emdash 0.41.0 → 0.42.0

package/dist/cli/index.mjs

@@ -1,6 +1,5 @@
 #!/usr/bin/env node
-import { a as getMigrationStatus, c as formatDatetimeStorageReport, i as getExactMigrationStatus, l as scanDatetimeStorage, s as runMigrations, u as __exportAll } from "../runner-B3eyB9Gb.mjs";
-import { t as EmDashDatabaseError } from "../errors-9P_FDrJ_.mjs";
+import { a as getMigrationStatus, c as formatDatetimeStorageReport, i as getExactMigrationStatus, l as scanDatetimeStorage, s as runMigrations, u as __exportAll } from "../runner-CLpxmhl8.mjs";
 import { n as isMissingTableError } from "../db-errors-CBD5yMro.mjs";
 import { busyLockHeldSince, migrationLockHeldMessage } from "../database/migration-lock.mjs";
 import { t as validateIdentifier } from "../validate-DANX1-Qi.mjs";
@@ -11,72 +10,69 @@ import "../after-PcEvMY_6.mjs";
 import { t as OptionsRepository } from "../options-DhrI7eMv.mjs";
 import { a as encodeBase64url } from "../base64-DvnNgP7e.mjs";
 import { n as fingerprintKey, r as generateEncryptionKey, t as EmDashSecretsError } from "../secrets-CIi0nFiR.mjs";
-import { t as ContentRepository } from "../content-CbnufDsM.mjs";
-import "../object-cache-CqWNY5uP.mjs";
+import { t as ContentRepository } from "../content-RzEXY3QX.mjs";
+import "../object-cache-Bo6DGaC9.mjs";
 import { n as slugify } from "../slugify-T5GHH42D.mjs";
-import "../types-aOOxRSx6.mjs";
-import "../revision-j1p4-bOj.mjs";
-import { t as MediaRepository } from "../media-BUQePMxP.mjs";
-import { t as TaxonomyRepository } from "../taxonomy-CKDwM61Y.mjs";
-import "../resolve-C0s1E_fH.mjs";
-import "../redirect-D1ArbO85.mjs";
-import "../request-cache-iHRlHx1d.mjs";
-import "../byline-registry-B_EK_TQf.mjs";
-import "../field-defs-cache-CsZctvbu.mjs";
-import { t as BylineRepository } from "../byline-BayaYGoj.mjs";
-import "../staged-C36IWXff.mjs";
-import "../dist-FPR93_xf.mjs";
-import "../fts-manager-CCaZTp8y.mjs";
-import { h as selectTaxonomyDefs, p as parseTaxonomyCollections } from "../loader-CrRPfkHS.mjs";
-import { kyselyLogOption } from "../database/instrumentation.mjs";
-import "../collection-slugs-cache-CUuiduLq.mjs";
-import "../capture-triggers-DJEoOTOq.mjs";
-import "../activation-PtniBLt9.mjs";
-import "../collection-deletion-CLCdXsnV.mjs";
-import { L as BlockTypeRegistry, n as SchemaRegistry } from "../registry-CFcNCayZ.mjs";
-import "../hash-COVK27Pc.mjs";
-import "../zod-generator-DmTKI-Ig.mjs";
-import { r as isTransferError, t as TransferError } from "../errors-Bt3goF8I.mjs";
-import "../canonical-CcSuuTlH.mjs";
-import { d as sha256Hex, i as createSha256, s as packageDigest } from "../digest-DVZ--cE9.mjs";
-import "../block-values-ACFqgB1D.mjs";
-import "../query-OzMJ6vJP.mjs";
-import "../schema-BAayK46S.mjs";
-import "../relations-Cfaa1fDl.mjs";
-import "../settings-DSfE7wOa.mjs";
-import "../schema-Gqcl-8G4.mjs";
-import "../settings-D5EHi0Tk.mjs";
-import { a as pluginManifestBaseSchema } from "../manifest-schema-Ci2gmd0u.mjs";
-import { i as isDeprecatedCapability, t as CAPABILITY_RENAMES } from "../types-OC5c-edM.mjs";
-import "../ssrf-Dv0_tRpo.mjs";
-import { t as applySeed } from "../apply-Do3KNnUk.mjs";
-import "../ssrf-DZOt8Qof.mjs";
-import { n as validateSeed } from "../validate-CfgRpcjA.mjs";
-import { a as MigrationManifestValidationError, c as normalizeAstroI18n, i as getMigrationIntegrationMetadata, n as MIGRATION_CONFIG_SYMBOL, s as validateMigrationManifest, t as buildMigrationManifest } from "../manifest-builder-BQzCHNgB.mjs";
-import "../identity-NVTOOQyq.mjs";
-import { t as openNodeSqliteDatabase } from "../node-sqlite-compat-pWFw0lcc.mjs";
+import "../request-cache-C4CIo5ad.mjs";
+import "../url-Dn3IStq8.mjs";
+import "../types-j6MBDjlZ.mjs";
+import "../revision-CGkQA0e5.mjs";
+import { t as MediaRepository } from "../media-CputjGE1.mjs";
+import { t as TaxonomyRepository } from "../taxonomy-BesdHIwi.mjs";
+import "../resolve-D-kqyKns.mjs";
+import "../redirect-BvFKh8Sz.mjs";
+import "../byline-registry-dvt4N3xV.mjs";
+import "../field-defs-cache-DEkFYCDE.mjs";
+import { t as BylineRepository } from "../byline-02tu_Uc-.mjs";
+import "../staged-Bw5eHbKS.mjs";
+import "../dist-Cfu8mMBs.mjs";
+import "../fts-manager-DU03MxWu.mjs";
+import { h as selectTaxonomyDefs, p as parseTaxonomyCollections } from "../loader-B_bcoE1h.mjs";
+import "../collection-slugs-cache-BNRAPNiu.mjs";
