emdash 0.37.0 → 0.38.0

package/dist/astro/middleware.mjs

@@ -1,105 +1,109 @@
-import { r as MIGRATION_RACE_WAIT_MS, t as ConcurrentMigrationTimeoutError } from "../runner-BLIDKpmA.mjs";
-import { c as isSqlite, u as listTablesLike } from "../dialect-helpers-BSbfaO3F.mjs";
+import { r as MIGRATION_RACE_WAIT_MS, t as ConcurrentMigrationTimeoutError } from "../runner-nEzvnogG.mjs";
+import { c as isSqlite, d as listTablesLike } from "../dialect-helpers-BcQvkHgn.mjs";
 import { r as getI18nConfig, s as setI18nConfig } from "../config-C3EBstHi.mjs";
-import { A as resolveExclusiveHooks, C as parseRouteInput, D as isContentSaveRejection, S as buildRouteMeta, T as EmailPipeline, c as inspectSandboxHookResult, f as getSandboxRouteErrorDetails, j as definePlugin, k as createHookPipeline, t as getMenu, w as toRouteCallerInfo, x as PluginRouteRegistry, z as AuditRepository } from "../menus-6qSwTNxG.mjs";
+import { E as definePlugin, F as EmDashConfigurationError, P as AuditRepository, S as isContentSaveRejection, T as resolveExclusiveHooks, _ as buildRouteMeta, b as EmailPipeline, c as inspectSandboxHookResult, g as PluginRouteRegistry, t as getMenu, v as parseRouteInput, w as createHookPipeline, y as toRouteCallerInfo } from "../menus-D8mC4eaN.mjs";
 import { n as createDeferredTaskTracker, t as after } from "../after-CBU2vkoO.mjs";
 import { createRequestMetrics, getRequestContext, runWithContext } from "../request-context.mjs";
 import { o as getLastContentWriteAt } from "../object-cache-DVKnyOfy.mjs";
-import { i as RevisionRepository, t as ContentRepository } from "../content-DjvM0T92.mjs";
+import { i as RevisionRepository, t as ContentRepository } from "../content-CNfMWuhY.mjs";
 import { n as isMissingTableError } from "../db-errors-Cl-sKYTm.mjs";
 import "../slugify-B994zkXC.mjs";
 import "../base64-CvLhUKQv.mjs";
 import { n as ContentMutationConflictError } from "../types-CQPWhPxE.mjs";
 import { t as MediaRepository } from "../media-BBm8Wg3f.mjs";
-import "../user-BTZ40aq6.mjs";
-import "../taxonomy-tJepplLL.mjs";
+import "../user-DIsIXogT.mjs";
+import "../taxonomy-DP1vny4K.mjs";
 import "../comment-vxOzWbZN.mjs";
-import { t as OptionsRepository } from "../options-BHPeIbBd.mjs";
-import { r as createSiteInfo } from "../context-CX6gxOLW.mjs";
-import "../menus-uvPLXMZf.mjs";
-import "../redirect-CZkbozu9.mjs";
-import { i as setRequestCacheEntry, r as requestCached } from "../request-cache-DH9zdCOD.mjs";
-import "../byline-registry-Bpu9-MVs.mjs";
-import { n as initWithLock, t as createInitLock } from "../init-lock-DJkX6Hto.mjs";
-import "../field-defs-cache-BM4SIRqH.mjs";
-import "../byline-DuhF7NWl.mjs";
-import "../relation-04DfKRTO.mjs";
-import { n as normalizeMediaValue } from "../normalize-C2xNjTSG.mjs";
-import "../dist-89xCrGqi.mjs";
-import "../enrich-BX0IDp4z.mjs";
-import "../seo-926NRIgt.mjs";
-import { r as singleFlightCached, t as createSingleFlightCache } from "../single-flight-cache-BPuGPdcN.mjs";
-import "../cache-BF5Kvn59.mjs";
-import { t as FTSManager } from "../fts-manager-Do1BlW2r.mjs";
-import "../resolve-prZ3mP7l.mjs";
+import { t as OptionsRepository } from "../options-D1FBiAv1.mjs";
+import { r as createSiteInfo } from "../context-C9PB8vGd.mjs";
+import "../menus-UdwjHZJC.mjs";
+import "../resolve-Cy0aWSRj.mjs";
+import "../redirect-DId44BS1.mjs";
+import { i as setRequestCacheEntry, r as requestCached } from "../request-cache-DAZZmesc.mjs";
+import "../byline-registry-BxDGIO0I.mjs";
+import { n as initWithLock, t as createInitLock } from "../init-lock-CFNBe_iH.mjs";
