${collection} AND o.entry_id=p.entry_id AND o.state='pending')
+		OR EXISTS(SELECT 1 FROM _dineway_content_migrations m WHERE m.collection=${collection} AND m.partition=p.partition AND (m.state NOT IN ('complete','cancelled') OR m.retain_until>=${now.toISOString()} OR m.updated_at>=${cutoff}))
+		THEN 'retained' ELSE 'review' END AS disposition FROM page p ORDER BY p.cursor`.execute(primary)).rows,
+		nextCursor: rows.length === limit ? rows.at(-1).cursor : null
+	};
+}
+
+//#endregion
+export { stageContentMigrationEntry as a, bootstrapContentDirectoryPage as c, migrateContentStorageConfig as d, stageContentStorageBindings as f, rollbackContentMigration as i, captureContentMigrationSnapshot as l, activateContentMigrationEntry as n, verifyContentMigration as o, completeContentMigration as r, verifyContentMigrationPage as s, inventoryContentVersions as t, contentMigrationSnapshotSchema as u };

package/dist/{review-requests-B7UdAl1r.mjs → review-requests-05w-uj_e.mjs}

@@ -1,5 +1,5 @@
 import { n as RejectedReviewContentError, r as ReviewRequestRepository } from "./review-requests-DZYM51yI.mjs";
-import { r as submitAutomatedReview, t as ReviewSubmissionError } from "./submission-BNP2Sc3O.mjs";
+import { r as submitAutomatedReview, t as ReviewSubmissionError } from "./submission-_6ZXKy3N.mjs";
 
 //#region src/api/handlers/review-requests.ts
 async function handleReviewRequestCreate(db, handlers, input) {

package/dist/{revision-BtgwJxxa.mjs → revision-DX_AHhhE.mjs}

@@ -1,7 +1,7 @@
 import { atomicBatch } from "./database/batch.mjs";
 import { t as validateIdentifier } from "./validate-Co3j6T_K.mjs";
-import { g as contentPartitionWritable, r as getContentStorage } from "./runtime-BLoyGKUx.mjs";
-import { n as readRevisionDataBatch, t as readRevisionData } from "./revisions-CQZI886L.mjs";
+import { f as contentPartitionWritable, i as getContentStorage } from "./runtime-CeGWfwh3.mjs";
+import { n as readRevisionDataBatch, t as readRevisionData } from "./revisions-DG2-WBDb.mjs";
 import { t as DinewayValidationError } from "./types-BI3ULB3A.mjs";
 import { sql } from "kysely";
 import { monotonicFactory } from "ulidx";

package/dist/{revisions-CQZI886L.mjs → revisions-DG2-WBDb.mjs}

@@ -1,5 +1,5 @@
-import { o as ContentStorageError } from "./config---A7Bg68.mjs";
-import { r as getContentStorage } from "./runtime-BLoyGKUx.mjs";
+import { o as ContentStorageError } from "./config-BhQacL9l.mjs";
+import { i as getContentStorage } from "./runtime-CeGWfwh3.mjs";
 import { z } from "zod";
 
 //#region src/content-storage/revisions.ts

package/dist/{runtime-ecsN2xL9.d.mts → runtime-BEiDcRPk.d.mts}

@@ -1,5 +1,5 @@
 import { AtomicBatch } from "./database/batch.mjs";
-import { a as ContentStorageActivation, d as ContentStore, p as PreparedContentVersion, r as ContentPartitionResolver, s as ContentStorageConfig, t as ContentLocation } from "./types-CeFGasN8.mjs";
+import { a as ContentStorageActivation, d as ContentStore, p as PreparedContentVersion, r as ContentPartitionResolver, s as ContentStorageConfig, t as ContentLocation } from "./types-BafdCfKt.mjs";
 import { n as ContentStorageHookName, r as ContentStorageHookTarget } from "./hook-events-lN-kz-4_.mjs";
 import { Kysely } from "kysely";
 

package/dist/{runtime-BLoyGKUx.mjs → runtime-CeGWfwh3.mjs}

@@ -1,6 +1,6 @@
 import { getRequestContext } from "./request-context.mjs";
 import { atomicBatch, rowUnchanged } from "./database/batch.mjs";
-import { a as validateContentStorage, i as resolveContentPartition, n as contentDigest, o as ContentStorageError, s as ContentStorageReplay, t as canonicalContentJson } from "./config---A7Bg68.mjs";
+import { a as validateContentStorage, i as resolveContentPartition, n as contentDigest, o as ContentStorageError, s as ContentStorageReplay, t as canonicalContentJson } from "./config-BhQacL9l.mjs";
 import { sql } from "kysely";
 import { toPlainText } from "@portabletext/toolkit";
 
@@ -56,59 +56,6 @@ function contentChangeSequence(collection, entryId) {
 	return sql`(SELECT COALESCE(MAX(sequence),0) FROM _dineway_content_changes WHERE collection=${collection} AND entry_id=${entryId})`;
 }
 