+import "../capture-triggers-CdZfvHtF.mjs";
+import "../activation-DDuqAat2.mjs";
+import "../collection-deletion-JecE26cS.mjs";
+import { L as BlockTypeRegistry, n as SchemaRegistry } from "../registry-CtHRqVe-.mjs";
+import "../hash-CY4QdeMJ.mjs";
+import "../zod-generator-DnfG5sGQ.mjs";
+import { r as isTransferError, t as TransferError } from "../errors-CjXd1LgH.mjs";
+import "../canonical-CAecl1UQ.mjs";
+import { d as sha256Hex, i as createSha256, s as packageDigest } from "../digest-DiYAoZpf.mjs";
+import "../block-values-BrTrtA-v.mjs";
+import "../query-DC3bv__4.mjs";
+import "../schema-BZPj3kwZ.mjs";
+import "../relations-CVI2nbrn.mjs";
+import "../settings-B0zQj_Tj.mjs";
+import "../schema-Berj5VQx.mjs";
+import "../settings-BbVRRGDp.mjs";
+import "../ssrf-DsmvZB80.mjs";
+import { t as applySeed } from "../apply-C1kq5l7p.mjs";
+import "../ssrf-tA45vIPX.mjs";
+import { n as validateSeed } from "../validate-WkjGwBSO.mjs";
+import { a as MigrationManifestValidationError, c as normalizeAstroI18n, i as getMigrationIntegrationMetadata, n as MIGRATION_CONFIG_SYMBOL, s as validateMigrationManifest, t as buildMigrationManifest } from "../manifest-builder-D7Y8iirE.mjs";
+import "../identity-u3KgtUC9.mjs";
+import { n as claimExplicitSeedOwnership } from "../ownership-DoeAIuTg.mjs";
 import { LocalStorage } from "../storage/local.mjs";
-import { t as convertDataForRead } from "../portable-text-DXE8ymtD.mjs";
+import { t as createDatabase } from "../connection-B9pIasFd.mjs";
+import { t as convertDataForRead } from "../portable-text-BnRuiR1-.mjs";
 import { createHeaderAwareFetch, customHeadersInterceptor, getCachedAccessToken, isAccessRedirect, resolveCustomHeaders, runCloudflaredLogin } from "../client/cf-access.mjs";
 import { EmDashApiError, EmDashClient } from "../client/index.mjs";
-import { r as fileExists$4, t as bundleCommand } from "../bundle-Db1iNMv_.mjs";
-import { a as parseIndexLine, n as unpackSitePackage, o as parseManifest, r as decodeUtf8, t as packSitePackage } from "../tar-DsTXX6ch.mjs";
-import "../kinds-CYmRESWj.mjs";
-import { t as MANIFEST_PATH } from "../paths-d51RFm8M.mjs";
-import "../transformations-C7RQabKQ.mjs";
-import "../version-DgYjhTud.mjs";
-import { r as verifyReceiptDigest } from "../receipt-B-aU4hpJ.mjs";
+import { a as parseIndexLine, n as unpackSitePackage, o as parseManifest, r as decodeUtf8, t as packSitePackage } from "../tar-lDI_fzLD.mjs";
+import "../kinds-CXY-fwQ6.mjs";
+import { t as MANIFEST_PATH } from "../paths-DiENGBx5.mjs";
+import "../transformations-DdnpSdeC.mjs";
+import "../version-DbT04wbH.mjs";
+import { r as verifyReceiptDigest } from "../receipt-q1VK9jhj.mjs";
 import { createRequire } from "node:module";
-import { Kysely, SqliteDialect, sql } from "kysely";
+import { sql } from "kysely";
 import { z } from "zod";
 import { ulid } from "ulidx";
-import { createGzipDecoder, unpackTar } from "modern-tar";
 import { pathToFileURL } from "node:url";
 import { access, mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join, parse, resolve } from "node:path";
 import { createReadStream, createWriteStream, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { Readable, Writable } from "node:stream";
-import { defineCommand, runCommand, runMain } from "citty";
+import { defineCommand, runMain } from "citty";
 import consola, { consola as consola$1 } from "consola";
 import pc from "picocolors";
 import { spawn } from "node:child_process";
@@ -241,45 +237,6 @@ function removeCredentials(baseUrl) {
 	}
 	return false;
 }
-function marketplaceKey(registryUrl) {
-	try {
-		return `marketplace:${new URL(registryUrl).origin}`;
-	} catch {
-		return `marketplace:${registryUrl}`;
-	}
-}
-/**
-* Get stored marketplace credential for a registry URL.
-*/
-function getMarketplaceCredential(registryUrl) {
-	const key = marketplaceKey(registryUrl);
-	const cred = readStore()[key];
-	if (!cred || !("token" in cred)) return null;
-	if (new Date(cred.expiresAt) < /* @__PURE__ */ new Date()) return null;
-	return cred;
-}
-/**
-* Save marketplace credential for a registry URL.
-*/
-function saveMarketplaceCredential(registryUrl, cred) {
-	const key = marketplaceKey(registryUrl);
-	const store = readStore();
-	store[key] = cred;
-	writeStore(store);
-}
-/**
-* Remove marketplace credential for a registry URL.