+import "../field-defs-cache-Cf5FHK0M.mjs";
+import "../byline-Vdi85CsZ.mjs";
+import "../relation-DxgCHOBw.mjs";
+import { n as normalizeMediaValue } from "../normalize-4nkKGsuW.mjs";
+import "../dist-BAsh8dbf.mjs";
+import "../enrich-t2Xvjdqa.mjs";
+import "../entry-locks-BEcX7ET0.mjs";
+import "../seo-Bw68KxRc.mjs";
+import { r as singleFlightCached, t as createSingleFlightCache } from "../single-flight-cache-jaswDzmQ.mjs";
+import "../cache--7HKu5Xm.mjs";
+import { t as FTSManager } from "../fts-manager-iddym8cd.mjs";
 import { createRecorder, flushRecorder, isInstrumentationEnabled, kyselyLogOption } from "../database/instrumentation.mjs";
-import { s as getDb } from "../loader-Z8vl7zTq.mjs";
-import { a as getTaxonomyDefs, o as getTaxonomyTerms } from "../taxonomies-Wfy_Lg12.mjs";
-import { $ as validateRev, A as handleRevisionRestore, B as handleContentDuplicate, C as handleMediaDelete, D as handleMediaUpdate, E as handleMediaReplaceMetadata, F as handleContentCountScheduled, G as handleContentPermanentDelete, H as handleContentGetIncludingTrashed, I as handleContentCountTrashed, J as handleContentSchedule, K as handleContentPublish, L as handleContentCreate, N as handleContentAuthors, O as handleRevisionGet, P as handleContentCompare, Q as handleContentUpdate, R as handleContentDelete, S as handleMediaCreate, T as handleMediaList, U as handleContentList, V as handleContentGet, W as handleContentListTrashed, X as handleContentUnpublish, Y as handleContentTranslations, Z as handleContentUnschedule, j as buildManifestCollections, k as handleRevisionList, m as syncDeclaredStorageIndexes, p as loadBundleFromR2, q as handleContentRestore, w as handleMediaGet, z as handleContentDiscardDraft } from "../api-Dz6rgoa3.mjs";
-import { n as recordSchedulerHeartbeatSafely } from "../dashboard-C2kTeeRI.mjs";
-import "../capture-triggers-CNW1q3HK.mjs";
-import { r as activateMediaUsageCapture } from "../activation-K0kGBWuJ.mjs";
-import "../collection-deletion-Bj07NHbj.mjs";
-import { c as markContentMediaUsageCollectionStale, i as deleteContentMediaUsage, o as findNonTranslatableSiblingContentIds, u as refreshContentMediaUsageAfterWrite, y as MediaUsageRepository } from "../content-refresh-Bwp-8yGy.mjs";
-import { n as SchemaRegistry } from "../registry-AZAsRsor.mjs";
-import { r as hashString } from "../hash-3JJPlHF2.mjs";
-import "../media-folders-BGkATs8n.mjs";
-import "../media-usage-work-D6D9sMCA.mjs";
-import "../content-repair-Czdp7jz5.mjs";
-import { s as processMediaUsageWorkAfterWrite } from "../media-usage-CdY5jhSR.mjs";
-import { t as ErrorCode } from "../errors-DsVoDUjJ.mjs";
-import "../media-usage-activation-BgeMtK5C.mjs";
-import "../media-usage-work-CnGCdHxx.mjs";
-import "../query-BndaFxxp.mjs";
-import "../zod-generator-BuYSQJB7.mjs";
-import "../schema-CGnBeLiW.mjs";
-import "../schema-DYr-Vd-L.mjs";
-import "../seo-CVWkdv6x.mjs";
-import { t as PluginStateRepository } from "../state-BpFVsJZB.mjs";
-import "../sections-B_nYvlwn.mjs";
-import { i as getSiteSettings, s as invalidateSiteSettingsCache } from "../settings--wobrkkC.mjs";
-import "../settings-Cwm6o2jY.mjs";
-import "../taxonomies-DkAkMupr.mjs";
-import { r as normalizeManifestRoute } from "../manifest-schema-BNWwR8Vd.mjs";
-import "../types-DfuTR6dL.mjs";
-import { r as normalizeRegistryConfig } from "../config-it29yDLA.mjs";
-import "../ssrf-5sIM5jzl.mjs";
-import "../error-DFrQjppn.mjs";
-import "../parse-Ckpg-Qfp.mjs";
-import "../media-BHjus86Y.mjs";