-//#endregion
-//#region src/content-storage/routing.ts
-const MIGRATION_ID = /^[a-zA-Z0-9_-]{1,128}$/;
-async function readContentPartitionRoute(db, collection, partition) {
-	const row = (await sql`SELECT * FROM _dineway_content_partitions WHERE collection = ${collection} AND partition = ${partition}`.execute(db)).rows[0];
-	if (!row) throw new ContentStorageError("ROUTE_CHANGED", "The content partition has not been installed.");
-	return {
-		route: row,
-		check: rowUnchanged("_dineway_content_partitions", { ...row })
-	};
-}
-/** Also fences metadata-only operations, such as trash, scheduling and review activation. */
-function contentPartitionWritable(collection, id) {
-	return sql`NOT EXISTS (SELECT 1 FROM _dineway_content_locations l JOIN _dineway_content_partitions p ON p.collection = l.collection AND p.partition = l.partition WHERE l.collection = ${collection} AND l.entry_id = ${id} AND p.state = 'frozen')`;
-}
-/** Starts copying while the partition remains writable on its current store. */
-async function beginContentMigration(db, config, migration) {
-	if (!MIGRATION_ID.test(migration.id)) throw new ContentStorageError("CONFLICT", "A stable migration identifier is required.");
-	const current = await readContentPartitionRoute(db, migration.collection, migration.partition);
-	if (current.route.migration_id === migration.id && current.route.state !== "active") return current.route;
-	const target = config.rules[migration.collection]?.stores[migration.partition];
-	if (!target || current.route.store === target || current.route.state !== "active" || current.route.migration_id) throw new ContentStorageError("CONFLICT", "The partition cannot start this migration.");
-	await atomicBatch(db, {
-		checks: [current.check, sql`EXISTS (SELECT 1 FROM _dineway_content_storage_config WHERE id='active' AND version=${config.version} AND digest=${await contentDigest(config)})`],
-		statements: [sql`INSERT INTO _dineway_content_migrations (id, collection, partition, source_store, target_store, routing_version, state, created_at, updated_at, retain_until) VALUES (${migration.id}, ${migration.collection}, ${migration.partition}, ${current.route.store}, ${target}, ${config.version}, 'copying', ${(/* @__PURE__ */ new Date()).toISOString()}, ${(/* @__PURE__ */ new Date()).toISOString()}, ${new Date(Date.now() + 7 * 864e5).toISOString()})`.compile(db), sql`UPDATE _dineway_content_partitions SET state='copying', migration_id=${migration.id}, target_store=${target}, epoch=epoch+1, updated_at=${(/* @__PURE__ */ new Date()).toISOString()} WHERE collection=${migration.collection} AND partition=${migration.partition}`.compile(db)]
-	});
-	return (await readContentPartitionRoute(db, migration.collection, migration.partition)).route;
-}
-/** Epoch fencing makes all previously prepared writes fail before primary activation. */
-async function freezeContentPartition(db, migration) {
-	const current = await readContentPartitionRoute(db, migration.collection, migration.partition);
-	if (current.route.migration_id !== migration.id || !["copying", "frozen"].includes(current.route.state)) throw new ContentStorageError("CONFLICT", "The migration does not own this partition.");
-	if (current.route.state === "frozen") return current.route;
-	await atomicBatch(db, {
-		checks: [current.check, sql`NOT EXISTS (SELECT 1 FROM ${sql.table(`ec_${migration.collection}`)} c WHERE NOT EXISTS (SELECT 1 FROM _dineway_content_locations l WHERE l.collection=${migration.collection} AND l.entry_id=c.id))`],
-		statements: [
-			sql`UPDATE _dineway_content_migrations SET state='frozen', updated_at=${(/* @__PURE__ */ new Date()).toISOString()} WHERE id=${migration.id}`.compile(db),
-			sql`UPDATE _dineway_content_partitions SET state='frozen', epoch=epoch+1, updated_at=${(/* @__PURE__ */ new Date()).toISOString()} WHERE collection=${migration.collection} AND partition=${migration.partition}`.compile(db),
-			sql`UPDATE _dineway_content_operations SET state='aborted', updated_at=${(/* @__PURE__ */ new Date()).toISOString()} WHERE collection=${migration.collection} AND state='pending' AND json_extract(command, '$.partition')=${migration.partition}`.compile(db)
-		]
-	});
-	return (await readContentPartitionRoute(db, migration.collection, migration.partition)).route;
-}
-/** Resume the old store only while every entry still points to it. */
-async function cancelContentMigration(db, migration) {
-	const current = await readContentPartitionRoute(db, migration.collection, migration.partition);
-	if (current.route.migration_id !== migration.id || current.route.state === "active") throw new ContentStorageError("CONFLICT", "The migration does not own this partition.");
-	await atomicBatch(db, {
-		checks: [current.check, sql`NOT EXISTS (SELECT 1 FROM _dineway_content_locations WHERE collection=${migration.collection} AND partition=${migration.partition} AND store<>${current.route.store})`],
-		statements: [sql`UPDATE _dineway_content_migrations SET state='cancelled', updated_at=${(/* @__PURE__ */ new Date()).toISOString()} WHERE id=${migration.id}`.compile(db), sql`UPDATE _dineway_content_partitions SET state='active', migration_id=NULL, epoch=epoch+1, updated_at=${(/* @__PURE__ */ new Date()).toISOString()} WHERE collection=${migration.collection} AND partition=${migration.partition}`.compile(db)]
-	});
-}
-
 //#endregion
 //#region src/search/text-extraction.ts
 /**
@@ -246,6 +193,59 @@ function prepareContentProjection(db, collection, item, fields, create, full = f
 	return create ? sql`INSERT INTO ${sql.table(`ec_${collection}`)} (${sql.join(columns.map((column) => sql.ref(column)))}) VALUES (${sql.join(columns.map((column) => values[column] === null ? sql`NULL` : sql`${values[column]}`))})`.compile(db) : sql`UPDATE ${sql.table(`ec_${collection}`)} SET ${sql.join(columns.filter((column) => column !== "id").map((column) => sql`${sql.ref(column)} = ${values[column] === null ? sql`NULL` : sql`${values[column]}`} `))} WHERE id = ${item.id}`.compile(db);
 }
 
