emdash 0.29.0 → 0.31.0

package/dist/astro/middleware.mjs

@@ -1,84 +1,90 @@
-import { a as runMigrations, n as MIGRATION_RACE_WAIT_MS, t as ConcurrentMigrationTimeoutError } from "../runner-jt65bF7F.mjs";
+import { a as runMigrations, n as MIGRATION_RACE_WAIT_MS, t as ConcurrentMigrationTimeoutError } from "../runner-BdeLEgad.mjs";
 import { t as validateIdentifier } from "../validate-VPnKoIzW.mjs";
-import { s as isSqlite } from "../dialect-helpers-Cue7QQOR.mjs";
-import { i as setI18nConfig } from "../config-CVssduLe.mjs";
-import { _ as resolveExclusiveHooks, g as createHookPipeline, m as EmailPipeline, p as PluginRouteRegistry, t as getMenu, v as definePlugin } from "../menus-BtvH7Z7t.mjs";
+import { c as listTablesLike, s as isSqlite } from "../dialect-helpers-BtOwo2us.mjs";
+import { a as setI18nConfig, n as getI18nConfig } from "../config-B6b_BobR.mjs";
+import { E as AuditRepository, _ as createHookPipeline, h as EmailPipeline, m as buildRouteMeta, p as PluginRouteRegistry, t as getMenu, v as resolveExclusiveHooks, y as definePlugin } from "../menus-CPf_SW7u.mjs";
 import { t as after } from "../after-B1IIdH3Y.mjs";
 import { createRequestMetrics, getRequestContext, runWithContext } from "../request-context.mjs";
 import "../object-cache-Bok5j2ae.mjs";
-import { r as RevisionRepository, t as ContentRepository } from "../content-BO61Sx4j.mjs";
-import { n as isMissingTableError } from "../db-errors-BKuXh_fi.mjs";
-import "../base64-C74Msx8h.mjs";
-import "../types-Ch8pFMEm.mjs";
-import { t as MediaRepository } from "../media-D2ZFowpn.mjs";
-import "../user-DTxX_Fha.mjs";
-import "../taxonomy-BkxbUMSw.mjs";
-import "../comment-SWh31kS0.mjs";
+import { r as RevisionRepository, t as ContentRepository } from "../content-BC43pICM.mjs";
+import { n as isMissingTableError } from "../db-errors-CcWLaRiR.mjs";
+import "../base64-B-PsqheR.mjs";
+import "../types-CrRUFdej.mjs";
+import { t as MediaRepository } from "../media-its1WLYv.mjs";
+import "../user-aTXqmXBz.mjs";
+import "../taxonomy-0mCI25HN.mjs";
+import "../comment-B9cUud8H.mjs";
 import { t as OptionsRepository } from "../options-BlmBHTvX.mjs";
-import "../context-DtSFYFuS.mjs";
-import "../menus-BpfevlJD.mjs";
-import "../redirect-Ch3E98qZ.mjs";
+import { r as createSiteInfo } from "../context-DOurRIrb.mjs";
+import "../menus-BMGzWyWH.mjs";
+import "../redirect-BoUac4NT.mjs";
 import { i as setRequestCacheEntry, r as requestCached } from "../request-cache-BSUptuJR.mjs";
 import "../byline-registry-BCuOp4UF.mjs";
 import { n as initWithLock, t as createInitLock } from "../init-lock-DJkX6Hto.mjs";
-import "../field-defs-cache-BVrNCgSj.mjs";
-import "../byline-BWb5H-65.mjs";
-import "../relation-Ba68Tm4Z.mjs";
+import "../field-defs-cache-KfNJ_qLQ.mjs";
+import "../byline-BTOxUlFF.mjs";
+import "../relation-Du0r04E0.mjs";
 import { n as normalizeMediaValue } from "../normalize-C-SHXmra.mjs";
 import "../enrich-CFJJgxs_.mjs";
-import "../seo-BLm6SXzS.mjs";
-import { t as FTSManager } from "../fts-manager-BD9s77qh.mjs";
-import "../resolve-Cd9dzclN.mjs";
+import "../seo-kJzVAmmu.mjs";
+import { t as FTSManager } from "../fts-manager-hyCU9OOp.mjs";
+import "../resolve-DFr4kq72.mjs";
 import { createRecorder, flushRecorder, isInstrumentationEnabled, kyselyLogOption } from "../database/instrumentation.mjs";
-import { a as getDb } from "../loader-Rb8QlGZp.mjs";
-import { a as getTaxonomyDefs, o as getTaxonomyTerms } from "../taxonomies-pUkuD6nj.mjs";
-import { $ as handleContentGet, B as handleMediaUpdate, G as handleContentAuthors, H as handleRevisionList, I as handleMediaCreate, J as handleContentCountTrashed, K as handleContentCompare, L as handleMediaDelete, Q as handleContentDuplicate, R as handleMediaGet, S as PluginStateRepository, U as handleRevisionRestore, V as handleRevisionGet, X as handleContentDelete, Y as handleContentCreate, Z as handleContentDiscardDraft, _ as loadBundleFromR2, at as handleContentRestore, ct as handleContentUnpublish, dt as validateRev, et as handleContentGetIncludingTrashed, it as handleContentPublish, lt as handleContentUnschedule, nt as handleContentListTrashed, ot as handleContentSchedule, q as handleContentCountScheduled, rt as handleContentPermanentDelete, s as normalizeRegistryConfig, st as handleContentTranslations, tt as handleContentList, ut as handleContentUpdate, z as handleMediaList } from "../api-DVbHNApo.mjs";
-import "../dashboard-xo_gPs_D.mjs";
+import { a as getDb } from "../loader-D4rigvjR.mjs";
+import { a as getTaxonomyDefs, o as getTaxonomyTerms } from "../taxonomies-HI9fnTdp.mjs";
