emdash 0.36.0 → 0.38.0

package/dist/astro/middleware.mjs

@@ -1,106 +1,109 @@
-import { r as MIGRATION_RACE_WAIT_MS, t as ConcurrentMigrationTimeoutError } from "../runner-77GOZCnH.mjs";
-import { c as isSqlite, u as listTablesLike } from "../dialect-helpers-BSbfaO3F.mjs";
+import { r as MIGRATION_RACE_WAIT_MS, t as ConcurrentMigrationTimeoutError } from "../runner-nEzvnogG.mjs";
+import { c as isSqlite, d as listTablesLike } from "../dialect-helpers-BcQvkHgn.mjs";
 import { r as getI18nConfig, s as setI18nConfig } from "../config-C3EBstHi.mjs";
-import { C as isContentSaveRejection, D as definePlugin, E as resolveExclusiveHooks, P as AuditRepository, T as createHookPipeline, _ as PluginRouteRegistry, b as toRouteCallerInfo, c as getSandboxRouteErrorDetails, t as getMenu, v as buildRouteMeta, x as EmailPipeline, y as parseRouteInput } from "../menus-CNg0QlDt.mjs";
+import { E as definePlugin, F as EmDashConfigurationError, P as AuditRepository, S as isContentSaveRejection, T as resolveExclusiveHooks, _ as buildRouteMeta, b as EmailPipeline, c as inspectSandboxHookResult, g as PluginRouteRegistry, t as getMenu, v as parseRouteInput, w as createHookPipeline, y as toRouteCallerInfo } from "../menus-D8mC4eaN.mjs";
 import { n as createDeferredTaskTracker, t as after } from "../after-CBU2vkoO.mjs";
 import { createRequestMetrics, getRequestContext, runWithContext } from "../request-context.mjs";
-import { o as getLastContentWriteAt } from "../object-cache-71tPfV4A.mjs";
-import { i as MAX_COLLECTION_LIST_COLUMNS } from "../types-75KIqzL9.mjs";
-import { i as RevisionRepository, t as ContentRepository } from "../content-CP-SeXNa.mjs";
+import { o as getLastContentWriteAt } from "../object-cache-DVKnyOfy.mjs";
+import { i as RevisionRepository, t as ContentRepository } from "../content-CNfMWuhY.mjs";
 import { n as isMissingTableError } from "../db-errors-Cl-sKYTm.mjs";
 import "../slugify-B994zkXC.mjs";
 import "../base64-CvLhUKQv.mjs";
 import { n as ContentMutationConflictError } from "../types-CQPWhPxE.mjs";
-import { t as MediaRepository } from "../media-D6SeAfBl.mjs";
-import "../user-CtYY0tp2.mjs";
-import "../taxonomy-8X09dLN5.mjs";
-import "../comment-DhvLEdhQ.mjs";
-import { t as OptionsRepository } from "../options-BHPeIbBd.mjs";
-import { r as createSiteInfo } from "../context-BR5hRWiK.mjs";
-import "../menus-CD7EFLwz.mjs";
-import "../redirect-CZkbozu9.mjs";
-import { i as setRequestCacheEntry, r as requestCached } from "../request-cache-DH9zdCOD.mjs";
-import "../byline-registry-Bpu9-MVs.mjs";
-import { n as initWithLock, t as createInitLock } from "../init-lock-DJkX6Hto.mjs";
-import "../field-defs-cache-Bh4q6oar.mjs";
-import "../byline-Cpnwrje1.mjs";
-import "../relation-A6wLF_DS.mjs";
-import { n as normalizeMediaValue } from "../normalize-CSxdKBVa.mjs";
-import "../dist-89xCrGqi.mjs";
-import "../enrich-BX0IDp4z.mjs";
-import "../seo-Cm-dtvgk.mjs";
-import { r as singleFlightCached, t as createSingleFlightCache } from "../single-flight-cache-BPuGPdcN.mjs";
-import "../cache-5VirJ2Cn.mjs";
-import { t as FTSManager } from "../fts-manager-BhOdW0bi.mjs";
-import "../resolve-DxUpTMmE.mjs";
+import { t as MediaRepository } from "../media-BBm8Wg3f.mjs";
+import "../user-DIsIXogT.mjs";
+import "../taxonomy-DP1vny4K.mjs";
+import "../comment-vxOzWbZN.mjs";
+import { t as OptionsRepository } from "../options-D1FBiAv1.mjs";
+import { r as createSiteInfo } from "../context-C9PB8vGd.mjs";
+import "../menus-UdwjHZJC.mjs";
+import "../resolve-Cy0aWSRj.mjs";
+import "../redirect-DId44BS1.mjs";
+import { i as setRequestCacheEntry, r as requestCached } from "../request-cache-DAZZmesc.mjs";
+import "../byline-registry-BxDGIO0I.mjs";
+import { n as initWithLock, t as createInitLock } from "../init-lock-CFNBe_iH.mjs";
+import "../field-defs-cache-Cf5FHK0M.mjs";
+import "../byline-Vdi85CsZ.mjs";
+import "../relation-DxgCHOBw.mjs";
+import { n as normalizeMediaValue } from "../normalize-4nkKGsuW.mjs";
+import "../dist-BAsh8dbf.mjs";
+import "../enrich-t2Xvjdqa.mjs";
+import "../entry-locks-BEcX7ET0.mjs";
+import "../seo-Bw68KxRc.mjs";
+import { r as singleFlightCached, t as createSingleFlightCache } from "../single-flight-cache-jaswDzmQ.mjs";
+import "../cache--7HKu5Xm.mjs";
+import { t as FTSManager } from "../fts-manager-iddym8cd.mjs";
 import { createRecorder, flushRecorder, isInstrumentationEnabled, kyselyLogOption } from "../database/instrumentation.mjs";
-import { s as getDb } from "../loader-ZsjE4paL.mjs";
-import { a as getTaxonomyDefs, o as getTaxonomyTerms } from "../taxonomies-kmyudNGP.mjs";