-*/
-function removeMarketplaceCredential(registryUrl) {
-	const key = marketplaceKey(registryUrl);
-	const store = readStore();
-	if (key in store) {
-		delete store[key];
-		writeStore(store);
-		return true;
-	}
-	return false;
-}
 
 //#endregion
 //#region src/cli/client-factory.ts
@@ -731,7 +688,7 @@ const deleteCommand$2 = defineCommand({
 		}
 	}
 });
-const publishCommand$1 = defineCommand({
+const publishCommand = defineCommand({
 	meta: {
 		name: "publish",
 		description: "Publish a content item"
@@ -910,7 +867,7 @@ const contentCommand = defineCommand({
 		create: createCommand$1,
 		update: updateCommand,
 		delete: deleteCommand$2,
-		publish: publishCommand$1,
+		publish: publishCommand,
 		unpublish: unpublishCommand,
 		schedule: scheduleCommand,
 		restore: restoreCommand,
@@ -918,35 +875,6 @@ const contentCommand = defineCommand({
 	}
 });
 
-//#endregion
-//#region src/database/connection.ts
-/**
-* Creates a Kysely database instance
-* Supports:
-* - file:./path/to/db.sqlite (local SQLite)
-* - :memory: (in-memory SQLite for testing)
-* - libsql://... (Turso/libSQL with auth token) - TODO
-*/
-function createDatabase(config) {
-	try {
-		if (config.url.startsWith("file:") || config.url === ":memory:") return new Kysely({
-			dialect: new SqliteDialect({ database: openNodeSqliteDatabase(config.url === ":memory:" ? ":memory:" : config.url.replace("file:", ""), {
-				journalMode: "wal",
-				readOnly: config.readOnly
-			}) }),
-			log: kyselyLogOption()
-		});
-		if (config.url.startsWith("libsql:")) {
-			if (!config.authToken) throw new EmDashDatabaseError("Auth token required for remote libSQL database");
-			throw new EmDashDatabaseError("LibSQL not yet implemented");
-		}
-		throw new EmDashDatabaseError(`Unsupported database URL scheme: ${config.url}`);
-	} catch (error) {
-		if (error instanceof EmDashDatabaseError) throw error;
-		throw new EmDashDatabaseError("Failed to create database", error);
-	}
-}
-
 //#endregion
 //#region src/cli/commands/dev.ts
 /**
@@ -3083,7 +3011,9 @@ async function loadProjectConfig(projectRoot, configFile) {
 		},
 		configFile,
 		projectRoot,
-		"silent"
+		"silent",
+		void 0,
+		"runner"
 	]);
 	if (!isRecord$1(loaded) || !Object.hasOwn(loaded, "config")) throw new MigrationConfigLoaderError(`Vite could not load Astro config: ${configFile}`);
 	return loaded.config;
@@ -3566,789 +3496,6 @@ const migrateCommand = defineCommand({
 	}
 });
 
-//#endregion
-//#region src/cli/commands/plugin-init.ts
-/**
-* emdash plugin init
-*
-* Scaffold a new EmDash plugin. Generates the sandboxed-format boilerplate:
-*   src/index.ts         -- descriptor factory
-*   src/sandbox-entry.ts -- definePlugin({ hooks, routes })
-*   package.json
-*   tsconfig.json
-*
-* Use --format=native (or --native) to generate native-format boilerplate
-* instead (createPlugin + React admin). When neither is passed and stdout
-* is a TTY, the user is prompted to choose.
-*
-*/
-const SLUG_RE = /^[a-z][a-z0-9]*(-[a-z0-9]+)*$/;
-const SCOPE_RE = /^@[^/]+\//;
-const pluginInitCommand = defineCommand({
-	meta: {
-		name: "init",
-		description: "Scaffold a new plugin"
-	},
-	args: {
-		dir: {
-			type: "string",
-			description: "Directory to create the plugin in (default: current directory)",
-			default: "."
-		},
-		name: {
-			type: "string",
-			description: "Plugin name/id (e.g. my-plugin or @org/my-plugin)"
-		},
-		format: {
-			type: "string",
-			description: "Plugin format: sandboxed or native. Prompts when running interactively if not set.",
-			valueHint: "sandboxed|native"
-		},
-		native: {
-			type: "boolean",
-			description: "Shortcut for --format=native",
-			default: false
-		}
-	},
-	async run({ args }) {
-		const targetDir = resolve(args.dir);
-		const format = await resolveFormat(args.format, args.native);
-		if (!format) {
-			consola.info("Cancelled");
-			return;
-		}
-		const isNative = format === "native";
-		let pluginName = args.name || basename(targetDir);
-		if (!pluginName || pluginName === ".") pluginName = basename(resolve("."));
-		const slug = pluginName.replace(SCOPE_RE, "");
-		if (!SLUG_RE.test(slug)) {
-			consola.error(`Invalid plugin name "${pluginName}". Use lowercase letters, numbers, and hyphens (e.g. my-plugin).`);
-			process.exit(1);
-		}
-		const srcDir = join(targetDir, "src");
-		if (await fileExists$4(join(targetDir, "package.json"))) {
-			consola.error(`package.json already exists in ${targetDir}`);
-			process.exit(1);
-		}
-		consola.start(`Scaffolding ${isNative ? "native" : "sandboxed"} plugin: ${pluginName}`);
-		await mkdir(srcDir, { recursive: true });
-		if (isNative) await scaffoldNative(targetDir, srcDir, pluginName, slug);
-		else await scaffoldStandard(targetDir, srcDir, pluginName, slug);
-		consola.success(`Plugin scaffolded in ${targetDir}`);
-		consola.info("Next steps:");
-		const steps = [];
-		if (args.dir !== ".") steps.push(`cd ${args.dir}`);
-		steps.push("pnpm install");
-		steps.push(isNative ? "Edit src/index.ts to add hooks and routes" : "Edit src/sandbox-entry.ts to add hooks and routes");