+import { $ as handleContentDiscardDraft, B as handleMediaGet, G as handleRevisionRestore, H as handleMediaUpdate, J as handleContentCompare, Q as handleContentDelete, R as handleMediaCreate, U as handleRevisionGet, V as handleMediaList, W as handleRevisionList, X as handleContentCountTrashed, Y as handleContentCountScheduled, Z as handleContentCreate, _ as loadBundleFromR2, at as handleContentPermanentDelete, ct as handleContentSchedule, dt as handleContentUnschedule, et as handleContentDuplicate, ft as handleContentUpdate, it as handleContentListTrashed, lt as handleContentTranslations, nt as handleContentGetIncludingTrashed, ot as handleContentPublish, pt as validateRev, q as handleContentAuthors, rt as handleContentList, s as normalizeRegistryConfig, st as handleContentRestore, tt as handleContentGet, ut as handleContentUnpublish, z as handleMediaDelete } from "../api-EibxGP-V.mjs";
+import "../dashboard-CBm4zhc3.mjs";
 import { n as hashString } from "../hash-DFFrkivP.mjs";
-import { a as findNonTranslatableSiblingContentIds, c as refreshContentMediaUsageAfterWrite, o as markContentMediaUsageCollectionStale, r as deleteContentMediaUsage } from "../content-refresh-BkkApzeS.mjs";
-import "../media-usage-B__v9NMm.mjs";
-import "../error-CfJMLSkd.mjs";
-import { n as SchemaRegistry } from "../registry-CyIXPi4E.mjs";
-import "../query-BxT95opY.mjs";
-import "../zod-generator-CrfV79De.mjs";
-import "../schema-DwjufZ1S.mjs";
-import "../seo-BjrbXAd_.mjs";
-import "../sections-DTKzgoiS.mjs";
-import { r as singleFlightCached, t as createSingleFlightCache } from "../single-flight-cache-DEtW-OEG.mjs";
-import { i as getSiteSettings, o as invalidateSiteSettingsCache } from "../settings-BuQYvLfy.mjs";
-import "../settings-CmS3TwXf.mjs";
-import "../taxonomies-ClS4RKaZ.mjs";
-import { r as normalizeManifestRoute } from "../manifest-schema-DeGNma2O.mjs";
-import "../types-DeCZBZxn.mjs";
-import "../ssrf-TrKYJAy0.mjs";
-import "../parse-GLksnn-B.mjs";
-import "../redirects-CeD7K7EX.mjs";
-import "../relations-BmBmX4Eb.mjs";
-import "../status-D3Gy1Zc6.mjs";
-import { a as invalidateUrlPatternCache } from "../query-ZzvXyxWq.mjs";
-import "../import-2jHtLzsO.mjs";
-import { t as getTrustedProxyHeaders } from "../trusted-proxy-CSgZVESw.mjs";
-import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-DCwktC5P.mjs";
-import "../ssrf-B5DOv5E5.mjs";
-import { n as CronExecutor } from "../cron-YFJ7uNVA.mjs";
-import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-CjkQc7oY.mjs";
-import "../utils-Cz8PVrl4.mjs";
-import "../tokens-BV6fgl5A.mjs";
-import "../preview-Rloa09Wp.mjs";
-import "../hreflang-pAWUiPd_.mjs";
-import "../comment-reaction-DgcpziXI.mjs";
-import "../bylines-CHojDMpj.mjs";
-import { n as getWidgetAreas } from "../widgets-B_X6_UXJ.mjs";
-import "../apply-D23iUV4q.mjs";
-import "../load-DgoWMdRX.mjs";
-import "../search-Cl875CVE.mjs";
+import { a as findNonTranslatableSiblingContentIds, c as refreshContentMediaUsageAfterWrite, o as markContentMediaUsageCollectionStale, r as deleteContentMediaUsage } from "../content-refresh-CPMSauD3.mjs";
+import "../media-usage-DPQ3K4xB.mjs";
+import { n as SchemaRegistry } from "../registry-y21kjhfG.mjs";
+import "../query-DdFGHzQF.mjs";
+import "../zod-generator-CwkHWz4f.mjs";
+import "../schema-BH8P8vaC.mjs";
+import "../seo-C3GDfT0V.mjs";
+import { t as PluginStateRepository } from "../state-xxv6ZTMv.mjs";
+import "../sections-CzVBAKjw.mjs";
+import { r as singleFlightCached, t as createSingleFlightCache } from "../single-flight-cache-C2exrGAi.mjs";
+import { i as getSiteSettings, o as invalidateSiteSettingsCache } from "../settings-C2PaBS49.mjs";
+import "../settings-Dtc0DU31.mjs";
+import "../taxonomies-rMeBzOjX.mjs";
+import { r as normalizeManifestRoute } from "../manifest-schema-bCq54i7F.mjs";
+import "../types-CK0LxPUQ.mjs";
+import "../ssrf-CviKqWmq.mjs";
+import "../error-DJ98TRbQ.mjs";
+import "../parse-53zyxlpv.mjs";
+import "../media-BJ6SRY3g.mjs";
+import "../redirects-D457qwt0.mjs";
+import "../relations-CZMpBqEd.mjs";
+import "../status-COfycGIU.mjs";
+import { a as invalidateUrlPatternCache } from "../query-BbJQ-dGg.mjs";
+import "../import-oDYCgNYQ.mjs";
+import { t as getTrustedProxyHeaders } from "../trusted-proxy-CwjQj0YG.mjs";
+import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-DzXYYI-n.mjs";
+import "../ssrf-BB__xfNM.mjs";
+import { n as CronExecutor } from "../cron-BlKIMD_e.mjs";
+import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-C-9Ng8DM.mjs";
+import "../utils-BbUgmeZG.mjs";
+import "../tokens-DVltpO2D.mjs";
+import "../preview-D4Jnbfx7.mjs";
+import "../hreflang-CbYeCzl9.mjs";
+import "../comment-reaction-VUXO981F.mjs";
+import "../bylines-FyZu6TbJ.mjs";
+import { n as getWidgetAreas } from "../widgets-5fipNkMT.mjs";
+import "../apply-fGHCAwWN.mjs";
+import "../load-Dg5gtWma.mjs";
+import "../search-D-Yhpmvs.mjs";
 import "../index.mjs";
-import { n as VERSION, t as COMMIT } from "../version-BlIJvNAZ.mjs";
-import { t as getAuthMode } from "../mode-BVnhGZ2o.mjs";
-import { t as cleanupExpiredChallenges } from "../challenge-store-B426wQ6O.mjs";
-import { a as validateEncryptionKeyAtStartup } from "../secrets-CO_bEmII.mjs";
-import { t as resolveSessionUser } from "../session-user-DoSs6YM8.mjs";