-import "../redirects-BLNOWQTn.mjs";
-import "../relations-C4htk5sb.mjs";
-import "../status-B777-dXz.mjs";
-import { a as invalidateUrlPatternCache } from "../query-BZKZcG5b.mjs";
-import "../import-CJpaBBBT.mjs";
-import { t as getTrustedProxyHeaders } from "../trusted-proxy-BR5F1Otp.mjs";
-import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-DYxLlnmz.mjs";
-import "../ssrf-Dg3cIT-b.mjs";
-import { n as CronExecutor } from "../cron-C6o7VppJ.mjs";
-import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-Dzb6uGYa.mjs";
-import { n as assertMediaUsageActivationWriteAllowed } from "../media-usage-write-fence-hjeD4u7s.mjs";
-import "../utils-BKvNjjhY.mjs";
-import "../tokens-BCO1oruF.mjs";
-import "../preview-B_vJLvf8.mjs";
-import "../hreflang-DQbPZliA.mjs";
-import "../comment-reaction-BhrvSHml.mjs";
-import "../bylines-CJ5nd6Lw.mjs";
-import { r as getWidgetAreas } from "../widgets-D3gJ10xU.mjs";
-import "../validate-DE_LRwo9.mjs";
-import "../apply-B4SIOxR1.mjs";
-import "../load-CawHjTOH.mjs";
-import "../search-C-qDk4kx.mjs";
+import { s as getDb } from "../loader-WJi6GFRn.mjs";
+import { r as primeRegisteredCollections } from "../collection-slugs-cache-7lTmNzeA.mjs";
+import { a as getTaxonomyDefs, o as getTaxonomyTerms } from "../taxonomies-NcFDq5Gg.mjs";
+import { $ as handleContentSchedule, A as handleMediaList, B as handleContentCountScheduled, D as handleMediaCreate, F as handleRevisionRestore, G as handleContentDuplicate, H as handleContentCreate, I as buildManifestCollections, J as handleContentList, K as handleContentGet, M as handleMediaUpdate, N as handleRevisionGet, O as handleMediaDelete, P as handleRevisionList, Q as handleContentRestore, R as handleContentAuthors, U as handleContentDelete, V as handleContentCountTrashed, W as handleContentDiscardDraft, X as handleContentPermanentDelete, Y as handleContentListTrashed, Z as handleContentPublish, et as handleContentTranslations, it as validateRev, j as handleMediaReplaceMetadata, k as handleMediaGet, m as syncDeclaredStorageIndexes, nt as handleContentUnschedule, p as loadBundleFromR2, q as handleContentGetIncludingTrashed, rt as handleContentUpdate, tt as handleContentUnpublish, v as getSandboxRouteErrorDetails, z as handleContentCompare } from "../api-BvxJmnFY.mjs";
+import { n as recordSchedulerHeartbeatSafely } from "../dashboard-BNSvAN8A.mjs";
+import "../capture-triggers-CeAsC76Z.mjs";
+import { r as activateMediaUsageCapture } from "../activation-DyNTe_Tl.mjs";
+import "../collection-deletion-BCwaWTDw.mjs";
+import { c as markContentMediaUsageCollectionStale, i as deleteContentMediaUsage, o as findNonTranslatableSiblingContentIds, u as refreshContentMediaUsageAfterWrite, y as MediaUsageRepository } from "../content-refresh-GTMyi2Xy.mjs";
+import { n as SchemaRegistry } from "../registry-DTqaqxed.mjs";
+import { r as hashString } from "../hash-BRweX6jz.mjs";
+import "../media-folders-DASfX_DH.mjs";
+import "../media-usage-work-C5B1zT1c.mjs";
+import "../content-repair-CIMt5C0U.mjs";
+import { s as processMediaUsageWorkAfterWrite } from "../media-usage-C1EswMTq.mjs";
+import { t as ErrorCode } from "../errors-DvMdNrgf.mjs";
+import "../media-usage-activation-CrHNltlL.mjs";
+import "../media-usage-work-IkQx_Yz6.mjs";
+import "../query-gtXT03Wc.mjs";
+import "../zod-generator-CNRGdnBY.mjs";
+import "../schema-CRu38Pr5.mjs";
+import "../schema-DifxndJx.mjs";
+import "../seo-C4AmbsMU.mjs";
+import { t as PluginStateRepository } from "../state-1F6IOhdQ.mjs";
+import "../sections-3X52kmIR.mjs";