+//#endregion
+//#region src/content-storage/routing.ts
+const MIGRATION_ID = /^[a-zA-Z0-9_-]{1,128}$/;
+async function readContentPartitionRoute(db, collection, partition) {
+	const row = (await sql`SELECT * FROM _dineway_content_partitions WHERE collection = ${collection} AND partition = ${partition}`.execute(db)).rows[0];
+	if (!row) throw new ContentStorageError("ROUTE_CHANGED", "The content partition has not been installed.");
+	return {
+		route: row,
+		check: rowUnchanged("_dineway_content_partitions", { ...row })
+	};
+}
+/** Also fences metadata-only operations, such as trash, scheduling and review activation. */
+function contentPartitionWritable(collection, id) {
+	return sql`NOT EXISTS (SELECT 1 FROM _dineway_content_locations l JOIN _dineway_content_partitions p ON p.collection = l.collection AND p.partition = l.partition WHERE l.collection = ${collection} AND l.entry_id = ${id} AND p.state = 'frozen')`;
+}
+/** Starts copying while the partition remains writable on its current store. */
+async function beginContentMigration(db, config, migration) {
+	if (!MIGRATION_ID.test(migration.id)) throw new ContentStorageError("CONFLICT", "A stable migration identifier is required.");
+	const current = await readContentPartitionRoute(db, migration.collection, migration.partition);
+	if (current.route.migration_id === migration.id && current.route.state !== "active") return current.route;
+	const target = config.rules[migration.collection]?.stores[migration.partition];
+	if (!target || current.route.store === target || current.route.state !== "active" || current.route.migration_id) throw new ContentStorageError("CONFLICT", "The partition cannot start this migration.");
+	await atomicBatch(db, {
+		checks: [current.check, sql`EXISTS (SELECT 1 FROM _dineway_content_storage_config WHERE id IN ('active','bindings') AND version=${config.version} AND digest=${await contentDigest(config)})`],
+		statements: [sql`INSERT INTO _dineway_content_migrations (id, collection, partition, source_store, target_store, routing_version, state, created_at, updated_at, retain_until) VALUES (${migration.id}, ${migration.collection}, ${migration.partition}, ${current.route.store}, ${target}, ${config.version}, 'copying', ${(/* @__PURE__ */ new Date()).toISOString()}, ${(/* @__PURE__ */ new Date()).toISOString()}, ${new Date(Date.now() + 7 * 864e5).toISOString()})`.compile(db), sql`UPDATE _dineway_content_partitions SET state='copying', migration_id=${migration.id}, target_store=${target}, epoch=epoch+1, updated_at=${(/* @__PURE__ */ new Date()).toISOString()} WHERE collection=${migration.collection} AND partition=${migration.partition}`.compile(db)]
+	});
+	return (await readContentPartitionRoute(db, migration.collection, migration.partition)).route;
+}
+/** Epoch fencing makes all previously prepared writes fail before primary activation. */
+async function freezeContentPartition(db, migration) {
+	const current = await readContentPartitionRoute(db, migration.collection, migration.partition);
+	if (current.route.migration_id !== migration.id || !["copying", "frozen"].includes(current.route.state)) throw new ContentStorageError("CONFLICT", "The migration does not own this partition.");
+	if (current.route.state === "frozen") return current.route;
+	await atomicBatch(db, {
+		checks: [current.check, sql`NOT EXISTS (SELECT 1 FROM ${sql.table(`ec_${migration.collection}`)} c WHERE NOT EXISTS (SELECT 1 FROM _dineway_content_locations l WHERE l.collection=${migration.collection} AND l.entry_id=c.id))`],
+		statements: [
+			sql`UPDATE _dineway_content_migrations SET state='frozen', updated_at=${(/* @__PURE__ */ new Date()).toISOString()} WHERE id=${migration.id}`.compile(db),
+			sql`UPDATE _dineway_content_partitions SET state='frozen', epoch=epoch+1, updated_at=${(/* @__PURE__ */ new Date()).toISOString()} WHERE collection=${migration.collection} AND partition=${migration.partition}`.compile(db),
+			sql`UPDATE _dineway_content_operations SET state='aborted', updated_at=${(/* @__PURE__ */ new Date()).toISOString()} WHERE collection=${migration.collection} AND state='pending' AND json_extract(command, '$.partition')=${migration.partition}`.compile(db)
+		]
+	});
+	return (await readContentPartitionRoute(db, migration.collection, migration.partition)).route;
+}
+/** Resume the old store only while every entry still points to it. */
+async function cancelContentMigration(db, migration) {
+	const current = await readContentPartitionRoute(db, migration.collection, migration.partition);
+	if (current.route.migration_id !== migration.id || current.route.state === "active") throw new ContentStorageError("CONFLICT", "The migration does not own this partition.");
+	await atomicBatch(db, {
+		checks: [current.check, sql`NOT EXISTS (SELECT 1 FROM _dineway_content_locations WHERE collection=${migration.collection} AND partition=${migration.partition} AND store<>${current.route.store})`],