+import { n as VERSION, t as COMMIT } from "../version-Ci6bw6YK.mjs";
+import { t as getAuthMode } from "../mode-fiXRMfeA.mjs";
+import "../snapshot-BdpUJKD-.mjs";
+import { u as maybeRunScheduledBackup } from "../backup-Qr9PaGUo.mjs";
+import { t as cleanupExpiredChallenges } from "../challenge-store-BFzgFRog.mjs";
+import { a as validateEncryptionKeyAtStartup } from "../secrets-CQ-69kF9.mjs";
+import { t as resolveSessionUser } from "../session-user-DbHqKDKe.mjs";
 import { Kysely, sql } from "kysely";
+import { z } from "zod";
+import { Permissions } from "@emdash-cms/auth";
 import { defineMiddleware } from "astro:middleware";
 import virtualConfig from "virtual:emdash/config";
 import { createCoalescingDialect, createDialect, createRequestScopedDb } from "virtual:emdash/dialect";
@@ -90,6 +96,62 @@ import { createScheduler } from "virtual:emdash/scheduler";
 import { createStorage } from "virtual:emdash/storage";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 
+//#region src/i18n/repair-locale-casing.ts
+/** Rewrite stored locales to the exact casing used by the site configuration. */
+async function repairLocaleCasing(db, configuredLocales) {
+	const tableNames = await listTablesLike(db, "ec_%");
+	for (const tableName of tableNames) {
+		const table = sql.ref(tableName);
+		const slug = tableName.slice(3);
+		for (const locale of configuredLocales) {
+			await sql`
+				UPDATE ${table} AS target
+				SET locale = ${locale}
+				WHERE lower(target.locale) = lower(${locale})
+					AND target.locale != ${locale}
+					AND NOT EXISTS (
+						SELECT 1
+						FROM ${table} AS existing
+						WHERE existing.slug = target.slug AND existing.locale = ${locale}
+					)
+					AND target.id = (
+						SELECT MIN(candidate.id)
+						FROM ${table} AS candidate
+						WHERE candidate.slug = target.slug
+							AND lower(candidate.locale) = lower(${locale})
+							AND candidate.locale != ${locale}
+					)
+			`.execute(db);
+			await sql`
+				UPDATE content_taxonomies AS pivot
+				SET locale = ${locale}
+				WHERE pivot.collection = ${slug}
+					AND lower(pivot.locale) = lower(${locale})
+					AND pivot.locale != ${locale}
+					AND EXISTS (
+						SELECT 1
+						FROM ${table} AS content
+						WHERE content.id = pivot.entry_id AND content.locale = ${locale}
+					)
+			`.execute(db);
+		}
+	}
+}
+
+//#endregion
+//#region src/plugins/sandbox/runner-options.ts
+/**
+* Build platform sandbox options with the same normalized site context used
+* by trusted plugin hooks and routes.
+*/
+function createSandboxRunnerOptions(options, siteInfo) {
+	return {
+		...options,
+		siteInfo: createSiteInfo(siteInfo ?? {})
+	};
+}
+
+//#endregion
 //#region src/cleanup.ts
 /**
 * System cleanup
@@ -276,7 +338,20 @@ async function publishDueContent(db, options = {}) {
 
 //#endregion
 //#region src/emdash-runtime.ts
+/**
+* EmDashRuntime - Core runtime for EmDash CMS
+*
+* Manages database, storage, plugins (trusted + sandboxed), hooks, and
+* provides handlers for content/media operations.
+*
+* Created once per worker lifetime, cached and reused across requests.
+*/
 const LEADING_SLASH_PATTERN = /^\//;
+const LOCALE_CASING_REPAIR_OPTION = "emdash:repair_locale_casing";
+function getLocaleCasingRepairVersion(locales) {
+	if (locales.length === 0) return null;
+	return `1:${locales.toSorted().join(",")}`;
+}
 /**
 * Parse a JSON column expected to contain an array of strings.
 *
@@ -578,6 +653,7 @@ var EmDashRuntime = class EmDashRuntime {
 		} catch (error) {
 			console.error("[cleanup] System cleanup failed:", error);
 		}
+		await maybeRunScheduledBackup(this.db, this.storage ?? void 0);
 		return { published };
 	}
 	/**
@@ -618,10 +694,7 @@ var EmDashRuntime = class EmDashRuntime {
 		const newPipeline = createHookPipeline(this.allPipelinePlugins.filter((p) => this.enabledPlugins.has(p.id)), this.pipelineFactoryOptions);
 		await EmDashRuntime.resolveExclusiveHooks(newPipeline, this.db, this.runtimeDeps);
 		if (this.email) newPipeline.setContextFactory({ emailPipeline: this.email });
-		if (this.cronScheduler) {
-			const scheduler = this.cronScheduler;
-			newPipeline.setContextFactory({ cronReschedule: () => scheduler.reschedule() });
-		}
+		newPipeline.setContextFactory({ cronReschedule: () => this.cronScheduler?.reschedule() });
 		if (this.email) this.email.setPipeline(newPipeline);
 		this.pipelineRef.current = newPipeline;
 		this._hooks = newPipeline;
@@ -723,13 +796,14 @@ var EmDashRuntime = class EmDashRuntime {
 				marketplaceManifestCache.set(pluginId, {
 					id: bundle.manifest.id,
 					version: bundle.manifest.version,
-					admin: bundle.manifest.admin
+					admin: bundle.manifest.admin,
+					mcp: bundle.manifest.mcp
 				});
 				if (bundle.manifest.routes.length > 0) {
 					const routeMetaMap = /* @__PURE__ */ new Map();
 					for (const entry of bundle.manifest.routes) {
 						const normalized = normalizeManifestRoute(entry);