-import { A as handleContentPublish, C as handleContentDiscardDraft, D as handleContentList, E as handleContentGetIncludingTrashed, F as handleContentUnschedule, I as handleContentUpdate, L as validateRev, M as handleContentSchedule, N as handleContentTranslations, O as handleContentListTrashed, P as handleContentUnpublish, S as handleContentDelete, T as handleContentGet, _ as handleContentAuthors, b as handleContentCountTrashed, c as handleMediaCreate, d as handleMediaList, f as handleMediaUpdate, h as handleRevisionRestore, j as handleContentRestore, k as handleContentPermanentDelete, l as handleMediaDelete, m as handleRevisionList, p as handleRevisionGet, u as handleMediaGet, v as handleContentCompare, w as handleContentDuplicate, x as handleContentCreate, y as handleContentCountScheduled } from "../api-B0w3uBiG.mjs";
-import { n as recordSchedulerHeartbeatSafely } from "../dashboard-CkIV2rnQ.mjs";
-import { r as hashString } from "../hash-CTcngWvj.mjs";
-import "../media-folders-D-0CmRZj.mjs";
-import "../capture-triggers-CNW1q3HK.mjs";
-import { r as activateMediaUsageCapture } from "../activation-K0kGBWuJ.mjs";
-import { c as markContentMediaUsageCollectionStale, i as deleteContentMediaUsage, o as findNonTranslatableSiblingContentIds, u as refreshContentMediaUsageAfterWrite, y as MediaUsageRepository } from "../content-refresh-DLOfIhYc.mjs";
-import "../media-usage-work-C-fhM30c.mjs";
-import "../content-repair-BCxzy0r4.mjs";
-import "../collection-deletion-m_oi2c0N.mjs";
-import { s as processMediaUsageWorkAfterWrite } from "../media-usage-BTRJvS6V.mjs";
-import { t as ErrorCode } from "../errors-n2j49uNf.mjs";
-import "../media-usage-activation-Dx0kPV6b.mjs";
-import "../media-usage-work-DWb2XPMI.mjs";
-import { n as SchemaRegistry } from "../registry-Cx-jEJOS.mjs";
-import "../query-tZDEdtCN.mjs";
-import "../zod-generator-DylzusHh.mjs";
-import "../schema-BY-oVntF.mjs";
-import "../schema-Cw9kVK0I.mjs";
-import "../seo-BSiTIXzd.mjs";
-import { t as PluginStateRepository } from "../state-BJfU9Uzw.mjs";
-import "../sections-DTfjyf1z.mjs";
-import { i as getSiteSettings, o as invalidateSiteSettingsCache } from "../settings-BgN-0DT-.mjs";
-import "../settings-DjtkUo__.mjs";
-import "../taxonomies-CPGxo-bn.mjs";
-import { r as normalizeManifestRoute } from "../manifest-schema-CUYPfCEH.mjs";
-import { s as normalizeRegistryConfig, v as loadBundleFromR2, y as syncDeclaredStorageIndexes } from "../registry-BiO5WwPq.mjs";
-import "../types-D6OcIp2P.mjs";
-import "../ssrf-DqebVE34.mjs";
-import "../error-D9w94fjV.mjs";
-import "../parse-BRJg1kz8.mjs";
-import "../media-BjwNuLEu.mjs";
-import "../redirects-CRIM55KH.mjs";
-import "../relations-BTPM2saV.mjs";
-import "../status-DDu8HIQl.mjs";
-import { a as invalidateUrlPatternCache } from "../query-D18vTdha.mjs";
-import "../import-C4_O3KXU.mjs";
-import { t as getTrustedProxyHeaders } from "../trusted-proxy-fe6nEgR4.mjs";
-import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-DRp5ENd_.mjs";
-import "../ssrf-BPKzkm6O.mjs";
-import { n as CronExecutor } from "../cron-CWfWrWKG.mjs";
-import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-CEJgR_LB.mjs";
-import { n as assertMediaUsageActivationWriteAllowed } from "../media-usage-write-fence-BwoJVRDC.mjs";
-import "../utils-HztC73hq.mjs";
-import "../tokens-gTS-IVUp.mjs";
-import "../preview-dn2dUyM0.mjs";
-import "../hreflang-Huc6O5wa.mjs";
-import "../comment-reaction-CRuItEjt.mjs";
-import "../bylines-BSo9B9RX.mjs";
-import { n as getWidgetAreas } from "../widgets-CpmZd9Q-.mjs";
-import "../validate-Dd-IUjnZ.mjs";
-import "../apply-B_VMpJ2P.mjs";
-import "../load-Bo7fZAbg.mjs";
-import "../search-CfT3KxO5.mjs";
+import { s as getDb } from "../loader-WJi6GFRn.mjs";
+import { r as primeRegisteredCollections } from "../collection-slugs-cache-7lTmNzeA.mjs";
+import { a as getTaxonomyDefs, o as getTaxonomyTerms } from "../taxonomies-NcFDq5Gg.mjs";
+import { $ as handleContentSchedule, A as handleMediaList, B as handleContentCountScheduled, D as handleMediaCreate, F as handleRevisionRestore, G as handleContentDuplicate, H as handleContentCreate, I as buildManifestCollections, J as handleContentList, K as handleContentGet, M as handleMediaUpdate, N as handleRevisionGet, O as handleMediaDelete, P as handleRevisionList, Q as handleContentRestore, R as handleContentAuthors, U as handleContentDelete, V as handleContentCountTrashed, W as handleContentDiscardDraft, X as handleContentPermanentDelete, Y as handleContentListTrashed, Z as handleContentPublish, et as handleContentTranslations, it as validateRev, j as handleMediaReplaceMetadata, k as handleMediaGet, m as syncDeclaredStorageIndexes, nt as handleContentUnschedule, p as loadBundleFromR2, q as handleContentGetIncludingTrashed, rt as handleContentUpdate, tt as handleContentUnpublish, v as getSandboxRouteErrorDetails, z as handleContentCompare } from "../api-BvxJmnFY.mjs";