+		statements: [sql`UPDATE _dineway_content_migrations SET state='cancelled', updated_at=${(/* @__PURE__ */ new Date()).toISOString()} WHERE id=${migration.id}`.compile(db), sql`UPDATE _dineway_content_partitions SET state='active', migration_id=NULL, epoch=epoch+1, updated_at=${(/* @__PURE__ */ new Date()).toISOString()} WHERE collection=${migration.collection} AND partition=${migration.partition}`.compile(db)]
+	});
+}
+
 //#endregion
 //#region src/content-storage/coordinator.ts
 const locationKey = (location) => JSON.stringify([
@@ -367,7 +367,7 @@ var ContentStorageCoordinator = class {
 		const serialized = canonicalContentJson(command);
 		const existing = await this.operation(command.operationId);
 		if (existing && existing.command !== serialized) throw new ContentStorageError("CONFLICT", "An operation identifier cannot be reused for different content or authority.");
-		const routeCheck = sql`(${partition.check}) AND EXISTS (SELECT 1 FROM _dineway_content_storage_config WHERE id = 'active' AND version = ${this.config.version} AND digest = ${await this.configDigest})`;
+		const routeCheck = sql`(${partition.check}) AND EXISTS (SELECT 1 FROM _dineway_content_storage_config WHERE id IN ('active','bindings') AND version = ${this.config.version} AND digest = ${await this.configDigest})`;
 		const authority = await activation.authorize(command);
 		if (existing?.state === "committed") {
 			await atomicBatch(this.db, {
@@ -491,9 +491,11 @@ function contentStorageCacheScope() {
 	});
 }
 async function assertContentStorageConfiguration(db, config) {
-	const row = (await sql`SELECT version, digest FROM _dineway_content_storage_config WHERE id = 'active'`.execute(db)).rows[0];
-	if (!config && !row) return;
-	if (!config || !row || row.version !== config.version || row.digest !== await contentDigest(config)) throw new ContentStorageError("UNAVAILABLE", "Content routing configuration does not match the installed database configuration. Apply the explicit content storage migration before serving requests.");
+	const { rows } = await sql`SELECT id,version,digest FROM _dineway_content_storage_config WHERE id IN ('active','bindings')`.execute(db);
+	const digest = config && await contentDigest(config);
+	const active = rows.find((row) => row.id === "active");
+	if (!config && !rows.length) return;
+	if (!config || active?.version !== config.version || !rows.some((row) => row.version === config.version && row.digest === digest)) throw new ContentStorageError("UNAVAILABLE", "Content routing configuration does not match the installed database configuration. Apply the explicit content storage migration before serving requests.");
 }
 function getContentStorageRuntime(db) {
 	const context = getRequestContext();
@@ -523,6 +525,17 @@ function getContentStorage(db, collection) {
 		coordinator: new ContentStorageCoordinator(db, runtime.config, stores, runtime.resolvers)
 	};
 }
+/** Predicates run on the primary index before stored bodies are hydrated. */
+async function assertContentQueryFields(db, collection, fields) {
+	const rule = getContentStorageRuntime(db)?.config.rules[collection];
+	if (!rule) return;
+	const candidates = [...new Set(fields)].filter((field) => !CONTENT_SYSTEM_FIELDS.has(field) && !rule.indexFields?.includes(field));
+	if (!candidates.length) return;
+	const { rows } = await sql`SELECT f.slug FROM _dineway_fields f JOIN _dineway_collections c ON c.id=f.collection_id
+		WHERE c.slug=${collection} AND f.column_type='JSON' AND coalesce(f."unique",0)=0 AND coalesce(f.searchable,0)=0
+		AND f.slug IN (SELECT value FROM json_each(${JSON.stringify(candidates)})) LIMIT 1`.execute(db);
+	if (rows[0]) throw new ContentStorageError("INVALID_CONFIG", `Querying ${collection}.${rows[0].slug} requires a primary index field.`);
+}
 /** Resolve a bounded primary-index page in bulk, retaining the selected metadata and order. */
 async function hydrateContentRows(db, collection, rows, fields, publicLoaderRead = false) {
 	const storage = getContentStorage(db, collection);
@@ -532,6 +545,10 @@ async function hydrateContentRows(db, collection, rows, fields, publicLoaderRead
 	const locations = [];
 	for (let offset = 0; offset < ids.length; offset += 80) {
 		const result = await sql`SELECT l.collection, l.entry_id, l.store, l.partition, l.routing_version, l.version, l.digest, c.version AS _entry_version, c.updated_at AS _entry_updated_at, c.status AS _entry_status, c.deleted_at AS _entry_deleted_at FROM _dineway_content_locations l JOIN ${sql.table(`ec_${collection}`)} c ON c.id = l.entry_id WHERE l.collection = ${collection} AND l.entry_id IN (${sql.join(ids.slice(offset, offset + 80))})`.execute(db);
+		if (result.rows.length !== ids.slice(offset, offset + 80).length) {
+			const { rows: routed } = await sql`SELECT 1 FROM _dineway_content_partitions WHERE collection=${collection} AND (store<>'primary' OR state='frozen') LIMIT 1`.execute(db);
+			if (routed.length) throw new ContentStorageError("UNAVAILABLE", "The content directory is missing a routed entry. Verify its location before retrying.");
+		}
 		for (const location of result.rows) {
 			const previous = byId.get(location.entry_id);
 			if (previous.version !== location._entry_version || [
@@ -597,4 +614,4 @@ async function hydrateContentRows(db, collection, rows, fields, publicLoaderRead
 }
 