-		steps.push("pnpm build");
-		if (!isNative) steps.push("emdash plugin validate --dir .");
-		steps.forEach((step, i) => consola.info(`  ${i + 1}. ${step}`));
-	}
-});
-async function resolveFormat(formatArg, nativeFlag) {
-	if (formatArg) {
-		const normalized = formatArg.toLowerCase();
-		let parsed;
-		if (normalized === "native") parsed = "native";
-		else if (normalized === "sandboxed" || normalized === "standard") parsed = "standard";
-		else {
-			consola.error(`Invalid --format "${formatArg}". Use "sandboxed" or "native".`);
-			process.exit(1);
-		}
-		if (nativeFlag && parsed !== "native") {
-			consola.error(`Conflicting flags: --native and --format=${formatArg}. Pass only one.`);
-			process.exit(1);
-		}
-		return parsed;
-	}
-	if (nativeFlag) return "native";
-	if (!process.stdout.isTTY) return "standard";
-	const choice = await consola.prompt("Which plugin format?", {
-		type: "select",
-		initial: "standard",
-		options: [{
-			label: "Sandboxed",
-			value: "standard",
-			hint: "runs in an isolated sandbox; safe to install from the marketplace"
-		}, {
-			label: "Native",
-			value: "native",
-			hint: "full runtime access; install from npm"
-		}],
-		cancel: "null"
-	});
-	if (choice === null) return null;
-	return choice;
-}
-function camelCase(slug) {
-	return slug.split("-").map((s, i) => i === 0 ? s : s[0].toUpperCase() + s.slice(1)).join("");
-}
-function pascalCase(slug) {
-	return slug.split("-").map((s) => s[0].toUpperCase() + s.slice(1)).join("");
-}
-const TSCONFIG = {
-	compilerOptions: {
-		target: "ES2022",
-		module: "preserve",
-		moduleResolution: "bundler",
-		strict: true,
-		esModuleInterop: true,
-		declaration: true,
-		outDir: "./dist",
-		rootDir: "./src"
-	},
-	include: ["src/**/*"],
-	exclude: ["node_modules", "dist"]
-};
-const TSDOWN_VERSION = "^0.20.0";
-const TYPESCRIPT_VERSION = "^5.9.0";
-async function scaffoldStandard(targetDir, srcDir, pluginName, slug) {
-	const fnName = camelCase(slug);
-	await writeFile(join(targetDir, "package.json"), JSON.stringify({
-		name: pluginName,
-		version: "0.1.0",
-		type: "module",
-		main: "./dist/index.mjs",
-		exports: {
-			".": {
-				types: "./dist/index.d.mts",
-				import: "./dist/index.mjs"
-			},
-			"./sandbox": {
-				types: "./dist/sandbox-entry.d.mts",
-				import: "./dist/sandbox-entry.mjs"
-			}
-		},
-		files: ["dist"],
-		scripts: {
-			build: "tsdown src/index.ts src/sandbox-entry.ts --format esm --dts --clean",
-			dev: "tsdown src/index.ts src/sandbox-entry.ts --format esm --dts --watch",
-			typecheck: "tsc --noEmit"
-		},
-		keywords: ["emdash", "emdash-plugin"],
-		license: "MIT",
-		peerDependencies: { emdash: "*" },
-		devDependencies: {
-			emdash: "*",
-			tsdown: TSDOWN_VERSION,
-			typescript: TYPESCRIPT_VERSION
-		}
-	}, null, "	") + "\n");
-	await writeFile(join(targetDir, "tsconfig.json"), JSON.stringify(TSCONFIG, null, "	") + "\n");
-	await writeFile(join(srcDir, "index.ts"), `import type { PluginDescriptor } from "emdash";
-
-export function ${fnName}Plugin(): PluginDescriptor {
-\treturn {
-\t\tid: "${slug}",
-\t\tversion: "0.1.0",
-\t\tformat: "standard",
-\t\tentrypoint: "${pluginName}/sandbox",
-
-\t\tcapabilities: ["content:read"],
-\t\tstorage: {
-\t\t\tevents: { indexes: ["timestamp"] },
-\t\t},
-\t};
-}
-`);
-	await writeFile(join(srcDir, "sandbox-entry.ts"), `import { definePlugin } from "emdash";
-import type { PluginContext } from "emdash";
-
-interface ContentSaveEvent {
-\tcollection: string;
-\tcontent: { id: string };
-\tisNew: boolean;
-}
-
-export default definePlugin({
-\thooks: {
-\t\t"content:afterSave": {
-\t\t\thandler: async (event: ContentSaveEvent, ctx: PluginContext) => {
-\t\t\t\tctx.log.info("Content saved", {
-\t\t\t\t\tcollection: event.collection,
-\t\t\t\t\tid: event.content.id,
-\t\t\t\t});
-
-\t\t\t\tawait ctx.storage.events.put(\`save-\${Date.now()}\`, {
-\t\t\t\t\ttimestamp: new Date().toISOString(),
-\t\t\t\t\tcollection: event.collection,
-\t\t\t\t\tcontentId: event.content.id,
-\t\t\t\t});
-\t\t\t},
-\t\t},
-\t},
-
-\troutes: {
-\t\trecent: {
-\t\t\thandler: async (_routeCtx, ctx: PluginContext) => {
-\t\t\t\tconst result = await ctx.storage.events.query({
-\t\t\t\t\torderBy: { timestamp: "desc" },
-\t\t\t\t\tlimit: 10,
-\t\t\t\t});
-\t\t\t\treturn { events: result.items };
-\t\t\t},
-\t\t},
-\t},
-});
-`);
-}
-async function scaffoldNative(targetDir, srcDir, pluginName, slug) {
-	const fnName = camelCase(slug);
-	const typeName = pascalCase(slug);
-	await writeFile(join(targetDir, "package.json"), JSON.stringify({
-		name: pluginName,
-		version: "0.1.0",
-		type: "module",
-		main: "./dist/index.mjs",
-		exports: { ".": {
-			types: "./dist/index.d.mts",
-			import: "./dist/index.mjs"
-		} },
-		files: ["dist"],
-		scripts: {
-			build: "tsdown src/index.ts --format esm --dts --clean",
-			dev: "tsdown src/index.ts --format esm --dts --watch",
-			typecheck: "tsc --noEmit"
-		},
-		keywords: ["emdash", "emdash-plugin"],
-		license: "MIT",
-		peerDependencies: { emdash: "*" },
-		devDependencies: {