+import { n as recordSchedulerHeartbeatSafely } from "../dashboard-BNSvAN8A.mjs";
+import "../capture-triggers-CeAsC76Z.mjs";
+import { r as activateMediaUsageCapture } from "../activation-DyNTe_Tl.mjs";
+import "../collection-deletion-BCwaWTDw.mjs";
+import { c as markContentMediaUsageCollectionStale, i as deleteContentMediaUsage, o as findNonTranslatableSiblingContentIds, u as refreshContentMediaUsageAfterWrite, y as MediaUsageRepository } from "../content-refresh-GTMyi2Xy.mjs";
+import { n as SchemaRegistry } from "../registry-DTqaqxed.mjs";
+import { r as hashString } from "../hash-BRweX6jz.mjs";
+import "../media-folders-DASfX_DH.mjs";
+import "../media-usage-work-C5B1zT1c.mjs";
+import "../content-repair-CIMt5C0U.mjs";
+import { s as processMediaUsageWorkAfterWrite } from "../media-usage-C1EswMTq.mjs";
+import { t as ErrorCode } from "../errors-DvMdNrgf.mjs";
+import "../media-usage-activation-CrHNltlL.mjs";
+import "../media-usage-work-IkQx_Yz6.mjs";
+import "../query-gtXT03Wc.mjs";
+import "../zod-generator-CNRGdnBY.mjs";
+import "../schema-CRu38Pr5.mjs";
+import "../schema-DifxndJx.mjs";
+import "../seo-C4AmbsMU.mjs";
+import { t as PluginStateRepository } from "../state-1F6IOhdQ.mjs";
+import "../sections-3X52kmIR.mjs";
+import { i as getSiteSettings, s as invalidateSiteSettingsCache } from "../settings-DcMjREe5.mjs";
+import "../settings-AnEFYICn.mjs";
+import "../taxonomies-BOdxuZpV.mjs";
+import { r as normalizeManifestRoute } from "../manifest-schema-CILooI5J.mjs";
+import "../types-A2cN6a4a.mjs";
+import { t as EmDashStorageError } from "../types-ByG2coLw.mjs";
+import "../artifact-fetch-P2JXVwOq.mjs";
+import "../ssrf-gl4gFNhw.mjs";
+import { o as resolveManifestRegistryConfig } from "../config--eWjQJE5.mjs";
+import { t as apiError } from "../error-BDcFyoRt.mjs";
+import "../parse-WRg5C3NX.mjs";
+import "../media-C1EIZKh1.mjs";
+import "../entry-lock-DIYHAaSw.mjs";
+import "../relations-rOmbndUJ.mjs";
+import "../status-Cenfk_r5.mjs";
+import { a as invalidateUrlPatternCache } from "../query-DygOte9M.mjs";
+import "../import-D96g2otw.mjs";
+import { t as getTrustedProxyHeaders } from "../trusted-proxy-BTM6UxqD.mjs";
+import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-BgjUQLQ-.mjs";
+import "../ssrf-TQhaljuI.mjs";
+import { n as CronExecutor } from "../cron-DHAy9oyq.mjs";
+import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-DNup1Fku.mjs";
+import { n as assertMediaUsageActivationWriteAllowed } from "../media-usage-write-fence-B9anjOSg.mjs";
+import "../utils-BicP5Qbg.mjs";
+import "../tokens-CDk8ox9p.mjs";
+import "../preview-BxwsGgGp.mjs";
+import "../hreflang-DshnweTC.mjs";
+import "../comment-reaction-CDyvPQRj.mjs";
+import "../bylines-BX8QhcTk.mjs";
+import { r as getWidgetAreas } from "../widgets-RFVAxQl3.mjs";
+import "../validate-D8VPn4Hv.mjs";
+import "../apply-DLmM3R7f.mjs";
+import "../load-DPtY9cZo.mjs";
+import "../search-DEPFSBFq.mjs";
 import "../index.mjs";
-import { i as resolveRuntimeMigrationMode, n as enforceRuntimeMigrationPolicy, t as PendingMigrationsError } from "../policy-BVRganJQ.mjs";
-import { n as VERSION, t as COMMIT } from "../version-ri-sCyAp.mjs";
-import { t as getAuthMode } from "../mode-DaUM_MB2.mjs";
-import "../snapshot-DSB8P7Lm.mjs";
-import { u as maybeRunScheduledBackup } from "../backup-ChyHfIoX.mjs";
-import { t as cleanupExpiredChallenges } from "../challenge-store-D5pSY2S1.mjs";
-import { t as removeUploadAttempt } from "../upload-attempts-CNyGSepg.mjs";
-import { a as validateEncryptionKeyAtStartup } from "../secrets-BH2Qow1-.mjs";
+import { i as resolveRuntimeMigrationMode, n as enforceRuntimeMigrationPolicy, t as PendingMigrationsError } from "../policy-XCfb-IE9.mjs";
+import { n as VERSION, t as COMMIT } from "../version-CK67_SXX.mjs";
+import { t as getAuthMode } from "../mode-Dm4BHhRH.mjs";
+import "../snapshot-C4CtXntb.mjs";
+import { u as maybeRunScheduledBackup } from "../backup-oS8ft5Cm.mjs";
+import { t as cleanupExpiredChallenges } from "../challenge-store-BIOak-tp.mjs";
+import { t as removeUploadAttempt } from "../upload-attempts-C6S2y-lp.mjs";
+import { a as validateEncryptionKeyAtStartup } from "../secrets-CdfzLdoO.mjs";
 import { isRecord } from "../plugin-utils.mjs";
-import { t as resolveSessionUser } from "../session-user-CNAfvsdw.mjs";
+import { t as resolveSessionUser } from "../session-user-CbnMMwk6.mjs";
 import { Kysely, sql } from "kysely";
 import { ulid } from "ulidx";
 import { z } from "zod";