 //#endregion
-export { freezeContentPartition as _, hydrateContentRows as a, prepareContentChangeJournal as b, installContentStorageConfig as c, prepareContentProjection as d, extractPlainText as f, contentPartitionWritable as g, cancelContentMigration as h, getContentStorageRuntime as i, assertContentIndexFields as l, beginContentMigration as m, contentStorageCacheScope as n, registerContentStorage as o, extractSearchableFields as p, getContentStorage as r, ContentStorageCoordinator as s, assertContentStorageConfiguration as t, contentProjectionValues as u, readContentPartitionRoute as v, contentChangeSequence as y };
+export { prepareContentProjection as _, getContentStorageRuntime as a, contentChangeSequence as b, ContentStorageCoordinator as c, cancelContentMigration as d, contentPartitionWritable as f, contentProjectionValues as g, assertContentIndexFields as h, getContentStorage as i, installContentStorageConfig as l, readContentPartitionRoute as m, assertContentStorageConfiguration as n, hydrateContentRows as o, freezeContentPartition as p, contentStorageCacheScope as r, registerContentStorage as s, assertContentQueryFields as t, beginContentMigration as u, extractPlainText as v, prepareContentChangeJournal as x, extractSearchableFields as y };

package/dist/runtime.d.mts

@@ -1,16 +1,16 @@
-import { $s as getDb, Js as EntryData, Qs as dinewayLoader, Ys as EntryFilter, qs as CollectionFilter } from "./types-jtUocGnQ.mjs";
+import { $s as getDb, Js as EntryData, Qs as dinewayLoader, Ys as EntryFilter, qs as CollectionFilter } from "./types-CTbitmIM.mjs";
 import "./types-CG9uGPBL.mjs";
 import "./runner-DlkOiguI.mjs";
 import "./index-_fCUsJx9.mjs";
-import "./types-CeFGasN8.mjs";
+import "./types-BafdCfKt.mjs";
 import "./types-DLwh1QkC.mjs";
 import "./adapters-cL325h6c.mjs";
-import "./runtime-ecsN2xL9.mjs";
+import "./runtime-BEiDcRPk.mjs";
 import "./hook-events-lN-kz-4_.mjs";
 import "./scheduled-publish-7kZkKw7t.mjs";
 import "./public-url-CvNSyMJJ.mjs";
 import "./validate-CleBZbkv.mjs";
-import "./byline-fields-D6EXp7_j.mjs";
+import "./byline-fields-B117F62r.mjs";
 import { withPrimaryDatabase } from "./request-context.mjs";
 import "./types-BuplUVZ4.mjs";
 import { t as getMediaProvider } from "./provider-loader-Dl8SscrT.mjs";

