feat: admins comment on Drop's own pages, and agents fix what they say

doctor.config.ts

@@ -17,5 +17,17 @@ export default defineDoctorConfig({
       reason:
         "ViteHub wraps this dependency handler in withConsoleAccess with section auth and user required. Doctor cannot follow that wrapper. test/auth/console-runtime.mjs verifies signed-out and non-admin requests are denied by the built Worker.",
     },
+    {
+      ruleId: "nuxt/middleware/no-route-middleware-api-security",
+      file: "node_modules/*/vite-hub/dist/console/runtime/server/page-session.js",
+      reason:
+        "Public page-tool discovery filters every tool through its allowed callback: Console uses consoleAllowsRequest, and Comments checks Console access and read permission. Denied or failed checks expose no tool. Doctor cannot follow the bundled dispatcher.",
+    },
+    {
+      ruleId: "nuxt/middleware/no-route-middleware-api-security",
+      file: ".vitehub/nitro/comments/page-session.mjs",
+      reason:
+        "Generated re-export of the same public page-tool discovery handler. Comments checks Console section access and read permission in its allowed callback; denied or failed checks expose no tool. Doctor cannot follow the re-export and callback.",
+    },
   ],
 })

drizzle.config.ts

@@ -3,5 +3,6 @@ import { defineConfig } from "drizzle-kit"
 export default defineConfig({
   dialect: "sqlite",
   out: "./server/databases/migrations",
-  schema: "./server/databases/config.ts",
+  // ./comments.ts holds the tables that ViteHub Comments adds to the Database at runtime.
+  schema: ["./server/databases/config.ts", "./server/databases/comments.ts"],
 })

package.json

@@ -84,7 +84,7 @@
     "stripe": "22.6.2",
     "tailwindcss": "4.3.3",
     "valibot": "^1.4.2",
-    "vite-hub": "https://pkg.pr.new/vite-hub/vitehub/vite-hub@cf2778c0b3fb5808286605cb59bb2092d414ff1f",
+    "vite-hub": "0.1.0",
     "vue": "3.5.44",
     "vue-router": "5.4.0",
     "yjs": "13.6.33"

patches/nitro@3.0.261029-rc.patch

@@ -1,8 +1,15 @@
 diff --git a/dist/_build/common.mjs b/dist/_build/common.mjs
-index 3e20579..5915eb1 100644
 --- a/dist/_build/common.mjs
 +++ b/dist/_build/common.mjs
-@@ -8469,7 +8469,8 @@ function libChunkName(id) {
+@@ -3862,6 +3862,7 @@
+ }
+ function resolveNitroPath(path, nitroOptions, base) {
+ 	if (typeof path !== "string") throw new TypeError("Invalid path: " + path);
++	if (nitroOptions.virtual && path in nitroOptions.virtual) return path;
+ 	path = _compilePathTemplate(path)(nitroOptions);
+ 	for (const base in nitroOptions.alias) if (path.startsWith(base)) path = nitroOptions.alias[base] + path.slice(base.length);
+ 	if (/^[#\u0000]/.test(path)) return path;
+@@ -8469,7 +8470,8 @@
  function libChunksGroup() {
  	const group = {
  		test: NODE_MODULES_RE$2,
@@ -12,7 +19,7 @@ index 3e20579..5915eb1 100644
  	};
  	Object.defineProperty(group, "debugName", { value: "libs" });
  	return group;
-@@ -8481,6 +8482,10 @@ function pathToPkgName(path) {
+@@ -8481,6 +8483,10 @@
  }
  function getChunkName(chunk, nitro) {
  	if (chunk.name === "rolldown-runtime") return "_runtime.mjs";