-						routeMetaMap.set(normalized.name, { public: normalized.public === true });
+						routeMetaMap.set(normalized.name, buildRouteMeta(normalized));
 					}
 					sandboxedRouteMetaCache.set(pluginId, routeMetaMap);
 				} else sandboxedRouteMetaCache.delete(pluginId);
@@ -807,13 +881,14 @@ var EmDashRuntime = class EmDashRuntime {
 				marketplaceManifestCache.set(pluginId, {
 					id: bundle.manifest.id,
 					version: bundle.manifest.version,
-					admin: bundle.manifest.admin
+					admin: bundle.manifest.admin,
+					mcp: bundle.manifest.mcp
 				});
 				if (bundle.manifest.routes.length > 0) {
 					const routeMetaMap = /* @__PURE__ */ new Map();
 					for (const entry of bundle.manifest.routes) {
 						const normalized = normalizeManifestRoute(entry);
-						routeMetaMap.set(normalized.name, { public: normalized.public === true });
+						routeMetaMap.set(normalized.name, buildRouteMeta(normalized));
 					}
 					sandboxedRouteMetaCache.set(pluginId, routeMetaMap);
 				} else sandboxedRouteMetaCache.delete(pluginId);
@@ -834,7 +909,8 @@ var EmDashRuntime = class EmDashRuntime {
 							id: w.id,
 							title: w.title,
 							size: w.size === "full" || w.size === "half" || w.size === "third" ? w.size : void 0
-						}))
+						})),
+						settingsSchema: bundle.manifest.admin?.settingsSchema
 					});
 					newPlugins.push(adapted);
 					this.allPipelinePlugins.push(adapted);
@@ -873,6 +949,9 @@ var EmDashRuntime = class EmDashRuntime {
 		await phase("rt.secrets", "Validate encryption key", () => validateEncryptionKeyAtStartup());
 		const storage = EmDashRuntime.getStorage(deps);
 		let pluginStates = /* @__PURE__ */ new Map();
+		const configuredLocales = virtualConfig?.i18n?.locales ?? getI18nConfig()?.locales ?? [];
+		const localeCasingRepairVersion = getLocaleCasingRepairVersion(configuredLocales);
+		let storedLocaleCasingRepairVersion;
 		let siteInfo;
 		let seedGate = {
 			collectionCount: 1,
@@ -899,12 +978,15 @@ var EmDashRuntime = class EmDashRuntime {
 			const siteOpts = await optionsRepo.getMany([
 				"emdash:site_title",
 				"emdash:site_url",
-				"emdash:locale"
+				"emdash:locale",
+				LOCALE_CASING_REPAIR_OPTION
 			]);
+			storedLocaleCasingRepairVersion = siteOpts.get(LOCALE_CASING_REPAIR_OPTION);
 			return {
 				siteName: siteOpts.get("emdash:site_title") ?? void 0,
 				siteUrl: siteOpts.get("emdash:site_url") ?? void 0,
-				locale: siteOpts.get("emdash:locale") ?? void 0
+				locale: siteOpts.get("emdash:locale") ?? void 0,
+				trailingSlash: virtualConfig?.trailingSlash
 			};
 		};
 		const coldStartReads = [phase("rt.plugins", "Plugin states", async () => {
@@ -934,14 +1016,18 @@ var EmDashRuntime = class EmDashRuntime {
 			} catch {}
 		}));
 		await Promise.all(coldStartReads);
+		if (localeCasingRepairVersion && (configuredLocales.some((locale) => locale.includes("-") || locale !== locale.toLowerCase()) || storedLocaleCasingRepairVersion !== void 0) && storedLocaleCasingRepairVersion !== localeCasingRepairVersion) await phase("rt.locale", "Repair locale casing", async () => {
+			await repairLocaleCasing(db, configuredLocales);
+			await new OptionsRepository(db).set(LOCALE_CASING_REPAIR_OPTION, localeCasingRepairVersion);
+		});
 		if (seedGate.collectionCount === 0 && !seedGate.setupDone) {
 			const seedKey = deps.config.database?.entrypoint ?? "default";
 			const seedHolder = getSeedHolder();
 			try {
 				await initWithLock(seedHolder.lock, () => seedHolder.done.has(seedKey) ? true : void 0, async () => {
-					const { applySeed } = await import("../apply-D23iUV4q.mjs").then((n) => n.n);
-					const { loadSeed } = await import("../load-DgoWMdRX.mjs").then((n) => n.r);
-					const { validateSeed } = await import("../validate-C3CpWlNt.mjs").then((n) => n.n);
+					const { applySeed } = await import("../apply-fGHCAwWN.mjs").then((n) => n.n);
+					const { loadSeed } = await import("../load-Dg5gtWma.mjs").then((n) => n.r);
+					const { validateSeed } = await import("../validate-CDT1jl6_.mjs").then((n) => n.n);
 					const seed = await loadSeed();
 					if (validateSeed(seed).valid) {
 						await applySeed(db, seed, { onConflict: "skip" });
@@ -1026,10 +1112,10 @@ var EmDashRuntime = class EmDashRuntime {
 			siteInfo
 		};
 		const pipeline = createHookPipeline(enabledPluginList, pipelineFactoryOptions);
-		const sandboxedPlugins = await phase("rt.sandbox", "Sandboxed plugins", () => EmDashRuntime.loadSandboxedPlugins(deps, db, storage));
+		const sandboxedPlugins = await phase("rt.sandbox", "Sandboxed plugins", () => EmDashRuntime.loadSandboxedPlugins(deps, db, storage, siteInfo));
 		const installedTierPhases = [];
-		if (deps.config.marketplace && storage && !deps.sandboxBypassed) installedTierPhases.push(phase("rt.market", "Marketplace plugins", () => EmDashRuntime.loadInstalledSandboxedPlugins("marketplace", db, storage, deps, sandboxedPlugins)));