package/dist/runtime.mjs

@@ -1,13 +1,13 @@
 import { withPrimaryDatabase } from "./request-context.mjs";
 import "./d1-binding-DrLMBUxu.mjs";
 import "./dialect-helpers-C6xtO-Ui.mjs";
-import "./config---A7Bg68.mjs";
-import "./runtime-BLoyGKUx.mjs";
-import "./revisions-CQZI886L.mjs";
+import "./config-BhQacL9l.mjs";
+import "./runtime-CeGWfwh3.mjs";
+import "./revisions-DG2-WBDb.mjs";
 import "./runtime-env-DpYGy4pT.mjs";
 import "./base64-qvSs0Gxy.mjs";
 import "./types-BI3ULB3A.mjs";
-import { n as dinewayLoader, r as getDb } from "./loader--zFg6meV.mjs";
+import { n as dinewayLoader, r as getDb } from "./loader-CrVkVaD6.mjs";
 import { t as getMediaProvider } from "./provider-loader-BWu5kGxR.mjs";
 
 export { dinewayLoader, getDb, getMediaProvider, withPrimaryDatabase };

package/dist/{schema-DIXUswIX.mjs → schema-fU3y2MMH.mjs}

@@ -1,5 +1,5 @@
 import { c as __exportAll } from "./runner-CuG8o1uW.mjs";
-import { n as SchemaRegistry } from "./registry-DEKqjKIM.mjs";
+import { n as SchemaRegistry } from "./registry-CdeSHG0k.mjs";
 
 //#region src/schema/index.ts
 var schema_exports = /* @__PURE__ */ __exportAll({ SchemaRegistry: () => SchemaRegistry });

package/dist/{search-TXLzVROW.mjs → search-kRXT1_11.mjs}

@@ -1,6 +1,6 @@
 import { c as __exportAll } from "./runner-CuG8o1uW.mjs";
 import { t as validateIdentifier } from "./validate-Co3j6T_K.mjs";
-import { r as getDb } from "./loader--zFg6meV.mjs";
+import { r as getDb } from "./loader-CrVkVaD6.mjs";
 import { t as FTSManager } from "./fts-manager-BHwhq1lC.mjs";
 import { sql } from "kysely";
 

package/dist/{sections-zaZhTZqa.mjs → sections-DzoY2Hvx.mjs}

@@ -1,5 +1,5 @@
 import { i as encodeCursor, r as decodeCursor } from "./types-BI3ULB3A.mjs";
-import { r as getDb } from "./loader--zFg6meV.mjs";
+import { r as getDb } from "./loader-CrVkVaD6.mjs";
 import { ulid } from "ulidx";
 
 //#region src/sections/index.ts

package/dist/seed/index.mjs

@@ -1,40 +1,40 @@
 import "../d1-binding-DrLMBUxu.mjs";
 import "../dialect-helpers-C6xtO-Ui.mjs";
-import "../config---A7Bg68.mjs";
-import "../runtime-BLoyGKUx.mjs";
-import "../revisions-CQZI886L.mjs";
+import "../config-BhQacL9l.mjs";
+import "../runtime-CeGWfwh3.mjs";
+import "../revisions-DG2-WBDb.mjs";
 import "../runtime-env-DpYGy4pT.mjs";
 import "../base64-qvSs0Gxy.mjs";
 import "../types-BI3ULB3A.mjs";
-import "../loader--zFg6meV.mjs";
+import "../loader-CrVkVaD6.mjs";
 import "../actor-D0AW80ld.mjs";
 import "../atomic-authority-Bf5QZboB.mjs";
-import "../content-BZBomTNV.mjs";
+import "../content-CIWw08LO.mjs";
 import "../request-cache-CizvDoxV.mjs";
 import "../byline-registry-Caj0_gbU.mjs";
 import "../field-defs-cache-dn5Tw79A.mjs";
-import "../object-cache-Ue6kAfzf.mjs";
-import "../byline-BS25s1R-.mjs";
-import "../owned-metadata-bXhDX1WW.mjs";
-import "../revision-BtgwJxxa.mjs";
+import "../object-cache-DRx6IjWR.mjs";
+import "../byline-CYc3Hn1i.mjs";
+import "../owned-metadata-DFODPEuj.mjs";
+import "../revision-DX_AHhhE.mjs";
 import "../media-BjH5OD-A.mjs";
 import "../user-Bl2_8rhJ.mjs";
-import "../terms-EskuqbKE.mjs";
-import "../taxonomy-CcyZD5jQ.mjs";
+import "../terms-D4OJs0Zh.mjs";
+import "../taxonomy-CKv3RKf1.mjs";
 import "../options-yFkLUuTw.mjs";
 import "../redirect-CJ-FAbNK.mjs";
-import "../content-write-Bt_eiX9o.mjs";
-import "../version-store-DyYULGd3.mjs";
-import "../write-intent-CjTERf3N.mjs";
-import "../seo-BQ7R2a1z.mjs";
-import "../content-refresh-DbGFLB3p.mjs";
+import "../content-write-BjTJiZhK.mjs";
+import "../version-store-xhBmPoC-.mjs";
+import "../write-intent-ChTUctBF.mjs";
+import "../seo-DYjDvLHM.mjs";
+import "../content-refresh-lqCnhHGP.mjs";
 import "../ssrf-C7tTSD1r.mjs";
 import "../fts-manager-BHwhq1lC.mjs";
 import "../public-discovery-CGRirTJH.mjs";
-import "../registry-DEKqjKIM.mjs";
-import "../settings-Bc2eQPR6.mjs";
+import "../registry-CdeSHG0k.mjs";
+import "../settings-opr6BnNM.mjs";
 import { t as validateSeed } from "../validate-WOW5vZz_.mjs";
-import { t as applySeed } from "../apply-Caad3Uh7.mjs";
+import { t as applySeed } from "../apply-BlVVbjbz.mjs";
 import { t as defaultSeed } from "../default-BxRRjN_x.mjs";
 import { n as loadUserSeed, t as loadSeed } from "../load-XTcFS1Dp.mjs";
 