@@ -214,14 +217,15 @@ async function cleanupMediaUsage(db) {
 	let sweepComplete = false;
 	try {
 		if (canIssueStatement()) deletedWriteLeases = await repo.deleteExpiredGenerationWriteLeases(MEDIA_USAGE_CLEANUP_WRITE_LEASE_DELETE_LIMIT, cleanupLease(leaseToken), canIssueStatement);
-		if (canIssueStatement()) {
-			const cutoff = claim.scanBeforeAt;
-			const candidates = await repo.findMediaUsageCleanupCandidates({
-				cutoff,
-				cursor: claim.cursor,
-				limit: MEDIA_USAGE_CLEANUP_CANDIDATE_LIMIT,
-				cleanupLease: cleanupLease(leaseToken)
-			});
+		const cutoff = claim.scanBeforeAt;
+		const candidates = await repo.findMediaUsageCleanupCandidates({
+			cutoff,
+			cursor: claim.cursor,
+			limit: MEDIA_USAGE_CLEANUP_CANDIDATE_LIMIT,
+			cleanupLease: cleanupLease(leaseToken),
+			canIssueStatement
+		});
+		if (candidates) {
 			candidateRows = candidates.length;
 			scanHasMore = candidates.length === MEDIA_USAGE_CLEANUP_CANDIDATE_LIMIT;
 			const selected = selectCleanupCandidates(candidates, claim.claimedAt);
@@ -652,43 +656,14 @@ function isValidMetadataContribution(c) {
 		default: return false;
 	}
 }
-/**
-* Map schema field types to editor field kinds
-*/
-const FIELD_TYPE_TO_KIND = {
-	string: "string",
-	slug: "string",
-	url: "url",
-	text: "richText",
-	number: "number",
-	integer: "number",
-	boolean: "boolean",
-	datetime: "datetime",
-	select: "select",
-	multiSelect: "multiSelect",
-	portableText: "portableText",
-	image: "image",
-	file: "file",
-	reference: "reference",
-	json: "json",
-	repeater: "repeater"
-};
 const DRAFT_ONLY_UPDATE_KEYS = new Set([
 	"data",
 	"slug",
 	"locale",
-	"skipRevision"
+	"skipRevision",
+	"actor"
 ]);
 const MAX_DRAFT_STAGE_ATTEMPTS = 32;
-const LIST_COLUMN_FIELD_TYPES = new Set([
-	"string",
-	"number",
-	"integer",
-	"boolean",
-	"datetime",
-	"select",
-	"multiSelect"
-]);
 /**
 * A `ContentSaveRejectedError` carries a message the plugin wrote for the
 * editor; every other exception stays internal and is replaced by a generic
@@ -1335,7 +1310,8 @@ var EmDashRuntime = class EmDashRuntime {
 		})];
 		if (ownsConfiguredDb) coldStartReads.push(phase("rt.seedcheck", "Auto-seed gate", async () => {
 			try {
-				const [collectionCount, setupOption] = await Promise.all([readDb.selectFrom("_emdash_collections").select((eb) => eb.fn.countAll().as("count")).executeTakeFirstOrThrow(), readDb.selectFrom("options").select("value").where("name", "=", "emdash:setup_complete").executeTakeFirst()]);
+				const [collectionRows, setupOption] = await Promise.all([readDb.selectFrom("_emdash_collections").select("slug").execute(), readDb.selectFrom("options").select("value").where("name", "=", "emdash:setup_complete").executeTakeFirst()]);
+				primeRegisteredCollections(collectionRows.map((row) => row.slug));
 				const setupDone = (() => {
 					try {
 						return !!setupOption && JSON.parse(setupOption.value) === true;
@@ -1344,7 +1320,7 @@ var EmDashRuntime = class EmDashRuntime {
 					}
 				})();
 				seedGate = {
-					collectionCount: collectionCount.count,
+					collectionCount: collectionRows.length,
 					setupDone
 				};
 			} catch (error) {
@@ -1371,9 +1347,9 @@ var EmDashRuntime = class EmDashRuntime {
 			const seedHolder = getSeedHolder();
 			try {
 				await initWithLock(seedHolder.lock, () => seedHolder.done.has(seedKey) ? true : void 0, async () => {
-					const { applySeed } = await import("../apply-B_VMpJ2P.mjs").then((n) => n.n);
-					const { loadSeed } = await import("../load-Bo7fZAbg.mjs").then((n) => n.r);
-					const { validateSeed } = await import("../validate-Dd-IUjnZ.mjs").then((n) => n.n);
+					const { applySeed } = await import("../apply-DLmM3R7f.mjs").then((n) => n.n);
+					const { loadSeed } = await import("../load-DPtY9cZo.mjs").then((n) => n.r);
+					const { validateSeed } = await import("../validate-D8VPn4Hv.mjs").then((n) => n.n);
 					const seed = await loadSeed();
 					if (validateSeed(seed).valid) {
 						await applySeed(db, seed, { onConflict: "skip" });
@@ -1698,7 +1674,8 @@ var EmDashRuntime = class EmDashRuntime {
 		}, siteInfo));
 		if (!sandboxRunner) return sandboxedPluginCache;
 		if (!sandboxRunner.isAvailable()) {
-			console.warn("EmDash: Plugin sandbox is configured but not available on this platform. Sandboxed plugins will not be loaded. If using @emdash-cms/sandbox-workerd/sandbox, ensure workerd is installed.");
+			const reason = sandboxRunner.unavailableReason?.();
+			console.warn(reason ? `EmDash: Plugin sandbox is configured but not available on this platform: ${reason}. Sandboxed plugins will not be loaded.` : "EmDash: Plugin sandbox is configured but not available on this platform. Sandboxed plugins will not be loaded. If using @emdash-cms/sandbox-workerd/sandbox, ensure workerd is installed.");