-		if (deps.config.experimental?.registry && storage) installedTierPhases.push(phase("rt.registry", "Registry plugins", () => EmDashRuntime.loadInstalledSandboxedPlugins("registry", db, storage, deps, sandboxedPlugins)));
+		if (deps.config.marketplace && storage && !deps.sandboxBypassed) installedTierPhases.push(phase("rt.market", "Marketplace plugins", () => EmDashRuntime.loadInstalledSandboxedPlugins("marketplace", db, storage, deps, sandboxedPlugins, siteInfo)));
+		if (deps.config.experimental?.registry && storage) installedTierPhases.push(phase("rt.registry", "Registry plugins", () => EmDashRuntime.loadInstalledSandboxedPlugins("registry", db, storage, deps, sandboxedPlugins, siteInfo)));
 		if (installedTierPhases.length > 0) await Promise.all(installedTierPhases);
 		const mediaProviders = /* @__PURE__ */ new Map();
 		const mediaProviderEntries = deps.mediaProviderEntries ?? [];
@@ -1059,6 +1145,7 @@ var EmDashRuntime = class EmDashRuntime {
 		await phase("rt.cron", "Cron init (recovery deferred post-response)", async () => {
 			try {
 				cronExecutor = new CronExecutor(resolveDb, invokeCronHook);
+				pipeline.setContextFactory({ cronReschedule: () => cronScheduler?.reschedule() });
 				const executorForRecovery = cronExecutor;
 				after(async () => {
 					try {
@@ -1083,8 +1170,8 @@ var EmDashRuntime = class EmDashRuntime {
 						} catch (error) {
 							console.error("[cleanup] System cleanup failed:", error);
 						}
+						await maybeRunScheduledBackup(db, storage ?? void 0);
 					});
-					pipeline.setContextFactory({ cronReschedule: () => cronScheduler?.reschedule() });
 					scheduler.start();
 				}
 			} catch (error) {
@@ -1225,6 +1312,7 @@ var EmDashRuntime = class EmDashRuntime {
 				storage: entry.storage,
 				adminPages,
 				adminWidgets,
+				settingsSchema: entry.settingsSchema,
 				portableTextBlocks: entry.portableTextBlocks,
 				fieldWidgets: entry.fieldWidgets
 			});
@@ -1238,10 +1326,10 @@ var EmDashRuntime = class EmDashRuntime {
 	/**
 	* Load sandboxed plugins using SandboxRunner
 	*/
-	static async loadSandboxedPlugins(deps, db, mediaStorage) {
+	static async loadSandboxedPlugins(deps, db, mediaStorage, siteInfo) {
 		if (sandboxedPluginCache.size > 0) return sandboxedPluginCache;
 		if (!deps.sandboxEnabled) return sandboxedPluginCache;
-		if (!sandboxRunner && deps.createSandboxRunner) sandboxRunner = deps.createSandboxRunner({
+		if (!sandboxRunner && deps.createSandboxRunner) sandboxRunner = deps.createSandboxRunner(createSandboxRunnerOptions({
 			db,
 			mediaStorage: mediaStorage ? {
 				upload: (opts) => mediaStorage.upload({
@@ -1251,7 +1339,7 @@ var EmDashRuntime = class EmDashRuntime {
 				}),
 				delete: (key) => mediaStorage.delete(key)
 			} : void 0
-		});
+		}, siteInfo));
 		if (!sandboxRunner) return sandboxedPluginCache;
 		if (!sandboxRunner.isAvailable()) {
 			console.warn("EmDash: Plugin sandbox is configured but not available on this platform. Sandboxed plugins will not be loaded. If using @emdash-cms/sandbox-workerd/sandbox, ensure workerd is installed.");
@@ -1271,7 +1359,8 @@ var EmDashRuntime = class EmDashRuntime {
 					storage: entry.storage ?? {},
 					hooks: [],
 					routes: [],
-					admin: {}
+					admin: {},
+					mcp: entry.mcp
 				};
 				const plugin = await sandboxRunner.load(manifest, entry.code);
 				sandboxedPluginCache.set(pluginKey, plugin);
@@ -1296,8 +1385,8 @@ var EmDashRuntime = class EmDashRuntime {
 	* creation, before request traffic arrives; the sync method runs on
 	* demand after install / update / uninstall handlers.
 	*/
-	static async loadInstalledSandboxedPlugins(source, db, storage, deps, cache) {
-		if (!sandboxRunner && deps.createSandboxRunner) sandboxRunner = deps.createSandboxRunner({
+	static async loadInstalledSandboxedPlugins(source, db, storage, deps, cache, siteInfo) {
+		if (!sandboxRunner && deps.createSandboxRunner) sandboxRunner = deps.createSandboxRunner(createSandboxRunnerOptions({
 			db,
 			mediaStorage: {
 				upload: (opts) => storage.upload({
@@ -1307,7 +1396,7 @@ var EmDashRuntime = class EmDashRuntime {
 				}),
 				delete: (key) => storage.delete(key)
 			}
-		});
+		}, siteInfo));
 		if (deps.sandboxBypassed) return;
 		if (!sandboxRunner || !sandboxRunner.isAvailable()) return;
 		const keySet = source === "marketplace" ? marketplacePluginKeys : registryPluginKeys;
@@ -1331,13 +1420,14 @@ var EmDashRuntime = class EmDashRuntime {
 					marketplaceManifestCache.set(plugin.pluginId, {
 						id: bundle.manifest.id,
 						version: bundle.manifest.version,
-						admin: bundle.manifest.admin
+						admin: bundle.manifest.admin,
+						mcp: bundle.manifest.mcp
 					});
 					if (bundle.manifest.routes.length > 0) {
 						const routeMeta = /* @__PURE__ */ new Map();
 						for (const entry of bundle.manifest.routes) {
 							const normalized = normalizeManifestRoute(entry);
-							routeMeta.set(normalized.name, { public: normalized.public === true });