+import { i as getSiteSettings, s as invalidateSiteSettingsCache } from "../settings-DcMjREe5.mjs";
+import "../settings-AnEFYICn.mjs";
+import "../taxonomies-BOdxuZpV.mjs";
+import { r as normalizeManifestRoute } from "../manifest-schema-CILooI5J.mjs";
+import "../types-A2cN6a4a.mjs";
+import { t as EmDashStorageError } from "../types-ByG2coLw.mjs";
+import "../artifact-fetch-P2JXVwOq.mjs";
+import "../ssrf-gl4gFNhw.mjs";
+import { o as resolveManifestRegistryConfig } from "../config--eWjQJE5.mjs";
+import { t as apiError } from "../error-BDcFyoRt.mjs";
+import "../parse-WRg5C3NX.mjs";
+import "../media-C1EIZKh1.mjs";
+import "../entry-lock-DIYHAaSw.mjs";
+import "../relations-rOmbndUJ.mjs";
+import "../status-Cenfk_r5.mjs";
+import { a as invalidateUrlPatternCache } from "../query-DygOte9M.mjs";
+import "../import-D96g2otw.mjs";
+import { t as getTrustedProxyHeaders } from "../trusted-proxy-BTM6UxqD.mjs";
+import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-BgjUQLQ-.mjs";
+import "../ssrf-TQhaljuI.mjs";
+import { n as CronExecutor } from "../cron-DHAy9oyq.mjs";
+import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-DNup1Fku.mjs";
+import { n as assertMediaUsageActivationWriteAllowed } from "../media-usage-write-fence-B9anjOSg.mjs";
+import "../utils-BicP5Qbg.mjs";
+import "../tokens-CDk8ox9p.mjs";
+import "../preview-BxwsGgGp.mjs";
+import "../hreflang-DshnweTC.mjs";
+import "../comment-reaction-CDyvPQRj.mjs";
+import "../bylines-BX8QhcTk.mjs";
+import { r as getWidgetAreas } from "../widgets-RFVAxQl3.mjs";
+import "../validate-D8VPn4Hv.mjs";
+import "../apply-DLmM3R7f.mjs";
+import "../load-DPtY9cZo.mjs";
+import "../search-DEPFSBFq.mjs";
 import "../index.mjs";
-import { i as resolveRuntimeMigrationMode, n as enforceRuntimeMigrationPolicy, t as PendingMigrationsError } from "../policy-Dhtwntrt.mjs";
-import { n as VERSION, t as COMMIT } from "../version-Bii3suaO.mjs";
-import { t as getAuthMode } from "../mode-DN_WneRx.mjs";
-import "../snapshot--OCDTqdb.mjs";
-import { u as maybeRunScheduledBackup } from "../backup-rwVAl9NI.mjs";
-import { t as cleanupExpiredChallenges } from "../challenge-store-DQN_Yrck.mjs";
-import { t as removeUploadAttempt } from "../upload-attempts-BsqoQ1fn.mjs";
-import { a as validateEncryptionKeyAtStartup } from "../secrets-rEtHt-6z.mjs";
+import { i as resolveRuntimeMigrationMode, n as enforceRuntimeMigrationPolicy, t as PendingMigrationsError } from "../policy-XCfb-IE9.mjs";
+import { n as VERSION, t as COMMIT } from "../version-CK67_SXX.mjs";
+import { t as getAuthMode } from "../mode-Dm4BHhRH.mjs";
+import "../snapshot-C4CtXntb.mjs";
+import { u as maybeRunScheduledBackup } from "../backup-oS8ft5Cm.mjs";
+import { t as cleanupExpiredChallenges } from "../challenge-store-BIOak-tp.mjs";
+import { t as removeUploadAttempt } from "../upload-attempts-C6S2y-lp.mjs";
+import { a as validateEncryptionKeyAtStartup } from "../secrets-CdfzLdoO.mjs";
 import { isRecord } from "../plugin-utils.mjs";
-import { t as resolveSessionUser } from "../session-user-BlMgqCHS.mjs";
+import { t as resolveSessionUser } from "../session-user-CbnMMwk6.mjs";
 import { Kysely, sql } from "kysely";
 import { ulid } from "ulidx";
 import { z } from "zod";
@@ -656,7 +660,8 @@ const DRAFT_ONLY_UPDATE_KEYS = new Set([
 	"data",
 	"slug",
 	"locale",
-	"skipRevision"
+	"skipRevision",
+	"actor"
 ]);
 const MAX_DRAFT_STAGE_ATTEMPTS = 32;
 /**
@@ -1305,7 +1310,8 @@ var EmDashRuntime = class EmDashRuntime {
 		})];