package/dist/seo/index.mjs

@@ -1,15 +1,15 @@
 import "../d1-binding-DrLMBUxu.mjs";
 import "../dialect-helpers-C6xtO-Ui.mjs";
-import "../config---A7Bg68.mjs";
-import "../runtime-BLoyGKUx.mjs";
-import "../revisions-CQZI886L.mjs";
+import "../config-BhQacL9l.mjs";
+import "../runtime-CeGWfwh3.mjs";
+import "../revisions-DG2-WBDb.mjs";
 import "../base64-qvSs0Gxy.mjs";
 import "../types-BI3ULB3A.mjs";
-import "../content-refresh-DbGFLB3p.mjs";
+import "../content-refresh-lqCnhHGP.mjs";
 import "../fts-manager-BHwhq1lC.mjs";
 import { i as satisfiesPublicDiscoveryRules } from "../public-discovery-CGRirTJH.mjs";
-import "../registry-DEKqjKIM.mjs";
-import { n as resolveCanonicalUrl, t as listPublicContent } from "../discovery-DNwLsQqJ.mjs";
+import "../registry-CdeSHG0k.mjs";
+import { n as resolveCanonicalUrl, t as listPublicContent } from "../discovery-DLzhlF9z.mjs";
 import { t as resolveContentUrl } from "../public-url-NCefkiXz.mjs";
 import { t as buildSeoImageUrl } from "../media-url-VHHHoHGL.mjs";
 

package/dist/{seo-BQ7R2a1z.mjs → seo-DYjDvLHM.mjs}

@@ -1,6 +1,6 @@
 import { atomicBatch } from "./database/batch.mjs";
-import { r as getContentStorage } from "./runtime-BLoyGKUx.mjs";
-import { o as invalidateCollectionCache } from "./object-cache-Ue6kAfzf.mjs";
+import { i as getContentStorage } from "./runtime-CeGWfwh3.mjs";
+import { o as invalidateCollectionCache } from "./object-cache-DRx6IjWR.mjs";
 import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-Bb56aCtB.mjs";
 import { sql } from "kysely";
 
@@ -108,7 +108,7 @@ var SeoRepository = class {
 	}
 	async upsert(collection, contentId, input) {
 		if (getContentStorage(this.db, collection)) {
-			const { prepareContentWrite } = await import("./content-write-Bt_eiX9o.mjs").then((n) => n.t);
+			const { prepareContentWrite } = await import("./content-write-BjTJiZhK.mjs").then((n) => n.t);
 			const write = await prepareContentWrite(this.db, collection, {
 				id: contentId,
 				seo: input,
@@ -153,8 +153,8 @@ var SeoRepository = class {
 	}
 	async copyForDuplicate(collection, sourceId, targetId) {
 		if (getContentStorage(this.db, collection)) {
-			const { snapshotOwnedContentMetadata } = await import("./owned-metadata-bXhDX1WW.mjs").then((n) => n.n);
-			const { prepareContentWrite } = await import("./content-write-Bt_eiX9o.mjs").then((n) => n.t);
+			const { snapshotOwnedContentMetadata } = await import("./owned-metadata-DFODPEuj.mjs").then((n) => n.n);
+			const { prepareContentWrite } = await import("./content-write-BjTJiZhK.mjs").then((n) => n.t);
 			const source = await snapshotOwnedContentMetadata(this.db, collection, sourceId);
 			const seo = await this.get(collection, sourceId);
 			const write = await prepareContentWrite(this.db, collection, {

package/dist/{seo-DdczIQvk.mjs → seo-DuHOFc2a.mjs}

@@ -1,4 +1,4 @@
-import { t as listPublicContent } from "./discovery-DNwLsQqJ.mjs";
+import { t as listPublicContent } from "./discovery-DLzhlF9z.mjs";
 