+							routeMeta.set(normalized.name, buildRouteMeta(normalized));
 						}
 						sandboxedRouteMetaCache.set(plugin.pluginId, routeMeta);
 					}
@@ -1380,13 +1470,14 @@ var EmDashRuntime = class EmDashRuntime {
 					marketplaceManifestCache.set(plugin.pluginId, {
 						id: bundle.manifest.id,
 						version: bundle.manifest.version,
-						admin: bundle.manifest.admin
+						admin: bundle.manifest.admin,
+						mcp: bundle.manifest.mcp
 					});
 					if (bundle.manifest.routes.length > 0) {
 						const routeMeta = /* @__PURE__ */ new Map();
 						for (const entry of bundle.manifest.routes) {
 							const normalized = normalizeManifestRoute(entry);
-							routeMeta.set(normalized.name, { public: normalized.public === true });
+							routeMeta.set(normalized.name, buildRouteMeta(normalized));
 						}
 						sandboxedRouteMetaCache.set(plugin.pluginId, routeMeta);
 					}
@@ -1403,7 +1494,8 @@ var EmDashRuntime = class EmDashRuntime {
 							id: w.id,
 							title: w.title,
 							size: w.size === "full" || w.size === "half" || w.size === "third" ? w.size : void 0
-						}))
+						})),
+						settingsSchema: bundle.manifest.admin?.settingsSchema
 					});
 					resolved.push(adapted);
 					console.log(`EmDash: Loaded marketplace plugin ${plugin.pluginId}@${version} in-process (sandbox bypassed)`);
@@ -1695,7 +1787,7 @@ var EmDashRuntime = class EmDashRuntime {
 		if (this.hooks.hasHooks("content:beforeSave")) processedData = (await this.hooks.runContentBeforeSave(body.data, collection, true)).content;
 		processedData = await this.runSandboxedBeforeSave(processedData, collection, true);
 		processedData = await this.normalizeMediaFields(collection, processedData);
-		const { validateContentData } = await import("../validation-DM2K_NJC.mjs");
+		const { validateContentData } = await import("../validation-DlD0E35W.mjs");
 		const validation = await validateContentData(this.db, collection, processedData, { partial: false });
 		if (!validation.ok) return {
 			success: false,
@@ -1712,7 +1804,7 @@ var EmDashRuntime = class EmDashRuntime {
 		return result;
 	}
 	async handleContentUpdate(collection, id, body) {
-		const { ContentRepository } = await import("../content-BO61Sx4j.mjs").then((n) => n.n);
+		const { ContentRepository } = await import("../content-BC43pICM.mjs").then((n) => n.n);
 		const repo = new ContentRepository(this.db);
 		const resolvedItem = await repo.findByIdOrSlug(collection, id, body.locale);
 		const resolvedId = resolvedItem?.id ?? id;
@@ -1739,7 +1831,7 @@ var EmDashRuntime = class EmDashRuntime {
 			if (this.hooks.hasHooks("content:beforeSave")) processedData = (await this.hooks.runContentBeforeSave(bodyWithoutRev.data, collection, false)).content;
 			processedData = await this.runSandboxedBeforeSave(processedData, collection, false);
 			processedData = await this.normalizeMediaFields(collection, processedData);
-			const { validateContentData } = await import("../validation-DM2K_NJC.mjs");
+			const { validateContentData } = await import("../validation-DlD0E35W.mjs");
 			const validation = await validateContentData(this.db, collection, processedData, { partial: true });
 			if (!validation.ok) return {
 				success: false,
@@ -1776,8 +1868,7 @@ var EmDashRuntime = class EmDashRuntime {
 						const tableName = `ec_${collection}`;
 						await sql`
 								UPDATE ${sql.ref(tableName)}
-								SET draft_revision_id = ${revision.id},
-									updated_at = ${(/* @__PURE__ */ new Date()).toISOString()}
+								SET draft_revision_id = ${revision.id}
 								WHERE id = ${resolvedId}
 							`.execute(this.db);
 						draftStorageChanged = true;
@@ -1977,8 +2068,7 @@ var EmDashRuntime = class EmDashRuntime {
 			const tableName = `ec_${revision.collection}`;
 			await sql`
 				UPDATE ${sql.ref(tableName)}
-				SET draft_revision_id = ${newDraft.id},
-					updated_at = ${(/* @__PURE__ */ new Date()).toISOString()}
+				SET draft_revision_id = ${newDraft.id}
 				WHERE id = ${revision.entryId}
 			`.execute(this.db);
 			revisionRepo.pruneOldRevisions(revision.collection, revision.entryId, 50).catch(() => {});
@@ -2024,7 +2114,7 @@ var EmDashRuntime = class EmDashRuntime {
 		if (trustedPlugin) {
 			const route = trustedPlugin.routes[routeKey];
 			if (!route) return null;
-			return { public: route.public === true };
+			return buildRouteMeta(route);
 		}
 		const meta = sandboxedRouteMetaCache.get(pluginId);
 		if (meta) {
@@ -2040,6 +2130,17 @@ var EmDashRuntime = class EmDashRuntime {
 		if (this.findSandboxedPlugin(pluginId)) return { public: false };
 		return null;
 	}
+	/**
+	* Resolve the settings schema for a runtime-installed (marketplace or
+	* registry) plugin from its cached manifest. Returns `{}` for a known
+	* plugin without a schema and `null` for unknown plugins, matching the
+	* contract of `getPluginSettingsSchema` for build-time plugins.