 		if (ownsConfiguredDb) coldStartReads.push(phase("rt.seedcheck", "Auto-seed gate", async () => {
 			try {
-				const [collectionCount, setupOption] = await Promise.all([readDb.selectFrom("_emdash_collections").select((eb) => eb.fn.countAll().as("count")).executeTakeFirstOrThrow(), readDb.selectFrom("options").select("value").where("name", "=", "emdash:setup_complete").executeTakeFirst()]);
+				const [collectionRows, setupOption] = await Promise.all([readDb.selectFrom("_emdash_collections").select("slug").execute(), readDb.selectFrom("options").select("value").where("name", "=", "emdash:setup_complete").executeTakeFirst()]);
+				primeRegisteredCollections(collectionRows.map((row) => row.slug));
 				const setupDone = (() => {
 					try {
 						return !!setupOption && JSON.parse(setupOption.value) === true;
@@ -1314,7 +1320,7 @@ var EmDashRuntime = class EmDashRuntime {
 					}
 				})();
 				seedGate = {
-					collectionCount: collectionCount.count,
+					collectionCount: collectionRows.length,
 					setupDone
 				};
 			} catch (error) {
@@ -1341,9 +1347,9 @@ var EmDashRuntime = class EmDashRuntime {
 			const seedHolder = getSeedHolder();
 			try {
 				await initWithLock(seedHolder.lock, () => seedHolder.done.has(seedKey) ? true : void 0, async () => {
-					const { applySeed } = await import("../apply-B4SIOxR1.mjs").then((n) => n.n);
-					const { loadSeed } = await import("../load-CawHjTOH.mjs").then((n) => n.r);
-					const { validateSeed } = await import("../validate-DE_LRwo9.mjs").then((n) => n.n);
+					const { applySeed } = await import("../apply-DLmM3R7f.mjs").then((n) => n.n);
+					const { loadSeed } = await import("../load-DPtY9cZo.mjs").then((n) => n.r);
+					const { validateSeed } = await import("../validate-D8VPn4Hv.mjs").then((n) => n.n);
 					const seed = await loadSeed();
 					if (validateSeed(seed).valid) {
 						await applySeed(db, seed, { onConflict: "skip" });
@@ -1668,7 +1674,8 @@ var EmDashRuntime = class EmDashRuntime {
 		}, siteInfo));
 		if (!sandboxRunner) return sandboxedPluginCache;
 		if (!sandboxRunner.isAvailable()) {
-			console.warn("EmDash: Plugin sandbox is configured but not available on this platform. Sandboxed plugins will not be loaded. If using @emdash-cms/sandbox-workerd/sandbox, ensure workerd is installed.");
+			const reason = sandboxRunner.unavailableReason?.();
+			console.warn(reason ? `EmDash: Plugin sandbox is configured but not available on this platform: ${reason}. Sandboxed plugins will not be loaded.` : "EmDash: Plugin sandbox is configured but not available on this platform. Sandboxed plugins will not be loaded. If using @emdash-cms/sandbox-workerd/sandbox, ensure workerd is installed.");
 			return sandboxedPluginCache;
 		}
 		if (deps.sandboxedPluginEntries.length === 0) return sandboxedPluginCache;
@@ -1989,7 +1996,8 @@ var EmDashRuntime = class EmDashRuntime {
 			locales: i18nConfig.locales,
 			prefixDefaultLocale: i18nConfig.prefixDefaultLocale
 		} : void 0;
-		const registry = normalizeRegistryConfig(this.config.experimental?.registry) ?? void 0;
+		const { registry, error: registryConfigurationError } = resolveManifestRegistryConfig(this.config.experimental?.registry);
+		if (registryConfigurationError) console.error(`EmDash registry configuration error in ${registryConfigurationError.field} (${registryConfigurationError.code})`);
 		return {
 			version: VERSION,
 			commit: COMMIT,
@@ -2005,7 +2013,8 @@ var EmDashRuntime = class EmDashRuntime {
 				implicit: i18nConfig === null
 			},