-			emdash: "*",
-			tsdown: TSDOWN_VERSION,
-			typescript: TYPESCRIPT_VERSION
-		}
-	}, null, "	") + "\n");
-	await writeFile(join(targetDir, "tsconfig.json"), JSON.stringify(TSCONFIG, null, "	") + "\n");
-	await writeFile(join(srcDir, "index.ts"), `import { definePlugin } from "emdash";
-import type { PluginDescriptor } from "emdash";
-
-export interface ${typeName}Options {
-\tenabled?: boolean;
-}
-
-export function ${fnName}Plugin(options: ${typeName}Options = {}): PluginDescriptor<${typeName}Options> {
-\treturn {
-\t\tid: "${slug}",
-\t\tversion: "0.1.0",
-\t\tformat: "native",
-\t\tentrypoint: "${pluginName}",
-\t\toptions,
-\t};
-}
-
-export function createPlugin(options: ${typeName}Options = {}) {
-\treturn definePlugin({
-\t\tid: "${slug}",
-\t\tversion: "0.1.0",
-
-\t\tcapabilities: ["content:read"],
-\t\tstorage: {
-\t\t\tevents: { indexes: ["createdAt"] },
-\t\t},
-
-\t\thooks: {
-\t\t\t"content:afterSave": async (event, ctx) => {
-\t\t\t\tif (options.enabled === false) return;
-\t\t\t\tawait ctx.storage.events.put(\`evt_\${Date.now()}\`, {
-\t\t\t\t\tcollection: event.collection,
-\t\t\t\t\tcontentId: event.content.id,
-\t\t\t\t\tcreatedAt: new Date().toISOString(),
-\t\t\t\t});
-\t\t\t},
-\t\t},
-
-\t\troutes: {
-\t\t\trecent: {
-\t\t\t\thandler: async (ctx) => {
-\t\t\t\t\tconst result = await ctx.storage.events.query({
-\t\t\t\t\t\torderBy: { createdAt: "desc" },
-\t\t\t\t\t\tlimit: 10,
-\t\t\t\t\t});
-\t\t\t\t\treturn { events: result.items };
-\t\t\t\t},
-\t\t\t},
-\t\t},
-\t});
-}
-
-export default createPlugin;
-`);
-}
-
-//#endregion
-//#region src/cli/commands/plugin-validate.ts
-/**
-* emdash plugin validate
-*
-* Runs bundle validation without producing a tarball.
-* Thin wrapper around `emdash plugin bundle --validate-only`.
-*
-*/
-const pluginValidateCommand = defineCommand({
-	meta: {
-		name: "validate",
-		description: "Validate a plugin without producing a tarball (same checks as bundle)"
-	},
-	args: { dir: {
-		type: "string",
-		description: "Plugin directory (default: current directory)",
-		default: "."
-	} },
-	async run({ args }) {
-		await runCommand(bundleCommand, { rawArgs: [
-			"--dir",
-			args.dir,
-			"--validateOnly"
-		] });
-	}
-});
-
-//#endregion
-//#region src/cli/commands/publish.ts
-/**
-* emdash plugin publish
-*
-* Publishes a plugin tarball to the EmDash Marketplace.
-*
-* Flow:
-* 1. Resolve tarball (from --tarball path, or build via `emdash plugin bundle`)
-* 2. Read manifest.json from tarball to show summary
-* 3. Authenticate (stored credential or GitHub device flow)
-* 4. Pre-publish validation (check plugin exists, version not published)
-* 5. Upload via multipart POST
-* 6. Display audit results
-*/
-const DEFAULT_REGISTRY = "https://marketplace.emdashcms.com";
-/**
-* Authenticate with the marketplace via GitHub Device Flow.
-* Returns the marketplace JWT and author info.
-*/
-async function authenticateViaDeviceFlow(registryUrl) {
-	consola.start("Fetching auth configuration...");
-	const discoveryRes = await fetch(new URL("/api/v1/auth/discovery", registryUrl));
-	if (!discoveryRes.ok) throw new Error(`Marketplace unreachable: ${discoveryRes.status} ${discoveryRes.statusText}`);
-	const discovery = await discoveryRes.json();
-	const deviceRes = await fetch(discovery.github.deviceAuthorizationEndpoint, {
-		method: "POST",
-		headers: {
-			"Content-Type": "application/json",
-			Accept: "application/json"
-		},
-		body: JSON.stringify({
-			client_id: discovery.github.clientId,
-			scope: "read:user user:email"
-		})
-	});
-	if (!deviceRes.ok) throw new Error(`GitHub device flow failed: ${deviceRes.status}`);
-	const deviceCode = await deviceRes.json();
-	console.log();
-	consola.info("Open your browser to:");
-	console.log(`  ${pc.cyan(pc.bold(deviceCode.verification_uri))}`);
-	console.log();
-	consola.info(`Enter code: ${pc.yellow(pc.bold(deviceCode.user_code))}`);
-	console.log();
-	try {
-		const { execFile } = await import("node:child_process");
-		if (process.platform === "darwin") execFile("open", [deviceCode.verification_uri]);
-		else if (process.platform === "win32") execFile("cmd", [
-			"/c",
-			"start",
-			"",
-			deviceCode.verification_uri
-		]);
-		else execFile("xdg-open", [deviceCode.verification_uri]);
-	} catch {}
-	consola.start("Waiting for authorization...");
-	const githubToken = await pollGitHubDeviceFlow(discovery.github.tokenEndpoint, discovery.github.clientId, deviceCode.device_code, deviceCode.interval, deviceCode.expires_in);
-	consola.start("Authenticating with marketplace...");
-	const deviceTokenUrl = new URL(discovery.marketplace.deviceTokenEndpoint, registryUrl);
-	const authRes = await fetch(deviceTokenUrl, {
-		method: "POST",
-		headers: { "Content-Type": "application/json" },
-		body: JSON.stringify({ access_token: githubToken })
-	});
-	if (!authRes.ok) {
-		const body = await authRes.json().catch(() => ({}));
-		throw new Error(`Marketplace auth failed: ${body.error ?? authRes.statusText}`);
-	}
-	return await authRes.json();
-}