 			return sandboxedPluginCache;
 		}
 		if (deps.sandboxedPluginEntries.length === 0) return sandboxedPluginCache;
@@ -1933,60 +1910,7 @@ var EmDashRuntime = class EmDashRuntime {
 	* is two queries in practice; never N+1.
 	*/
 	async _buildManifest() {
-		const manifestCollections = {};
-		try {
-			const dbCollections = await new SchemaRegistry(this.db).listCollectionsWithFields();
-			for (const collection of dbCollections) {
-				const fields = {};
-				for (const field of collection.fields) {
-					const entry = {
-						kind: FIELD_TYPE_TO_KIND[field.type] ?? "string",
-						label: field.label,
-						required: field.required
-					};
-					entry.id = field.id;
-					if (field.widget) entry.widget = field.widget;
-					if (field.options) entry.options = field.options;
-					if (field.validation?.options) entry.options = field.validation.options.map((v) => ({
-						value: v,
-						label: v.charAt(0).toUpperCase() + v.slice(1)
-					}));
-					if ((field.type === "repeater" || field.type === "file" || field.type === "image") && field.validation) entry.validation = { ...field.validation };
-					fields[field.slug] = entry;
-				}
-				const configuredListColumns = collection.admin?.listColumns ?? [];
-				const fieldTypes = new Map(collection.fields.map((field) => [field.slug, field.type]));
-				const listColumns = [];
-				for (const slug of configuredListColumns) {
-					if (listColumns.includes(slug)) continue;
-					const fieldType = fieldTypes.get(slug);
-					if (!fieldType || !LIST_COLUMN_FIELD_TYPES.has(fieldType)) {
-						console.warn(`EmDash: Ignoring unsupported or unknown list column "${slug}" in collection "${collection.slug}".`);
-						continue;
-					}
-					if (listColumns.length >= MAX_COLLECTION_LIST_COLUMNS) {
-						console.warn(`EmDash: Collection "${collection.slug}" declares more than ${MAX_COLLECTION_LIST_COLUMNS} list columns; extra columns are ignored.`);
-						break;
-					}
-					listColumns.push(slug);
-				}
-				manifestCollections[collection.slug] = {
-					label: collection.label,
-					labelSingular: collection.labelSingular || collection.label,
-					supports: collection.supports || [],
-					hasSeo: collection.hasSeo,
-					urlPattern: collection.urlPattern,
-					routable: collection.routable !== false,
-					titleField: collection.titleField,
-					dateField: collection.dateField,
-					...collection.hidden ? { hidden: true } : {},
-					listColumns: listColumns.length > 0 ? listColumns : void 0,
-					fields
-				};
-			}
-		} catch (error) {
-			console.debug("EmDash: Could not load database collections:", error);
-		}
+		const manifestCollections = await buildManifestCollections({}, this.db);
 		const manifestPlugins = {};
 		for (const plugin of this.configuredPlugins) {
 			const status = this.pluginStates.get(plugin.id);
@@ -2069,9 +1993,11 @@ var EmDashRuntime = class EmDashRuntime {
 		const i18nConfig = virtualConfig?.i18n ?? getI18nConfig();
 		const i18n = i18nConfig && i18nConfig.locales && i18nConfig.locales.length > 1 ? {
 			defaultLocale: i18nConfig.defaultLocale,
-			locales: i18nConfig.locales
+			locales: i18nConfig.locales,
+			prefixDefaultLocale: i18nConfig.prefixDefaultLocale
 		} : void 0;
-		const registry = normalizeRegistryConfig(this.config.experimental?.registry) ?? void 0;
+		const { registry, error: registryConfigurationError } = resolveManifestRegistryConfig(this.config.experimental?.registry);
+		if (registryConfigurationError) console.error(`EmDash registry configuration error in ${registryConfigurationError.field} (${registryConfigurationError.code})`);
 		return {
 			version: VERSION,
 			commit: COMMIT,
@@ -2087,7 +2013,8 @@ var EmDashRuntime = class EmDashRuntime {
 				implicit: i18nConfig === null
 			},
 			marketplace: !!this.config.marketplace,
-			registry
+			registry,
+			registryConfigurationError
 		};
 	}
 	/**
@@ -2187,15 +2114,18 @@ var EmDashRuntime = class EmDashRuntime {
 		}
 	}
 	async handleContentCreate(collection, body) {
+		const actor = body.actor ? { ...body.actor } : void 0;
 		let processedData = body.data;
 		if (this.hooks.hasHooks("content:beforeSave")) try {
-			processedData = (await this.hooks.runContentBeforeSave(body.data, collection, true)).content;
+			processedData = (await this.hooks.runContentBeforeSave(body.data, collection, true, void 0, actor)).content;
 		} catch (error) {
 			return beforeSaveFailure(error);
 		}
-		processedData = await this.runSandboxedBeforeSave(processedData, collection, true);