+	*/
+	getRuntimePluginSettingsSchema(pluginId) {
+		const meta = marketplaceManifestCache.get(pluginId);
+		if (!meta) return null;
+		return meta.admin?.settingsSchema ?? {};
+	}
 	async handlePluginApiRoute(pluginId, _method, path, request) {
 		if (!this.isPluginEnabled(pluginId)) return {
 			success: false,
@@ -2051,9 +2152,9 @@ var EmDashRuntime = class EmDashRuntime {
 		const trustedPlugin = this.configuredPlugins.find((p) => p.id === pluginId);
 		if (trustedPlugin && this.enabledPlugins.has(trustedPlugin.id)) {
 			const routeRegistry = new PluginRouteRegistry({
-				db: this.db,
-				storage: this.storage ?? void 0,
+				...this.pipelineFactoryOptions,
 				emailPipeline: this.email ?? void 0,
+				cronReschedule: () => this.cronScheduler?.reschedule(),
 				trustedProxyHeaders: getTrustedProxyHeaders(this.config)
 			});
 			routeRegistry.register(trustedPlugin);
@@ -2077,6 +2178,116 @@ var EmDashRuntime = class EmDashRuntime {
 			}
 		};
 	}
+	async getPluginMcpTools(pluginId) {
+		const tools = [];
+		const seen = /* @__PURE__ */ new Set();
+		for (const plugin of this.configuredPlugins) {
+			if (pluginId && plugin.id !== pluginId) continue;
+			for (const [name, tool] of Object.entries(plugin.mcp?.tools ?? {})) {
+				const route = plugin.routes[tool.route];
+				if (!route || route.public || !route.permission || !(route.permission in Permissions)) continue;
+				const key = `${plugin.id}__${name}`;
+				if (seen.has(key)) continue;
+				seen.add(key);
+				tools.push({
+					pluginId: plugin.id,
+					name,
+					description: tool.description,
+					route: tool.route,
+					permission: route.permission,
+					destructive: tool.destructive ?? false,
+					inputSchema: tool.input,
+					outputSchema: tool.output
+				});
+			}
+		}
+		const addManifestTools = (id, mcp) => {
+			if (pluginId && id !== pluginId) return;
+			for (const tool of mcp?.tools ?? []) {
+				const key = `${id}__${tool.name}`;
+				const routeMeta = this.getPluginRouteMeta(id, tool.route);
+				if (seen.has(key) || !routeMeta || routeMeta.public || routeMeta.permission !== tool.permission || !(tool.permission in Permissions)) continue;
+				seen.add(key);
+				tools.push({
+					pluginId: id,
+					name: tool.name,
+					description: tool.description,
+					route: tool.route,
+					permission: tool.permission,
+					destructive: tool.destructive,
+					inputSchema: z.fromJSONSchema({ ...tool.inputSchema }),
+					outputSchema: tool.outputSchema ? z.fromJSONSchema({ ...tool.outputSchema }) : void 0
+				});
+			}
+		};
+		for (const entry of this.sandboxedPluginEntries) addManifestTools(entry.id, entry.mcp);
+		for (const [id, manifest] of marketplaceManifestCache) addManifestTools(id, manifest.mcp);
+		return tools;
+	}
+	async getEnabledPluginMcpTools() {
+		const [tools, states] = await Promise.all([this.getPluginMcpTools(), new PluginStateRepository(this.db).getAll()]);
+		const stateByPlugin = new Map(states.map((state) => [state.pluginId, state]));
+		return tools.filter((tool) => {
+			const state = stateByPlugin.get(tool.pluginId);
+			if (!state?.mcpToolsEnabled || state.status !== "active" || !this.isPluginEnabled(tool.pluginId)) return false;
+			return state.mcpToolsConsent === this.serializePluginMcpConsent(tools, tool.pluginId);
+		});
+	}
+	serializePluginMcpConsent(tools, pluginId) {
+		return JSON.stringify(tools.filter((tool) => tool.pluginId === pluginId).map((tool) => ({
+			name: tool.name,
+			description: tool.description,
+			route: tool.route,
+			permission: tool.permission,
+			destructive: tool.destructive,
+			inputSchema: z.toJSONSchema(tool.inputSchema, { target: "draft-7" }),
+			...tool.outputSchema ? { outputSchema: z.toJSONSchema(tool.outputSchema, { target: "draft-7" }) } : {}
+		})).toSorted((a, b) => a.name.localeCompare(b.name)));
+	}
+	async handlePluginMcpTool(pluginId, toolName, route, input, actorId, request) {
+		const requestMeta = extractRequestMeta(request, getTrustedProxyHeaders(this.config));
+		const audit = new AuditRepository(this.db);
+		const headers = new Headers(request.headers);
+		headers.delete("content-length");
+		headers.delete("content-encoding");
+		const internalRequest = new Request(request.url, {
+			method: "POST",
+			headers,
+			body: JSON.stringify(input)
+		});
+		const result = await this.handlePluginApiRoute(pluginId, "POST", route, internalRequest);
+		await audit.log({
+			actorId,
+			actorIp: requestMeta.ip ?? void 0,
+			action: "plugin_tool_invoke",
+			resourceType: "plugin_mcp_tool",
+			resourceId: `${pluginId}__${toolName}`,
+			details: {
+				pluginId,
+				tool: toolName,
+				route
+			},
+			status: result.success ? "success" : "failure"
+		});
+		return result;
+	}
+	async handlePluginMcpDenied(pluginId, toolName, route, actorId, request, reason) {
+		const requestMeta = extractRequestMeta(request, getTrustedProxyHeaders(this.config));
+		await new AuditRepository(this.db).log({
+			actorId,
+			actorIp: requestMeta.ip ?? void 0,
+			action: "plugin_tool_invoke",
+			resourceType: "plugin_mcp_tool",
+			resourceId: `${pluginId}__${toolName}`,
+			details: {
+				pluginId,
+				tool: toolName,
+				route,
+				reason
+			},
+			status: "denied"
+		});
+	}
 	findSandboxedPlugin(pluginId) {
 		for (const [key, plugin] of this.sandboxedPlugins) if (key.startsWith(pluginId + ":")) return plugin;
 	}
@@ -2170,16 +2381,30 @@ var EmDashRuntime = class EmDashRuntime {
 		});
 	}
 	runAfterDeleteHooks(id, collection, permanent) {
-		if (this.hooks.hasHooks("content:afterDelete")) this.hooks.runContentAfterDelete(id, collection, permanent).catch((err) => console.error("EmDash afterDelete hook error:", err));
-		for (const [pluginKey, plugin] of this.sandboxedPlugins) {
-			const [pluginId] = pluginKey.split(":");
-			if (!pluginId || !this.isPluginEnabled(pluginId)) continue;
-			plugin.invokeHook("content:afterDelete", {
-				id,
-				collection,
-				permanent
-			}).catch((err) => console.error(`EmDash: Sandboxed plugin ${pluginId} afterDelete error:`, err));
-		}
+		after(async () => {
+			if (this.hooks.hasHooks("content:afterDelete")) try {
+				await this.hooks.runContentAfterDelete(id, collection, permanent);
+			} catch (err) {
+				console.error("EmDash afterDelete hook error:", err);
+			}
+			const tasks = [];
+			for (const [pluginKey, plugin] of this.sandboxedPlugins) {
+				const [pluginId] = pluginKey.split(":");
+				if (!pluginId || !this.isPluginEnabled(pluginId)) continue;
+				tasks.push((async () => {
+					try {
+						await plugin.invokeHook("content:afterDelete", {
+							id,
+							collection,
+							permanent
+						});
+					} catch (err) {
+						console.error(`EmDash: Sandboxed plugin ${pluginId} afterDelete error:`, err);
+					}
+				})());
+			}
+			await Promise.allSettled(tasks);
+		});
 	}
 	runDeferredContentHook(name, content, collection) {
 		const label = name.slice(8);
@@ -2759,6 +2984,63 @@ async function getRuntime(config, initTimings) {
 async function runScheduledTasks(options = {}) {
 	const config = getConfig();
 	if (!config) return { published: [] };
+	return runOutsideRequest(config, (runtime) => runtime.runScheduledTasks(options));
+}
+/**
+* Run a callback against the EmDash runtime outside any HTTP request — from a
+* Cloudflare Queue consumer, a `scheduled()` handler, or any other
+* platform-event handler that has no request and therefore no `locals.emdash`.