-async function pollGitHubDeviceFlow(tokenEndpoint, clientId, deviceCode, interval, expiresIn) {
-	const deadline = Date.now() + expiresIn * 1e3;
-	let currentInterval = interval;
-	while (Date.now() < deadline) {
-		await new Promise((r) => setTimeout(r, currentInterval * 1e3));
-		const body = await (await fetch(tokenEndpoint, {
-			method: "POST",
-			headers: {
-				"Content-Type": "application/json",
-				Accept: "application/json"
-			},
-			body: JSON.stringify({
-				client_id: clientId,
-				device_code: deviceCode,
-				grant_type: "urn:ietf:params:oauth:grant-type:device_code"
-			})
-		})).json();
-		if (body.access_token) return body.access_token;
-		if (body.error === "authorization_pending") continue;
-		if (body.error === "slow_down") {
-			currentInterval = body.interval ?? currentInterval + 5;
-			continue;
-		}
-		if (body.error === "expired_token") throw new Error("Device code expired. Please try again.");
-		if (body.error === "access_denied") throw new Error("Authorization was denied.");
-		throw new Error(`GitHub token exchange failed: ${body.error ?? "unknown error"}`);
-	}
-	throw new Error("Device code expired (timeout). Please try again.");
-}
-const manifestSummarySchema = pluginManifestBaseSchema.pick({
-	id: true,
-	version: true,
-	capabilities: true,
-	allowedHosts: true
-});
-/**
-* Read manifest.json from a tarball without fully extracting it.
-*/
-async function readManifestFromTarball(tarballPath) {
-	const data = await readFile(tarballPath);
-	const manifest = (await unpackTar(new ReadableStream({ start(controller) {
-		controller.enqueue(new Uint8Array(data.buffer, data.byteOffset, data.byteLength));
-		controller.close();
-	} }).pipeThrough(createGzipDecoder()), { filter: (header) => header.name === "manifest.json" })).find((e) => e.header.name === "manifest.json");
-	if (!manifest?.data) throw new Error("Tarball does not contain manifest.json");
-	const content = new TextDecoder().decode(manifest.data);
-	const parsed = JSON.parse(content);
-	const result = manifestSummarySchema.safeParse(parsed);
-	if (!result.success) throw new Error(`Invalid manifest.json: ${result.error.message}`);
-	return result.data;
-}
-const POLL_INTERVAL_MS = 3e3;
-const POLL_TIMEOUT_MS = 12e4;
-/**
-* Poll the version endpoint until status leaves "pending" or timeout.
-* Returns the final version data, or null on timeout.
-*/
-async function pollVersionStatus(versionUrl, token) {
-	const deadline = Date.now() + POLL_TIMEOUT_MS;
-	while (Date.now() < deadline) {
-		await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
-		try {
-			const res = await fetch(versionUrl, { headers: { Authorization: `Bearer ${token}` } });
-			if (!res.ok) continue;
-			const data = await res.json();
-			if (data.status !== "pending") return data;
-		} catch {}
-	}
-	return null;
-}
-function displayAuditResults(version) {
-	const statusColor = version.status === "published" ? pc.green : version.status === "flagged" ? pc.yellow : pc.red;
-	consola.info(`  Status: ${statusColor(version.status)}`);
-	if (version.audit_verdict) {
-		const verdictColor = version.audit_verdict === "pass" ? pc.green : version.audit_verdict === "warn" ? pc.yellow : pc.red;
-		consola.info(`  Audit: ${verdictColor(version.audit_verdict)}`);
-	}
-	if (version.image_audit_verdict) {
-		const verdictColor = version.image_audit_verdict === "pass" ? pc.green : version.image_audit_verdict === "warn" ? pc.yellow : pc.red;
-		consola.info(`  Image audit: ${verdictColor(version.image_audit_verdict)}`);
-	}
-}
-function displayInlineAuditResults(audit, imageAudit) {
-	const verdictColor = audit.verdict === "pass" ? pc.green : audit.verdict === "warn" ? pc.yellow : pc.red;
-	consola.info(`  Audit: ${verdictColor(audit.verdict)} (risk: ${audit.riskScore}/100)`);
-	if (audit.findings.length > 0) for (const finding of audit.findings) {
-		const icon = finding.severity === "high" ? pc.red("!") : pc.yellow("~");
-		consola.info(`    ${icon} [${finding.category}] ${finding.description}`);
-	}
-	if (imageAudit) {
-		const imgColor = imageAudit.verdict === "pass" ? pc.green : imageAudit.verdict === "warn" ? pc.yellow : pc.red;
-		consola.info(`  Image audit: ${imgColor(imageAudit.verdict)}`);
-	}
-}
-const publishCommand = defineCommand({
-	meta: {
-		name: "publish",
-		description: "Publish a plugin to the EmDash Marketplace"
-	},
-	args: {
-		tarball: {
-			type: "string",
-			description: "Path to plugin tarball (default: build first via `emdash plugin bundle`)"
-		},
-		dir: {
-			type: "string",
-			description: "Plugin directory (used with --build, default: current directory)",
-			default: process.cwd()
-		},
-		build: {
-			type: "boolean",
-			description: "Build the plugin before publishing",
-			default: false
-		},
-		registry: {
-			type: "string",
-			description: "Marketplace registry URL",
-			default: DEFAULT_REGISTRY
-		},
-		"no-wait": {
-			type: "boolean",
-			description: "Exit immediately after upload without waiting for audit (useful for CI)",
-			default: false
-		}
-	},
-	async run({ args }) {
-		const registryUrl = args.registry;