+		const sandboxResult = await this.runSandboxedBeforeSave(processedData, collection, true, void 0, actor);
+		if (!sandboxResult.success) return sandboxResult;
+		processedData = sandboxResult.data;
 		processedData = await this.normalizeMediaFields(collection, processedData);
-		const { validateContentData } = await import("../validation-D83n7Npi.mjs");
+		const { validateContentData } = await import("../validation-CzMJn9Ku.mjs");
 		const validation = await validateContentData(this.db, collection, processedData, { partial: false });
 		if (!validation.ok) return {
 			success: false,
@@ -2208,10 +2138,11 @@ var EmDashRuntime = class EmDashRuntime {
 			bylines: body.bylines
 		});
 		if (result.success && result.data) await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
-		if (result.success && result.data) this.runAfterSaveHooks(contentItemToRecord(result.data.item), collection, true);
+		if (result.success && result.data) this.runAfterSaveHooks(contentItemToRecord(result.data.item), collection, true, actor);
 		return result;
 	}
 	async handleContentUpdate(collection, id, body) {
+		const actor = body.actor ? { ...body.actor } : void 0;
 		const repo = new ContentRepository(this.db);
 		const resolvedItem = await repo.findByIdOrSlug(collection, id, body.locale);
 		const resolvedId = resolvedItem?.id ?? id;
@@ -2232,17 +2163,19 @@ var EmDashRuntime = class EmDashRuntime {
 				}
 			};
 		}
-		const { _rev: _discardedRev, ...bodyWithoutRev } = body;
+		const { _rev: _discardedRev, actor: _discardedActor, ...bodyWithoutRev } = body;
 		let processedData = bodyWithoutRev.data;
 		if (bodyWithoutRev.data) {
 			if (this.hooks.hasHooks("content:beforeSave")) try {
-				processedData = (await this.hooks.runContentBeforeSave(bodyWithoutRev.data, collection, false)).content;
+				processedData = (await this.hooks.runContentBeforeSave(bodyWithoutRev.data, collection, false, resolvedItem?.id, actor)).content;
 			} catch (error) {
 				return beforeSaveFailure(error);
 			}
-			processedData = await this.runSandboxedBeforeSave(processedData, collection, false);
+			const sandboxResult = await this.runSandboxedBeforeSave(processedData, collection, false, resolvedItem?.id, actor);
+			if (!sandboxResult.success) return sandboxResult;
+			processedData = sandboxResult.data;
 			processedData = await this.normalizeMediaFields(collection, processedData);
-			const { validateContentData } = await import("../validation-D83n7Npi.mjs");
+			const { validateContentData } = await import("../validation-CzMJn9Ku.mjs");
 			const validation = await validateContentData(this.db, collection, processedData, { partial: true });
 			if (!validation.ok) return {
 				success: false,
@@ -2269,7 +2202,7 @@ var EmDashRuntime = class EmDashRuntime {
 						collection,
 						entryId: resolvedId,
 						data: mergedData,
-						authorId: bodyWithoutRev.authorId ?? void 0
+						authorId: actor?.id
 					});
 					let staged;
 					try {
@@ -2327,23 +2260,14 @@ var EmDashRuntime = class EmDashRuntime {
 		const hydrated = await this.hydrateDraftData(result);
 		if (hydrated.success && hydrated.data) {
 			const contentIdsToRefresh = [resolvedId];
-			if (!usesDraftRevisions && processedData) try {
-				contentIdsToRefresh.push(...await findNonTranslatableSiblingContentIds(this.db, collection, resolvedId, hydrated.data.item.translationGroup, processedData));
-			} catch (error) {
-				console.error(`[media-usage] Failed to discover synced i18n siblings for ${collection}/${resolvedId}:`, error);
-				try {
-					await markContentMediaUsageCollectionStale(this.db, collection, "CONTENT_USAGE_REFRESH_ERROR");
-				} catch (staleError) {
-					console.error(`[media-usage] Failed to mark ${collection} stale:`, staleError);
-				}
-			}
+			if (!usesDraftRevisions && processedData) contentIdsToRefresh.push(...await this.findSyncedSiblingsForUsageRefresh(collection, resolvedId, hydrated.data.item.translationGroup, processedData));
 			await this.refreshContentUsageAfterSuccessfulWrite(collection, contentIdsToRefresh);
 		} else if (draftStorageChanged) try {
 			await markContentMediaUsageCollectionStale(this.db, collection, "CONTENT_USAGE_STALE");
 		} catch (error) {
 			console.error(`[media-usage] Failed to mark ${collection} stale:`, error);
 		}
-		if (hydrated.success && hydrated.data) this.runAfterSaveHooks(contentItemToRecord(hydrated.data.item), collection, false);
+		if (hydrated.success && hydrated.data) this.runAfterSaveHooks(contentItemToRecord(hydrated.data.item), collection, false, actor);
 		if (hydrated.success) return {
 			...hydrated,
 			liveContentChanged
@@ -2388,8 +2312,8 @@ var EmDashRuntime = class EmDashRuntime {