 //#region src/api/handlers/seo.ts
 /** Internal XML batch, not an unbounded public JSON list endpoint. */

package/dist/{service-CUlcOLZj.mjs → service-DlJ5BeF2.mjs}

@@ -1,6 +1,6 @@
 import { t as validateIdentifier } from "./validate-Co3j6T_K.mjs";
-import { s as invalidateCommentObjectCache } from "./object-cache-Ue6kAfzf.mjs";
-import { t as CommentRepository } from "./comment-BTt78k0n.mjs";
+import { s as invalidateCommentObjectCache } from "./object-cache-DRx6IjWR.mjs";
+import { t as CommentRepository } from "./comment-BnrzhX9M.mjs";
 import { t as escapeHtml } from "./escape-BfbDyuQ-.mjs";
 import { sql } from "kysely";
 

package/dist/{settings-CoCGUtE6.mjs → settings-BU33hxhH.mjs}

@@ -1,5 +1,5 @@
 import { c as __exportAll } from "./runner-CuG8o1uW.mjs";
-import { a as getSiteSettingsWithDb, s as setSiteSettings } from "./settings-Bc2eQPR6.mjs";
+import { a as getSiteSettingsWithDb, s as setSiteSettings } from "./settings-opr6BnNM.mjs";
 
 //#region src/api/handlers/settings.ts
 var settings_exports = /* @__PURE__ */ __exportAll({

package/dist/{settings-Bc2eQPR6.mjs → settings-opr6BnNM.mjs}

@@ -1,9 +1,9 @@
 import { getRequestContext } from "./request-context.mjs";
 import { after } from "./after.mjs";
-import { r as getDb } from "./loader--zFg6meV.mjs";
+import { r as getDb } from "./loader-CrVkVaD6.mjs";
 import { n as peekRequestCache, r as requestCached } from "./request-cache-CizvDoxV.mjs";
 import { n as invalidateProcessCache, r as processCachedAsync, t as createProcessCache } from "./process-cache-CMy5M80h.mjs";
-import { l as invalidateObjectCache, n as cachedQuery, t as CacheNamespace } from "./object-cache-Ue6kAfzf.mjs";
+import { l as invalidateObjectCache, n as cachedQuery, t as CacheNamespace } from "./object-cache-DRx6IjWR.mjs";
 import { t as MediaRepository } from "./media-BjH5OD-A.mjs";
 import { t as OptionsRepository } from "./options-yFkLUuTw.mjs";
 import { i as resolvePublicMediaUrl } from "./url-RhtABurq.mjs";

package/dist/{site-context-DkxgOnQl.mjs → site-context-94-KanDT.mjs}

@@ -1,20 +1,20 @@
 import { atomicBatch, rowUnchanged } from "./database/batch.mjs";
 import { t as validateIdentifier } from "./validate-Co3j6T_K.mjs";
 import { i as encodeCursor, r as decodeCursor } from "./types-BI3ULB3A.mjs";
-import { t as ContentRepository } from "./content-BZBomTNV.mjs";
+import { t as ContentRepository } from "./content-CIWw08LO.mjs";
 import { t as SiteActivityRepository } from "./site-activity-hpfJkmxQ.mjs";
 import { r as ReviewRequestRepository } from "./review-requests-DZYM51yI.mjs";
-import { o as HitlRequestRepository } from "./publication-authorization-DBNXaGgH.mjs";
+import { o as HitlRequestRepository } from "./publication-authorization-C2X-Qj7L.mjs";
 import { l as isPattern } from "./cache-DsEbwFVE.mjs";
 import { n as buildStableActionHash, t as ReviewPayloadBuilder } from "./review-payload-mDJIgcFy.mjs";
-import { i as parseSiteBriefingScope, l as handlePluginList, m as ContextRepository } from "./briefing-yQgD73g4.mjs";
+import { i as parseSiteBriefingScope, l as handlePluginList, m as ContextRepository } from "./briefing-DoFv4isE.mjs";
 import { t as FTSManager } from "./fts-manager-BHwhq1lC.mjs";
-import { n as SchemaRegistry } from "./registry-DEKqjKIM.mjs";
-import { a as getSiteSettingsWithDb } from "./settings-Bc2eQPR6.mjs";
+import { n as SchemaRegistry } from "./registry-CdeSHG0k.mjs";
+import { a as getSiteSettingsWithDb } from "./settings-opr6BnNM.mjs";
 import { n as assertExperimentalSiteContextWorkflowsEnabled } from "./experimental-workflows-BtKXzyIH.mjs";
 import { m as normalizeUrl } from "./utils-WY63JOPB.mjs";
 import { t as sanitizeWordPressImportSlug } from "./wordpress-slugs-qNcYNJGj.mjs";
-import { a as searchCollection } from "./search-TXLzVROW.mjs";
+import { a as searchCollection } from "./search-kRXT1_11.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 import { Role } from "@dineway-ai/auth";