 			marketplace: !!this.config.marketplace,
-			registry
+			registry,
+			registryConfigurationError
 		};
 	}
 	/**
@@ -2105,17 +2114,18 @@ var EmDashRuntime = class EmDashRuntime {
 		}
 	}
 	async handleContentCreate(collection, body) {
+		const actor = body.actor ? { ...body.actor } : void 0;
 		let processedData = body.data;
 		if (this.hooks.hasHooks("content:beforeSave")) try {
-			processedData = (await this.hooks.runContentBeforeSave(body.data, collection, true)).content;
+			processedData = (await this.hooks.runContentBeforeSave(body.data, collection, true, void 0, actor)).content;
 		} catch (error) {
 			return beforeSaveFailure(error);
 		}
-		const sandboxResult = await this.runSandboxedBeforeSave(processedData, collection, true);
+		const sandboxResult = await this.runSandboxedBeforeSave(processedData, collection, true, void 0, actor);
 		if (!sandboxResult.success) return sandboxResult;
 		processedData = sandboxResult.data;
 		processedData = await this.normalizeMediaFields(collection, processedData);
-		const { validateContentData } = await import("../validation-BMImFJ11.mjs");
+		const { validateContentData } = await import("../validation-CzMJn9Ku.mjs");
 		const validation = await validateContentData(this.db, collection, processedData, { partial: false });
 		if (!validation.ok) return {
 			success: false,
@@ -2128,10 +2138,11 @@ var EmDashRuntime = class EmDashRuntime {
 			bylines: body.bylines
 		});
 		if (result.success && result.data) await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
-		if (result.success && result.data) this.runAfterSaveHooks(contentItemToRecord(result.data.item), collection, true);
+		if (result.success && result.data) this.runAfterSaveHooks(contentItemToRecord(result.data.item), collection, true, actor);
 		return result;
 	}
 	async handleContentUpdate(collection, id, body) {
+		const actor = body.actor ? { ...body.actor } : void 0;
 		const repo = new ContentRepository(this.db);
 		const resolvedItem = await repo.findByIdOrSlug(collection, id, body.locale);
 		const resolvedId = resolvedItem?.id ?? id;
@@ -2152,19 +2163,19 @@ var EmDashRuntime = class EmDashRuntime {
 				}
 			};
 		}
-		const { _rev: _discardedRev, ...bodyWithoutRev } = body;
+		const { _rev: _discardedRev, actor: _discardedActor, ...bodyWithoutRev } = body;
 		let processedData = bodyWithoutRev.data;
 		if (bodyWithoutRev.data) {
 			if (this.hooks.hasHooks("content:beforeSave")) try {
-				processedData = (await this.hooks.runContentBeforeSave(bodyWithoutRev.data, collection, false, resolvedItem?.id)).content;
+				processedData = (await this.hooks.runContentBeforeSave(bodyWithoutRev.data, collection, false, resolvedItem?.id, actor)).content;
 			} catch (error) {
 				return beforeSaveFailure(error);
 			}
-			const sandboxResult = await this.runSandboxedBeforeSave(processedData, collection, false, resolvedItem?.id);
+			const sandboxResult = await this.runSandboxedBeforeSave(processedData, collection, false, resolvedItem?.id, actor);
 			if (!sandboxResult.success) return sandboxResult;
 			processedData = sandboxResult.data;
 			processedData = await this.normalizeMediaFields(collection, processedData);
-			const { validateContentData } = await import("../validation-BMImFJ11.mjs");
+			const { validateContentData } = await import("../validation-CzMJn9Ku.mjs");
 			const validation = await validateContentData(this.db, collection, processedData, { partial: true });
 			if (!validation.ok) return {
 				success: false,