 		if (result.success) this.runAfterDeleteHooks(id, collection, true);
 		return result;
 	}
-	async handleContentCountTrashed(collection) {
-		return handleContentCountTrashed(this.db, collection);
+	async handleContentCountTrashed(collection, params = {}) {
+		return handleContentCountTrashed(this.db, collection, params);
 	}
 	async handleContentDuplicate(collection, id, authorId) {
 		const result = await handleContentDuplicate(this.db, collection, id, authorId);
@@ -2398,12 +2322,15 @@ var EmDashRuntime = class EmDashRuntime {
 	}
 	async handleContentPublish(collection, id, options = {}) {
 		const result = await handleContentPublish(this.db, collection, id, options);
-		if (result.success && result.data) await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
+		if (result.success && result.data) {
+			const { item } = result.data;
+			await this.refreshContentUsageAfterSuccessfulWrite(collection, [item.id, ...await this.findSyncedSiblingsForUsageRefresh(collection, item.id, item.translationGroup, item.data, { absentAsCleared: true })]);
+		}
 		if (result.success && result.data) this.runAfterPublishHooks(contentItemToRecord(result.data.item), collection);
 		return result;
 	}
-	async handleContentUnpublish(collection, id) {
-		const result = await handleContentUnpublish(this.db, collection, id);
+	async handleContentUnpublish(collection, id, options = {}) {
+		const result = await handleContentUnpublish(this.db, collection, id, options);
 		if (result.success && result.data) await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
 		if (result.success && result.data) this.runAfterUnpublishHooks(contentItemToRecord(result.data.item), collection);
 		return result;
@@ -2423,8 +2350,8 @@ var EmDashRuntime = class EmDashRuntime {
 	async handleContentCountScheduled(collection) {
 		return handleContentCountScheduled(this.db, collection);
 	}
-	async handleContentDiscardDraft(collection, id) {
-		const result = await handleContentDiscardDraft(this.db, collection, id);
+	async handleContentDiscardDraft(collection, id, options = {}) {
+		const result = await handleContentDiscardDraft(this.db, collection, id, options);
 		if (result.success && result.data) await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
 		return result;
 	}
@@ -2475,6 +2402,11 @@ var EmDashRuntime = class EmDashRuntime {
 		if (result.success) invalidateSiteSettingsCache();
 		return result;
 	}
+	async handleMediaReplaceMetadata(id, expectedStorageKey, input) {
+		const result = await handleMediaReplaceMetadata(this.db, id, expectedStorageKey, input);
+		if (result.success) invalidateSiteSettingsCache();
+		return result;
+	}
 	async handleMediaDelete(id) {
 		const result = await handleMediaDelete(this.db, id);
 		if (result.success) invalidateSiteSettingsCache();
@@ -2556,6 +2488,19 @@ var EmDashRuntime = class EmDashRuntime {
 			};
 		}
 	}
+	async findSyncedSiblingsForUsageRefresh(collection, contentId, translationGroup, data, options = {}) {
+		try {
+			return await findNonTranslatableSiblingContentIds(this.db, collection, contentId, translationGroup, data, options);
+		} catch (error) {
+			console.error(`[media-usage] Failed to discover synced i18n siblings for ${collection}/${contentId}:`, error);
+			try {
+				await markContentMediaUsageCollectionStale(this.db, collection, "CONTENT_USAGE_REFRESH_ERROR");
+			} catch (staleError) {
+				console.error(`[media-usage] Failed to mark ${collection} stale:`, staleError);
+			}
+			return [];
+		}
+	}
 	async refreshContentUsageAfterSuccessfulWrite(collection, contentIds) {
 		for (const contentId of new Set(contentIds)) try {
 			if ((await processMediaUsageWorkAfterWrite(this.db, collection, contentId)).outcome !== "inactive") continue;
@@ -2809,27 +2754,62 @@ var EmDashRuntime = class EmDashRuntime {
 		}
 		return result;
 	}
-	async runSandboxedBeforeSave(content, collection, isNew) {
+	async runSandboxedBeforeSave(content, collection, isNew, contentId, actor) {
 		let result = content;
 		for (const [pluginKey, plugin] of this.sandboxedPlugins) {
 			const [id] = pluginKey.split(":");
 			if (!id || !this.isPluginEnabled(id)) continue;
 			try {
-				const hookResult = await plugin.invokeHook("content:beforeSave", {
+				const event = {
 					content: result,
 					collection,
 					isNew
-				});
+				};
+				if (contentId !== void 0) event.id = contentId;
+				if (actor !== void 0) event.actor = { ...actor };
+				const hookResult = await plugin.invokeHook("content:beforeSave", event);
+				const inspection = inspectSandboxHookResult(hookResult);
+				if (inspection.kind === "error") return {
+					success: false,
+					error: {