-		let tarballPath;
-		if (args.tarball) tarballPath = resolve(args.tarball);
-		else if (args.build) {
-			consola.start("Building plugin...");
-			const pluginDir = resolve(args.dir);
-			try {
-				const { runCommand } = await import("citty");
-				const { bundleCommand } = await import("../bundle-Db1iNMv_.mjs").then((n) => n.n);
-				await runCommand(bundleCommand, { rawArgs: ["--dir", pluginDir] });
-			} catch {
-				consola.error("Build failed");
-				process.exit(1);
-			}
-			const { readdir } = await import("node:fs/promises");
-			const distDir = resolve(pluginDir, "dist");
-			const tarball = (await readdir(distDir)).find((f) => f.endsWith(".tar.gz"));
-			if (!tarball) {
-				consola.error("Build succeeded but no .tar.gz found in dist/");
-				process.exit(1);
-			}
-			tarballPath = resolve(distDir, tarball);
-		} else {
-			const pluginDir = resolve(args.dir);
-			const { readdir } = await import("node:fs/promises");
-			try {
-				const distDir = resolve(pluginDir, "dist");
-				const tarball = (await readdir(distDir)).find((f) => f.endsWith(".tar.gz"));
-				if (tarball) tarballPath = resolve(distDir, tarball);
-				else {
-					consola.error("No tarball found. Run `emdash plugin bundle` first or use --build.");
-					process.exit(1);
-				}
-			} catch {
-				consola.error("No dist/ directory found. Run `emdash plugin bundle` first or use --build.");
-				process.exit(1);
-			}
-		}
-		const sizeKB = ((await stat(tarballPath)).size / 1024).toFixed(1);
-		consola.info(`Tarball: ${pc.dim(tarballPath)} (${sizeKB}KB)`);
-		const manifest = await readManifestFromTarball(tarballPath);
-		console.log();
-		consola.info(`Plugin: ${pc.bold(`${manifest.id}@${manifest.version}`)}`);
-		if (manifest.capabilities.length > 0) consola.info(`Capabilities: ${manifest.capabilities.join(", ")}`);
-		if (manifest.allowedHosts?.length) consola.info(`Allowed hosts: ${manifest.allowedHosts.join(", ")}`);
-		console.log();
-		const deprecatedCaps = manifest.capabilities.filter(isDeprecatedCapability);
-		if (deprecatedCaps.length > 0) {
-			consola.error("Plugin declares deprecated capability names. Rename them and re-bundle before publishing:");
-			for (const cap of deprecatedCaps) {
-				const replacement = CAPABILITY_RENAMES[cap];
-				consola.error(`  ${cap} → ${replacement}`);
-			}
-			consola.error("See https://emdashcms.com/docs/plugins/overview#capabilities for the full rename table.");
-			process.exit(1);
-		}
-		let token;
-		const envToken = process.env.EMDASH_MARKETPLACE_TOKEN;
-		const stored = !envToken ? getMarketplaceCredential(registryUrl) : null;
-		if (envToken) {
-			token = envToken;
-			consola.info("Using EMDASH_MARKETPLACE_TOKEN for authentication");
-		} else if (stored) {
-			token = stored.token;
-			consola.info(`Authenticated as ${pc.bold(stored.author?.name ?? "unknown")}`);
-		} else {
-			consola.info("Not logged in to marketplace. Starting GitHub authentication...");
-			const result = await authenticateViaDeviceFlow(registryUrl);
-			token = result.token;
-			saveMarketplaceCredential(registryUrl, {
-				token: result.token,
-				expiresAt: new Date(Date.now() + 30 * 86400 * 1e3).toISOString(),
-				author: {
-					id: result.author.id,
-					name: result.author.name
-				}
-			});
-			consola.success(`Authenticated as ${pc.bold(result.author.name)}`);
-		}
-		consola.start("Checking marketplace...");
-		const pluginRes = await fetch(new URL(`/api/v1/plugins/${manifest.id}`, registryUrl));
-		if (pluginRes.status === 404 && !envToken) {
-			consola.info(`Plugin ${pc.bold(manifest.id)} not found in marketplace. Registering...`);
-			const createRes = await fetch(new URL("/api/v1/plugins", registryUrl), {
-				method: "POST",
-				headers: {
-					"Content-Type": "application/json",
-					Authorization: `Bearer ${token}`
-				},
-				body: JSON.stringify({
-					id: manifest.id,
-					name: manifest.id,
-					capabilities: manifest.capabilities
-				})
-			});
-			if (!createRes.ok) {
-				const body = await createRes.json().catch(() => ({}));
-				if (createRes.status === 401) {
-					removeMarketplaceCredential(registryUrl);
-					consola.error("Authentication expired. Please run `emdash plugin publish` again to re-authenticate.");
-					process.exit(1);
-				}
-				consola.error(`Failed to register plugin: ${body.error ?? createRes.statusText}`);
-				process.exit(1);
-			}
-			consola.success(`Registered ${pc.bold(manifest.id)}`);
-		} else if (pluginRes.status === 404 && envToken) consola.info(`Plugin ${pc.bold(manifest.id)} will be auto-registered on publish`);
-		else if (!pluginRes.ok) {
-			consola.error(`Marketplace error: ${pluginRes.status}`);
-			process.exit(1);
-		}
-		consola.start(`Publishing ${manifest.id}@${manifest.version}...`);
-		const tarballData = await readFile(tarballPath);
-		const formData = new FormData();
-		formData.append("bundle", new Blob([tarballData], { type: "application/gzip" }), basename(tarballPath));
-		const uploadUrl = new URL(`/api/v1/plugins/${manifest.id}/versions`, registryUrl);