@@ -2191,7 +2202,7 @@ var EmDashRuntime = class EmDashRuntime {
 						collection,
 						entryId: resolvedId,
 						data: mergedData,
-						authorId: bodyWithoutRev.authorId ?? void 0
+						authorId: actor?.id
 					});
 					let staged;
 					try {
@@ -2249,23 +2260,14 @@ var EmDashRuntime = class EmDashRuntime {
 		const hydrated = await this.hydrateDraftData(result);
 		if (hydrated.success && hydrated.data) {
 			const contentIdsToRefresh = [resolvedId];
-			if (!usesDraftRevisions && processedData) try {
-				contentIdsToRefresh.push(...await findNonTranslatableSiblingContentIds(this.db, collection, resolvedId, hydrated.data.item.translationGroup, processedData));
-			} catch (error) {
-				console.error(`[media-usage] Failed to discover synced i18n siblings for ${collection}/${resolvedId}:`, error);
-				try {
-					await markContentMediaUsageCollectionStale(this.db, collection, "CONTENT_USAGE_REFRESH_ERROR");
-				} catch (staleError) {
-					console.error(`[media-usage] Failed to mark ${collection} stale:`, staleError);
-				}
-			}
+			if (!usesDraftRevisions && processedData) contentIdsToRefresh.push(...await this.findSyncedSiblingsForUsageRefresh(collection, resolvedId, hydrated.data.item.translationGroup, processedData));
 			await this.refreshContentUsageAfterSuccessfulWrite(collection, contentIdsToRefresh);
 		} else if (draftStorageChanged) try {
 			await markContentMediaUsageCollectionStale(this.db, collection, "CONTENT_USAGE_STALE");
 		} catch (error) {
 			console.error(`[media-usage] Failed to mark ${collection} stale:`, error);
 		}
-		if (hydrated.success && hydrated.data) this.runAfterSaveHooks(contentItemToRecord(hydrated.data.item), collection, false);
+		if (hydrated.success && hydrated.data) this.runAfterSaveHooks(contentItemToRecord(hydrated.data.item), collection, false, actor);
 		if (hydrated.success) return {
 			...hydrated,
 			liveContentChanged
@@ -2320,7 +2322,10 @@ var EmDashRuntime = class EmDashRuntime {
 	}
 	async handleContentPublish(collection, id, options = {}) {
 		const result = await handleContentPublish(this.db, collection, id, options);
-		if (result.success && result.data) await this.refreshContentUsageAfterSuccessfulWrite(collection, [result.data.item.id]);
+		if (result.success && result.data) {
+			const { item } = result.data;
+			await this.refreshContentUsageAfterSuccessfulWrite(collection, [item.id, ...await this.findSyncedSiblingsForUsageRefresh(collection, item.id, item.translationGroup, item.data, { absentAsCleared: true })]);
+		}
 		if (result.success && result.data) this.runAfterPublishHooks(contentItemToRecord(result.data.item), collection);
 		return result;
 	}
@@ -2483,6 +2488,19 @@ var EmDashRuntime = class EmDashRuntime {
 			};
 		}
 	}
+	async findSyncedSiblingsForUsageRefresh(collection, contentId, translationGroup, data, options = {}) {
+		try {
+			return await findNonTranslatableSiblingContentIds(this.db, collection, contentId, translationGroup, data, options);
+		} catch (error) {
+			console.error(`[media-usage] Failed to discover synced i18n siblings for ${collection}/${contentId}:`, error);
+			try {
+				await markContentMediaUsageCollectionStale(this.db, collection, "CONTENT_USAGE_REFRESH_ERROR");
+			} catch (staleError) {
+				console.error(`[media-usage] Failed to mark ${collection} stale:`, staleError);
+			}
+			return [];
+		}
+	}
 	async refreshContentUsageAfterSuccessfulWrite(collection, contentIds) {
 		for (const contentId of new Set(contentIds)) try {