+						code: ErrorCode.SAVE_REJECTED,
+						message: "Save rejected by a sandboxed plugin",
+						details: {
+							pluginId: id,
+							reason: inspection.error.reason
+						}
+					}
+				};
+				if (inspection.kind === "malformed") {
+					console.error(`EmDash: Sandboxed plugin ${id} returned an invalid hook result`);
+					return {
+						success: false,
+						error: {
+							code: ErrorCode.CONTENT_HOOK_ERROR,
+							message: "A plugin hook failed while saving content"
+						}
+					};
+				}
 				if (hookResult && typeof hookResult === "object" && !Array.isArray(hookResult)) {
 					const record = {};
 					for (const [k, v] of Object.entries(hookResult)) record[k] = v;
 					result = record;
 				}
 			} catch (error) {
-				console.error(`EmDash: Sandboxed plugin ${id} beforeSave hook threw; a sandboxed plugin cannot cancel a save, so the save continues:`, error);
+				console.error(`EmDash: Sandboxed plugin ${id} beforeSave hook failed:`, error);
+				return {
+					success: false,
+					error: {
+						code: ErrorCode.CONTENT_HOOK_ERROR,
+						message: "A plugin hook failed while saving content"
+					}
+				};
 			}
 		}
-		return result;
+		return {
+			success: true,
+			data: result
+		};
 	}
 	async runSandboxedBeforeDelete(id, collection) {
 		for (const [pluginKey, plugin] of this.sandboxedPlugins) {
@@ -2846,10 +2826,10 @@ var EmDashRuntime = class EmDashRuntime {
 		}
 		return true;
 	}
-	runAfterSaveHooks(content, collection, isNew) {
+	runAfterSaveHooks(content, collection, isNew, actor) {
 		after(async () => {
 			if (this.hooks.hasHooks("content:afterSave")) try {
-				await this.hooks.runContentAfterSave(content, collection, isNew);
+				await this.hooks.runContentAfterSave(content, collection, isNew, actor);
 			} catch (err) {
 				console.error("EmDash afterSave hook error:", err);
 			}
@@ -2859,11 +2839,13 @@ var EmDashRuntime = class EmDashRuntime {
 				if (!id || !this.isPluginEnabled(id)) continue;
 				tasks.push((async () => {
 					try {
-						await plugin.invokeHook("content:afterSave", {
+						const event = {
 							content,
 							collection,
 							isNew
-						});
+						};
+						if (actor !== void 0) event.actor = { ...actor };
+						await plugin.invokeHook("content:afterSave", event);
 					} catch (err) {
 						console.error(`EmDash: Sandboxed plugin ${id} afterSave error:`, err);
 					}
@@ -3693,6 +3675,12 @@ function migrationRequiredResponse() {
 		headers: { "Retry-After": "60" }
 	});
 }
+function runtimeConfigurationErrorResponse(error, pathname) {
+	if (!pathname.startsWith("/_emdash/api/")) return null;
+	if (error instanceof EmDashConfigurationError) return apiError(error.code, error.message, 500);
+	if (error instanceof EmDashStorageError && error.code === "BINDING_NOT_FOUND") return apiError(error.code, error.message, 500);
+	return null;
+}
 /**
 * Baseline security headers applied to all responses.
 * Admin routes get additional headers (strict CSP) from auth middleware.
@@ -3829,7 +3817,7 @@ const onRequest = defineMiddleware(async (context, next) => {
 				if (migrationMode === "auto" && !isSetupVerified() && !context.isPrerendered) {
 					const t0 = performance.now();
 					try {
-						const { getDb } = await import("../loader-ZsjE4paL.mjs").then((n) => n.c);
+						const { getDb } = await import("../loader-WJi6GFRn.mjs").then((n) => n.c);
 						await (await getDb()).selectFrom("_emdash_migrations").selectAll().limit(1).execute();
 						markSetupVerified();
 					} catch (error) {
@@ -3965,6 +3953,7 @@ const onRequest = defineMiddleware(async (context, next) => {
 					handleMediaGet: runtime.handleMediaGet.bind(runtime),
 					handleMediaCreate: runtime.handleMediaCreate.bind(runtime),
 					handleMediaUpdate: runtime.handleMediaUpdate.bind(runtime),
+					...runtime.handleMediaReplaceMetadata ? { handleMediaReplaceMetadata: runtime.handleMediaReplaceMetadata.bind(runtime) } : {},
 					handleMediaDelete: runtime.handleMediaDelete.bind(runtime),
 					handleRevisionList: runtime.handleRevisionList.bind(runtime),
 					handleRevisionGet: runtime.handleRevisionGet.bind(runtime),
@@ -4007,6 +3996,8 @@ const onRequest = defineMiddleware(async (context, next) => {
 					return migrationRequiredResponse();
 				}
 				console.error("EmDash middleware error:", error);
+				const configurationError = runtimeConfigurationErrorResponse(error, url.pathname);
+				if (configurationError) return configurationError;
 			}
 			const lastContentWriteAt = canUseCachedBinding && config?.database?.needsLastContentWriteAt ? await getLastContentWriteAt() : void 0;
 			const scoped = createRequestScopedDb$1({