+*
+* Resolves the same cached runtime singleton request handlers use, so hooks,
+* plugin state, and storage all behave exactly as they do during a request.
+* A typical queue consumer finishes a job by calling back into a plugin route:
+*
+* ```ts
+* import { withEmDashRuntime } from "emdash/middleware";
+*
+* async function queue(batch: MessageBatch) {
+* 	await withEmDashRuntime(async (runtime) => {
+* 		for (const message of batch.messages) {
+* 			await runtime.handlePluginApiRoute(
+* 				"my-plugin",
+* 				"POST",
+* 				"/finishJob",
+* 				new Request("https://internal/", {
+* 					method: "POST",
+* 					body: JSON.stringify(message.body),
+* 				}),
+* 			);
+* 		}
+* 	});
+* }
+* ```
+*
+* Server-only and fully trusted: the callback gets the raw runtime with no
+* auth or CSRF checks, same trust level as plugin cron. Never expose it to
+* user input without validating that input yourself.
+*
+* Throws when EmDash is not configured (no `emdash()` Astro integration).
+*/
+async function withEmDashRuntime(run) {
+	const config = getConfig();
+	if (!config) throw new Error("EmDash is not configured — withEmDashRuntime() requires the emdash() Astro integration.");
+	return runOutsideRequest(config, async (runtime) => run(runtime));
+}
+/**
+* Shared plumbing for request-free entry points (`runScheduledTasks`,
+* `withEmDashRuntime`): resolve the runtime singleton, then run the callback
+* under an event-scoped db connection when the adapter needs one.
+*
+* Connection-backed adapters (e.g. Postgres over Hyperdrive) cannot reuse
+* the per-isolate singleton from a platform event: its socket belongs to the
+* request that opened it, and workerd rejects cross-event I/O. Open an
+* event-scoped connection and run the callback under it in ALS — the
+* runtime's db getter, the cron executor, and plugin contexts all resolve
+* the connection from ALS — then close it. Gated on the adapter being
+* connection-backed (it exposes `close()`); stateless adapters (D1, Node
+* SQLite) return null or a close-less scope and keep using the singleton.
+*/
+async function runOutsideRequest(config, fn) {
 	const runtime = await getRuntime(config);
 	const scoped = createRequestScopedDb$1({
 		config: config.database?.config,
@@ -2767,7 +3049,7 @@ async function runScheduledTasks(options = {}) {
 		cookies: NOOP_COOKIE_JAR,
 		url: CRON_EVENT_URL
 	});
-	if (!scoped?.close) return runtime.runScheduledTasks(options);
+	if (!scoped?.close) return fn(runtime);
 	const parent = getRequestContext();
 	const ctx = parent ? {
 		...parent,
@@ -2778,17 +3060,17 @@ async function runScheduledTasks(options = {}) {
 		metrics: createRequestMetrics(performance.now())
 	};
 	try {
-		return await runWithContext(ctx, () => runtime.runScheduledTasks(options));
+		return await runWithContext(ctx, () => fn(runtime));
 	} finally {
 		try {
 			scoped.commit();
 		} catch (error) {
-			console.error("[scheduled] request-scoped db commit failed:", error);
+			console.error("[emdash] event-scoped db commit failed:", error);
 		}
 		try {
 			scoped.close();
 		} catch (error) {
-			console.error("[scheduled] request-scoped db close failed:", error);
+			console.error("[emdash] event-scoped db close failed:", error);
 		}
 	}
 }
@@ -2912,7 +3194,7 @@ const onRequest = defineMiddleware(async (context, next) => {
 				if (!isSetupVerified() && !context.isPrerendered) {
 					const t0 = performance.now();
 					try {
-						const { getDb } = await import("../loader-Rb8QlGZp.mjs").then((n) => n.o);
+						const { getDb } = await import("../loader-D4rigvjR.mjs").then((n) => n.o);
 						await (await getDb()).selectFrom("_emdash_migrations").selectAll().limit(1).execute();
 						markSetupVerified();
 					} catch (error) {
@@ -3045,6 +3327,11 @@ const onRequest = defineMiddleware(async (context, next) => {
 					handlePluginApiRoute: runtime.handlePluginApiRoute.bind(runtime),
 					handlePublicPluginApiRoute: createPublicPluginApiRouteHandler(runtime),
 					getPluginRouteMeta: runtime.getPluginRouteMeta.bind(runtime),
+					getPluginMcpTools: runtime.getPluginMcpTools.bind(runtime),
+					getEnabledPluginMcpTools: runtime.getEnabledPluginMcpTools.bind(runtime),
+					serializePluginMcpConsent: runtime.serializePluginMcpConsent.bind(runtime),
+					handlePluginMcpTool: runtime.handlePluginMcpTool.bind(runtime),
+					handlePluginMcpDenied: runtime.handlePluginMcpDenied.bind(runtime),
 					getMediaProvider: runtime.getMediaProvider.bind(runtime),
 					getMediaProviderList: runtime.getMediaProviderList.bind(runtime),
 					collectPageMetadata: runtime.collectPageMetadata.bind(runtime),
@@ -3136,5 +3423,5 @@ const onRequest = defineMiddleware(async (context, next) => {
 });
 
 //#endregion
-export { onRequest as default, onRequest, runScheduledTasks };
+export { onRequest as default, onRequest, runScheduledTasks, withEmDashRuntime };
 //# sourceMappingURL=middleware.mjs.map