 			if ((await processMediaUsageWorkAfterWrite(this.db, collection, contentId)).outcome !== "inactive") continue;
@@ -2736,7 +2754,7 @@ var EmDashRuntime = class EmDashRuntime {
 		}
 		return result;
 	}
-	async runSandboxedBeforeSave(content, collection, isNew, contentId) {
+	async runSandboxedBeforeSave(content, collection, isNew, contentId, actor) {
 		let result = content;
 		for (const [pluginKey, plugin] of this.sandboxedPlugins) {
 			const [id] = pluginKey.split(":");
@@ -2748,6 +2766,7 @@ var EmDashRuntime = class EmDashRuntime {
 					isNew
 				};
 				if (contentId !== void 0) event.id = contentId;
+				if (actor !== void 0) event.actor = { ...actor };
 				const hookResult = await plugin.invokeHook("content:beforeSave", event);
 				const inspection = inspectSandboxHookResult(hookResult);
 				if (inspection.kind === "error") return {
@@ -2807,10 +2826,10 @@ var EmDashRuntime = class EmDashRuntime {
 		}
 		return true;
 	}
-	runAfterSaveHooks(content, collection, isNew) {
+	runAfterSaveHooks(content, collection, isNew, actor) {
 		after(async () => {
 			if (this.hooks.hasHooks("content:afterSave")) try {
-				await this.hooks.runContentAfterSave(content, collection, isNew);
+				await this.hooks.runContentAfterSave(content, collection, isNew, actor);
 			} catch (err) {
 				console.error("EmDash afterSave hook error:", err);
 			}
@@ -2820,11 +2839,13 @@ var EmDashRuntime = class EmDashRuntime {
 				if (!id || !this.isPluginEnabled(id)) continue;
 				tasks.push((async () => {
 					try {
-						await plugin.invokeHook("content:afterSave", {
+						const event = {
 							content,
 							collection,
 							isNew
-						});
+						};
+						if (actor !== void 0) event.actor = { ...actor };
+						await plugin.invokeHook("content:afterSave", event);
 					} catch (err) {
 						console.error(`EmDash: Sandboxed plugin ${id} afterSave error:`, err);
 					}
@@ -3654,6 +3675,12 @@ function migrationRequiredResponse() {
 		headers: { "Retry-After": "60" }
 	});
 }
+function runtimeConfigurationErrorResponse(error, pathname) {
+	if (!pathname.startsWith("/_emdash/api/")) return null;
+	if (error instanceof EmDashConfigurationError) return apiError(error.code, error.message, 500);
+	if (error instanceof EmDashStorageError && error.code === "BINDING_NOT_FOUND") return apiError(error.code, error.message, 500);
+	return null;
+}
 /**
 * Baseline security headers applied to all responses.
 * Admin routes get additional headers (strict CSP) from auth middleware.
@@ -3790,7 +3817,7 @@ const onRequest = defineMiddleware(async (context, next) => {
 				if (migrationMode === "auto" && !isSetupVerified() && !context.isPrerendered) {
 					const t0 = performance.now();
 					try {
-						const { getDb } = await import("../loader-Z8vl7zTq.mjs").then((n) => n.c);
+						const { getDb } = await import("../loader-WJi6GFRn.mjs").then((n) => n.c);
 						await (await getDb()).selectFrom("_emdash_migrations").selectAll().limit(1).execute();
 						markSetupVerified();
 					} catch (error) {
@@ -3969,6 +3996,8 @@ const onRequest = defineMiddleware(async (context, next) => {
 					return migrationRequiredResponse();
 				}
 				console.error("EmDash middleware error:", error);
+				const configurationError = runtimeConfigurationErrorResponse(error, url.pathname);
+				if (configurationError) return configurationError;
 			}
 			const lastContentWriteAt = canUseCachedBinding && config?.database?.needsLastContentWriteAt ? await getLastContentWriteAt() : void 0;
 			const scoped = createRequestScopedDb$1({