-		const uploadRes = await fetch(uploadUrl, {
-			method: "POST",
-			headers: { Authorization: `Bearer ${token}` },
-			body: formData
-		});
-		if (!uploadRes.ok && uploadRes.status !== 202) {
-			const body = await uploadRes.json().catch(() => ({}));
-			if (uploadRes.status === 401) {
-				if (envToken) consola.error("EMDASH_MARKETPLACE_TOKEN was rejected by the marketplace.");
-				else {
-					removeMarketplaceCredential(registryUrl);
-					consola.error("Authentication expired. Please run `emdash plugin publish` again.");
-				}
-				process.exit(1);
-			}
-			if (uploadRes.status === 409) {
-				if (body.latestVersion) consola.error(`Version ${manifest.version} must be greater than ${body.latestVersion}`);
-				else consola.error(body.error ?? "Version conflict");
-				process.exit(1);
-			}
-			if (uploadRes.status === 422 && body.audit) {
-				consola.error("Plugin failed security audit:");
-				consola.error(`  Verdict: ${pc.red(body.audit.verdict)}`);
-				consola.error(`  Summary: ${body.audit.summary}`);
-				process.exit(1);
-			}
-			consola.error(`Publish failed: ${body.error ?? uploadRes.statusText}`);
-			process.exit(1);
-		}
-		const result = await uploadRes.json();
-		console.log();
-		consola.success(`Uploaded ${pc.bold(`${manifest.id}@${result.version}`)}`);
-		consola.info(`  Checksum: ${pc.dim(result.checksum)}`);
-		consola.info(`  Size: ${(result.bundleSize / 1024).toFixed(1)}KB`);
-		if (uploadRes.status === 202) {
-			consola.info(`  Status: ${pc.yellow("pending")} (audit running in background)`);
-			if (args["no-wait"]) {
-				consola.info("Skipping audit wait (--no-wait). Check status later.");
-				console.log();
-				return;
-			}
-			consola.start("Waiting for security audit to complete...");
-			const versionUrl = new URL(`/api/v1/plugins/${manifest.id}/versions/${manifest.version}`, registryUrl);
-			const finalStatus = await pollVersionStatus(versionUrl.toString(), token);
-			if (finalStatus) displayAuditResults(finalStatus);
-			else {
-				consola.warn("Audit did not complete within timeout. Check status later with:");
-				consola.info(`  ${pc.dim(`curl ${versionUrl.toString()}`)}`);
-			}
-		} else {
-			if (result.audit) displayInlineAuditResults(result.audit, result.imageAudit ?? null);
-			consola.info(`  Status: ${pc.green(result.status ?? "published")}`);
-		}
-		console.log();
-	}
-});
-const marketplaceLoginCommand = defineCommand({
-	meta: {
-		name: "login",
-		description: "Log in to the EmDash Marketplace via GitHub"
-	},
-	args: { registry: {
-		type: "string",
-		description: "Marketplace registry URL",
-		default: DEFAULT_REGISTRY
-	} },
-	async run({ args }) {
-		const registryUrl = args.registry;
-		const existing = getMarketplaceCredential(registryUrl);
-		if (existing) {
-			consola.info(`Already logged in as ${pc.bold(existing.author?.name ?? "unknown")}`);
-			consola.info("Use `emdash plugin logout` to log out first.");
-			return;
-		}
-		const result = await authenticateViaDeviceFlow(registryUrl);
-		saveMarketplaceCredential(registryUrl, {
-			token: result.token,
-			expiresAt: new Date(Date.now() + 30 * 86400 * 1e3).toISOString(),
-			author: {
-				id: result.author.id,
-				name: result.author.name
-			}
-		});
-		consola.success(`Logged in as ${pc.bold(result.author.name)}`);
-	}
-});
-const marketplaceLogoutCommand = defineCommand({
-	meta: {
-		name: "logout",
-		description: "Log out of the EmDash Marketplace"
-	},
-	args: { registry: {
-		type: "string",
-		description: "Marketplace registry URL",
-		default: DEFAULT_REGISTRY
-	} },
-	async run({ args }) {
-		if (removeMarketplaceCredential(args.registry)) consola.success("Logged out of marketplace.");
-		else consola.info("No marketplace credentials found.");
-	}
-});
-
-//#endregion
-//#region src/cli/commands/plugin.ts
-/**
-* emdash plugin
-*
-* Plugin management commands grouped under a single namespace.
-*
-* Subcommands:
-* - init: Scaffold a new plugin
-* - bundle: Bundle a plugin for marketplace distribution
-* - validate: Run bundle validation without producing a tarball
-* - publish: Publish a plugin to the marketplace
-* - login: Log in to the marketplace via GitHub
-* - logout: Log out of the marketplace
-*
-*/
-const pluginCommand = defineCommand({
-	meta: {
-		name: "plugin",
-		description: "Manage plugins"
-	},
-	subCommands: {
-		init: pluginInitCommand,
-		bundle: bundleCommand,
-		validate: pluginValidateCommand,
-		publish: publishCommand,
-		login: marketplaceLoginCommand,
-		logout: marketplaceLogoutCommand
-	}
-});
-
 //#endregion
 //#region src/cli/commands/schema.ts
 /**
@@ -4900,6 +4047,7 @@ const seedCommand = defineCommand({
 		};
 		consola.start("Applying seed...");
 		try {
+			await claimExplicitSeedOwnership(db, seed);
 			const result = await applySeed(db, seed, options);
 			consola.success("Seed applied successfully!");
 			consola.log("");
@@ -6497,7 +5645,6 @@ runMain(defineCommand({
 		search: searchCommand,
 		taxonomy: taxonomyCommand,
 		menu: menuCommand,
-		plugin: pluginCommand,
 		site: siteCommand
 	}
 }));